# com.tomorrowcentral/aws-cloud-cost-sentinel AWS pricing and cost estimates with no signup, plus read-only idle-resource scans of your account. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.2.0 - **Author:** com.tomorrowcentral - **License:** Unknown - **Endpoints:** streamable-http https://api.tomorrowcentral.com/mcp - **Source:** https://tomorrowcentral.com/agents - **Endpoint health:** reachable (last checked 2026-09-25T05:25:12.377Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-25T05:25:12.377Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 20 declared. Observed from a live `tools/list` probe. - `get_job` — Check the status of a Tomorrow Central job. Poll this after starting any scan. Status goes QUEUED → RUNNING → COMPLETED (or FAILED). A typical scan takes 1-3 mi - `get_job_result` — Get the full raw result of a COMPLETED job. Returns an error telling you to keep polling if the job hasn't finished. The result contains data read from the user - `list_connections` — List the cloud accounts this API key can scan, with their status. Only a connection with status CONNECTED or VERIFIED can be scanned. PENDING means the human ha - `get_connection` — Get one cloud account connection: status, region, and last error if any. - `create_cloud_connection` — Start linking a cloud account so it can be scanned. `provider` is "aws", the only provider supported today; `account_id` is the 12-digit AWS account number. Thi - `verify_connection` — Check whether the read-only role for a connection exists yet and mark it VERIFIED if so. Expect this to fail while the human's CloudFormation stack is still cre - `list_tools_available` — List the Tomorrow Central tools this platform offers (id, name, what it does). - `whoami` — Identify the account this API key belongs to, and its plan. Useful for confirming the key works before doing real work. - `report_feedback` — Report, in plain English, something Tomorrow Central could not do, did badly, or documented unclearly. Use this when you hit a wall: a capability that does not - `submit_rating` — Rate a result you were given, from 1 (useless) to 5 (exactly what was needed). `rating_token` comes back alongside the result itself, from get_job_result or lis - `run_cost_scan` — Start a cloud cost / FinOps scan of a linked account and return a job_id. Use this when the user wants to find idle, unused or underutilized cloud resources, re - `list_cost_findings` — Get the findings from a completed cost scan, newest analysis first. Call this once `get_job` reports COMPLETED. Returns, per finding: `kind` (e.g. nat_gateway, - `price_lookup` — Look up current AWS on-demand list prices. No account, key or signup needed. Use this to answer "what does X cost", to sanity-check a bill, or to price a design - `compare_regions` — Compare the same thing's price across AWS regions, cheapest first. Use this when a user asks where something is cheapest, or what moving a workload to another r - `list_priced_services` — The services and regions `price_lookup` can answer for, plus how current the book is. Call this first if a lookup returned nothing and you want to check the ser - `estimate_cost` — Price a list of cloud components at real list prices. No account or signup. Use this when the user can name the pieces: "two m5.large servers, a Postgres databa - `compare_architectures` — Price every shape that delivers a capability, and say where they cross over. This is the tool for "should we move to serverless", "is Lambda cheaper than EC2", - `describe_workload` — Price a workload described the way a person would describe it. Use this when the user does not know cloud: "a website with a database for my shop", "an API for - `where_can_this_run` — Apply requirements FIRST, then price only the regions that survive. Use this for "the data has to stay in India", "we cannot use US-owned jurisdictions", "our u - `list_cost_building_blocks` — Everything the estimator can be asked about, by name. Call this BEFORE the other estimator tools. They select from a closed set and reject anything else, so a n ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"aws-cloud-cost-sentinel\": {\n \"type\": \"http\",\n \"url\": \"https://api.tomorrowcentral.com/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.tomorrowcentral%2Faws-cloud-cost-sentinel - Install plan: https://forgeregistry.com/api/v1/packages/com.tomorrowcentral%2Faws-cloud-cost-sentinel/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.tomorrowcentral%2Faws-cloud-cost-sentinel - HTML page: https://forgeregistry.com/registry/com.tomorrowcentral%2Faws-cloud-cost-sentinel - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.