AI assistant access to production systems

A FinOps MCP server's safety property is the absence of a write handler

One practitioner's design contract for wiring an assistant to cloud cost data: four read tools, no mutate handlers, and a database role that makes the guarantee instead of the prose.