AWS Billing MCP server: setup & sharing

Cost, budget, and anomaly analysis for remote teammates — every Cost Explorer query bills about a cent.

Run on your machine

Start the server on your host machine. Tools not listed in --allow are completely hidden from the agent.

Terminal · Host machine

npx -y @mcpwire/cli share \
  --name aws-billing \
  --allow "status,cost-explorer,cost-comparison,cost-anomaly,budget,free-tier-usage,storage-lens,compute-optimizer,cost-optimization" \
  --redact-secrets \
  -- uvx awslabs.billing-cost-management-mcp-server==0.0.42

Exposes 9 default tools with pattern-based secret redaction. Optionally set an expiry with --ttl 30m, prompt for approvals with --confirm, or limit calls with --max-calls 20.

Connect your teammate’s agent

MCPWire prints a unique wire://... ticket in your terminal. Send it privately to your teammate to paste into their MCP client:

Claude Desktop · Cursor · Windsurf config

{
  "mcpServers": {
    "aws-billing": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpwire/cli",
        "join",
        "wire://<TICKET_FROM_HOST>"
      ]
    }
  }
}

Replace <TICKET_FROM_HOST> with the active session ticket. The agent can only discover and call the tools exposed above.

Scoped tool permissions

MCPWire acts as a Layer 7 JSON-RPC firewall. Requests for blocked tools are dropped on the wire before ever touching your machine.

Tool	Default Policy	Notes
`status`	Allowed	Reports the configured identity and billing views.
`cost-explorer`	Allowed	Cost and usage queries grouped by service, region, or tags (action-based).
`cost-comparison`	Allowed	Compares spend between two periods and lists the top change drivers.
`cost-anomaly`	Allowed	Lists cost anomalies and their root causes.
`budget`	Allowed	Reads budgets and their status against actual spend.
`free-tier-usage`	Allowed	Tracks Free Tier usage.
`storage-lens`	Allowed	S3 storage metrics and cost breakdowns (action-based).
`compute-optimizer`	Allowed	Right-sizing recommendations for EC2, Lambda, and EBS.
`cost-optimization`	Allowed	Cost Optimization Hub recommendations.
`session-sql`	Blocked (Review)	Runs SQL over data fetched earlier in the same session.

Test and verify

Try these recommended prompts to confirm the agent receives expected outputs and that restricted actions fail safely.

Try AWS Billing

Configure AWS credentials on the host the usual way — AWS_PROFILE for a named profile or the standard environment chain — with read-only Billing and Cost Management permissions (ce:GetCostAndUsage, ce:GetDimensionValues, ce:GetTags, budgets:ViewBudget, and related read actions). This is the official AWS Labs server, the successor to the archived cost-explorer server.

Ask the agent what identity it sees with status, then break down spend with cost-explorer (for example, costs by service for last month) or compare two months with cost-comparison. Nothing here writes to your AWS account, but Cost Explorer API calls cost roughly $0.01 each, so wide date-range queries add up. session-sql stays outside the default allowlist.

The generated command above contains the catalog’s explicit default allowlist. Check the guest’s tool list before making calls and use the server’s argument schema for required fields. See the CLI guide for guest configuration and session controls for approvals, redaction, and expiry.

Review the session in your browser: Add --record session.wirelog to your host command. Drop the resulting file into the Session Replay Viewer to inspect timestamps, latency, blocked attempts, and secret scrubbing.

← All server guides Open in command builder