Skip to main content
Your progress
0 of 4 lessons complete0%
T6 / M6.1 / L1 OF 4 / Engineer TIER / 9 min

What MCP is in one page

Outcome

By the end of this lesson, you will be able to explain what MCP (Model Context Protocol) is without jargon, identify the tool surface ZopNight exposes, and reason about why a default-read posture with an opt-in write tier is the right tradeoff for cloud cost.


TierEngineer
JTBD”Understand MCP well enough to set up a useful workflow without misunderstanding what it can and cannot do.”
PersonasPlatform Engineer · FinOps Analyst · Engineering Leader
PrerequisitesT0 (foundations) · T1 (ZopNight surface awareness)
Time9 minutes
Bloom verbExplain (Understand), Identify (Remember), Reason (Analyze)

1. Concept

MCP, Model Context Protocol, is an open protocol that connects AI assistants (Claude Desktop, Cursor, Codex, Claude Code) to data sources and tools. It lets an AI agent call functions on a service after authentication, returning structured results the AI can reason about. Anthropic published MCP as an open spec in late 2024; ZopNight implements it as a read-only data adapter.

Terminal window
WITHOUT MCP:
Engineer asks Claude: "What's our biggest idle resource?"
Claude: "I don't have access to your cloud data."
Engineer: pastes data manually into the conversation
(slow, error-prone, doesn't scale, no chain calls)
WITH MCP:
Engineer asks Claude: "What's our biggest idle resource?"
Claude (via MCP): calls list_idle_resources on ZopNight
Claude: "i-0xyz123 has been stopped for 47 days, costs $69/month
in attached EBS volumes alone."
On a default-configured organisation the agent has read access only, which is what makes this walkthrough safe to try on production data.
The engineer never leaves the conversation.

Why this matters in 2026

Before MCP, AI assistants were limited to what the engineer could paste. With MCP, the agent’s knowledge boundary shifts; it can query real systems, get current data, and answer with specifics rather than generalities. For cloud cost in particular, this changes the workflow: engineers ask their AI assistant questions about real infrastructure rather than navigating the dashboard.

What ZopNight’s MCP server exposes

The MCP server exposes roughly 119 tools, of which about 85 are reads and about 34 are mutating, across these families:

Terminal window
TOOL FAMILIES (about 119 tools: ~85 read, ~34 mutating)
─────────────────────────────────────────────────────
Resources Costs / billing Recommendations
Schedules Overrides Teams / showback
Budgets Audit logs Cloud accounts
Notifications Organisation Billing sync
─────────────────────────────────────────────────────
TOTAL: about 119 tools, roughly 85 read and 34 mutating.
Per-family counts move as tools are added; the MCP catalog is
the source of truth. What a given caller sees is narrower: the
advertised tool list is filtered at the gateway to exactly the
tools that caller is allowed to call, so discovery and
authorisation always agree.

The full list is documented at docs.zopnight.com/mcp. New tools land per release.

The contract

Reads are always available. Writes are opt-in per organisation and off by default, so an agent connected to a default-configured organisation can observe the estate and change nothing.

Terminal window
WRITE TIER (per organisation, default none):
none reads only. The default.
metadata-only descriptive changes
reversible actions that can be undone
irreversible destructive actions; additionally requires a
token bound to the organisation
Enforced at the gateway, together with the caller's live role
and the token's own scope. A global kill switch sits above all
of it and is off by default.

Some capabilities are never exposed at any tier: role and user management, organisation and cloud-account deletion, credential access, and bulk actions. No tool returns a configuration secret.

The important architectural point is where the decision is made: the gateway resolves it, and the MCP server itself holds no authorisation logic. That is covered fully in the module on what is not writable via MCP.

Why MCP matters (the engineering case)

Two practical reasons MCP changes the workflow:

Terminal window
1. NATURAL LANGUAGE INTERFACE
Engineers ask questions in their IDE, chat, or CLI without
switching contexts. The AI assistant becomes a query layer over
ZopNight. "Show me the biggest cost growth this week" is faster
than navigating to Reports → Cost Trend → filter.
2. AGENT COMPOSITION (chain calls)
Agent chains MCP calls with other tools:
"Find the top idle EC2 instance.
Look up the owner from the tag.
Draft a Slack message asking them about it."
Three calls, three different systems, one conversation.
The MCP server gives the agent the data; agent chains it
with Slack, source-control, ticketing systems.

Architecture

Terminal window
Claude Desktop / Cursor / Codex / Claude Code
↓ (MCP protocol: JSON-RPC over stdio or HTTP/SSE)
ZopNight MCP server (process running locally or hosted)
↓ (PAT-authenticated, gRPC)
ZopNight backend (Config, Discoverer, Aggregator, Recommender, Executor)

The MCP server is a stateless proxy. PAT-authenticated. Routes calls to the right backend service. No customer data is stored on the MCP server itself: every call retrieves fresh data from the backend.

Where MCP runs (local vs hosted)

Terminal window
LOCAL (default):
The MCP server runs as a process on the engineer's machine
Started by their AI tool (Claude Desktop, Cursor, etc.)
PAT is read from local environment variable
Tool calls happen over local stdio
HOSTED (enterprise):
ZopNight runs the MCP server on its infrastructure
AI tool connects over HTTPS + SSE
PAT authentication via OAuth handshake
Customer's AI tool can call the hosted server from anywhere
(still subject to the org's MCP toggle in M6.3)

Most customers use the local mode. Hosted is available for enterprise teams that need centralized control.

MCP vs API

Terminal window
RAW ZOPNIGHT API: MCP:
Direct REST/gRPC calls Through AI assistant
Engineer writes code Engineer asks in natural language
Used by: integrations, custom tools Used by: agent workflows
Read + write Read by default; writes
opt-in per organisation
Both are available. MCP is the agent-friendly path; API is the
programmer-friendly path. They share the same underlying data.

How ZopNight uses MCP internally

ZopNight engineers use MCP to query their own ZopNight installations during product development. The dogfooding matters; the team uses MCP daily, which catches usability issues fast and ensures the tool surface is curated for real workflows.


2. Demo

A typical engineer’s session with MCP connected:

Terminal window
ENGINEER IN CURSOR (MCP connected to ZopNight):
Engineer: "What's our biggest idle resource right now?"
Cursor (via MCP):
Calls list_idle_resources, sort by cost
Returns: 12 idle EC2 instances
Response: "i-0xyz123 (m5.2xlarge, stopped 47 days, $69/mo) is
the biggest single idle resource. Combined idle: $810/mo."
Engineer: "Get the top 10 recommendations by savings."
Cursor (via MCP):
Calls get_top_recommendations(limit=10, sort=savings)
Returns: 10 recommendations
Response: "Top 10 by potential savings:
1. Right-size i-0abc → $1,200/mo
2. Terminate i-0def (idle 60d) → $480/mo
... (full list)
Total potential: $4,800/mo"
Engineer: "Describe the business-hours-eu schedule."
Cursor (via MCP):
Calls describe_schedule("business-hours-eu")
Returns: cron config, attached resources, recent firings
Response: "business-hours-eu fires 8AM and 8PM Mon-Fri Europe/London.
Attached to 14 resources in the eu-west-1 region.
Last 5 firings all succeeded. No overrides active."
Engineer: "Show me overrides created in the last week."
Cursor (via MCP):
Calls list_audit_logs(filter={action: "override_create",
time: "7d ago"})
Returns: 3 override creations
Response: "3 overrides created in the past week:
1. jane@platform on 2026-05-15 (24h override on dev-eks)
2. bob@product on 2026-05-17 (override on staging-rds)
3. alice@data on 2026-05-19 (until-cancel on ml-cluster)
One of these (alice's) is still active: worth a check."
The engineer never opens the ZopNight UI. The AI assistant is
the working surface; ZopNight is the data layer.

3. Hands-on (5 min)

Identify which AI tool your team uses:

Terminal window
YOUR AI TOOL:
□ Claude Desktop
□ Cursor
□ Codex (GitHub Copilot, OpenAI Codex CLI)
□ Claude Code
□ None of the above
□ Multiple
WHO USES IT:
□ All engineers
□ Some engineers (~__%)
□ FinOps team specifically
□ Pilot phase
MCP READINESS:
Does your AI tool support MCP? Yes / No / Unsure
Is MCP enabled at the user level? Yes / No / Unsure
PLAN to connect:
□ Set up MCP for one engineer as pilot
□ Enable org-wide (covered in M6.3)
□ Defer until later (acceptable; not all teams need this yet)

If your team doesn’t use any AI tool with MCP support, this track is still relevant background: but the practical setup waits until you adopt one.


4. Knowledge check

Q1

MCP enables AI agents to:

A. Modify cloud resources (start/stop, scale, delete)
B. Query ZopNight through the tools its token is allowed to call. Reads are always available; mutating tools exist but are opt-in per organisation and off by default, so on a default-configured org the agent answers questions and drafts changes while a human executes them.
C. Replace dashboards
D. Random

Show answer

Correct: B. Reads always, writes only if the organisation has opted in. A is wrong as a default but is not impossible: it is what the highest write tier allows, and that tier needs an organisation-bound token on top of the opt-in.

Q2

A natural-language query about cost savings from an engineer:

A. Must reference the dashboard
B. The agent calls MCP tools (list_idle_resources, get_top_recommendations) and answers in natural language with specifics. No manual data copying; no dashboard navigation. The AI assistant becomes the query layer over ZopNight.
C. Requires manual paste from the UI
D. Random

Show answer

Correct: B. Agent + MCP eliminates manual paste. The dashboard remains available; MCP just routes around it for query-style workflows.

Q3

ZopNight’s MCP server is:

A. Read-only, hardcoded, with no configuration
B. Read by default, with writes configurable per organisation across four tiers (none, metadata-only, reversible, irreversible) and a global kill switch above them that is off by default. Agents can hallucinate, so the write surface is something an organisation opts into deliberately rather than something it inherits.
C. Random
D. Customizable per-tier

Show answer

Correct: B. Configurable, not hardcoded, and the decision is enforced at the gateway rather than inside the MCP server. Note what stays off the table at every tier: role and user management, organisation and cloud-account deletion, credentials, and bulk actions.


5. Apply

Read the MCP server’s full tool documentation at docs.zopnight.com/mcp. Set up the server in your preferred AI tool (M6.2 covers each tool). Authenticate with a PAT (M6.3 covers PAT management).

To turn the workflows you repeat into saved, shareable prompts, see M6.4.


Glossary terms touched

MCP · Model Context Protocol · PAT · Tool call · Read-only contract


Start with the bill.

Foundations takes about five hours. The first lesson is nine minutes.

Open curriculum. No login. No paywall. 237 lessons across 7 courses, three publicly verifiable credentials. Read it on the train, take the exam on a Saturday, list the credential on your résumé Monday.

5h median time to finish Foundations
0 logins, paywalls, or marketing forms
open curriculum, public credential verifier
Multi-cloud automation· Production-ready in 30 min· SOC 2 · ISO 27001· 30% average cloud cost cut· 4 platforms · 1 console· Multi-cloud automation· Production-ready in 30 min· SOC 2 · ISO 27001· 30% average cloud cost cut· 4 platforms · 1 console·