CloudPouch 2.0.0

Agentic FinOps brings your AI assistant into your AWS cost savings. A Savings Workspace collects the findings, a permanent Free plan lets anyone start, and an embedded MCP server answers from your own cost data.

Highlights

• Savings Workspace. One Savings Scan analyzes every supported AWS service for a profile and turns the result into an Overview, a savings flow diagram, a filterable Opportunities list with evidence, and a saved History.
• CloudPouch Free, the new basic plan. It is permanent and costs nothing. The Billing view, with its cost charts, anomalies and per-service and per-region breakdowns, is fully available, and full Savings Scans show summary-level savings.
• 7-day Pro trial. Per-resource opportunities with evidence, full run history and export: the trial unlocks the full Pro feature set for 7 days from registration and needs no credit card.
• Agentic FinOps with MCP. An embedded MCP server, disabled by default and reachable only from your own computer, lets Claude Code, Claude Desktop, Cursor, Codex and Kiro answer from your local CloudPouch data. Nothing in your AWS account is changed by it.
• More ways to connect to AWS. Profiles created by aws login and profiles that use credential_process helpers such as aws-vault work across Billing, Compare, Cost Insights and Savings Scan.

Savings Workspace

Open it from the header's Billing | Savings | Compare switch or with Cmd/Ctrl + S. Three tabs, Overview, Opportunities and History, cover one AWS profile and one timeframe at a time: Current month or Previous month, with Previous month selected when Savings opens.

• Run Savings Scan analyzes every supported AWS service for the selected profile in one pass, with a live progress panel and the option to cancel. Single-service Cost Insights keep working as before.
• Scans start from the workspace, the Billing floating action button, the Start Savings Scan menu command or the Potential savings cell on Billing. With no profile selected, the Cmd/Ctrl + K picker opens, and choosing a profile starts the scan.
• The Overview tab shows monthly cost with a green potential-savings percentage, a Top finding callout, a strip naming profile, timeframe, scan time and cost basis, and the savings flow diagram (Service → Finding → Solution, seven layout presets, a Flow/List toggle and click-to-pin drill-down).
• Opportunities (Pro) lists every finding with service, resource, finding, recommended solution and estimated monthly saving, plus search, filter chips and 100 rows per page. Opening a finding shows the evidence behind it and the recommended action, for EBS, EBS snapshots, RDS, EC2 Compute, EC2 Other/NAT Gateway, ELB, Lambda, CloudWatch, S3, EFS, ECR, DocumentDB, VPC, EKS, DynamoDB and Glue.
• History saves every scan locally, per profile, with timestamp, status and total savings. Saved runs can be opened, exported and deleted, and only processed findings are stored, never the raw data pulled from AWS.
• Entering the workspace opens the newest saved run of the profile. An older run opens as a snapshot, with a banner that offers the newer one.
• When a scan finishes while you are on Billing, a summary dialog lists how many services were analyzed (failed, permission-blocked and excluded services included), the total estimated monthly savings and a per-service breakdown. Stay in Billing and Open in Savings follow. The dialog replaces the old Cumulative Savings panel.
• Coverage and Permission issues panels keep "nothing to optimize" apart from "CloudPouch could not check this", naming the service, region, API operation and AWS error code behind each permission issue.

Free, Pro and the Pro trial

• CloudPouch Free is the permanent basic plan and costs nothing. It runs full Savings Scans and shows the Overview, the savings flow with an aggregate-only drill-down ("Upgrade to Pro to see the affected resources" instead of resource names), per-service savings totals and a summary history of your runs.
• Pro includes the full feature set. On top of Free, it adds the per-resource Opportunities list, opportunity evidence, full run history and run export.
• The Pro trial is Pro for 7 days, counted from registration, with no credit card. An email address is required to create the account. A header chip shows the days left and turns red for the last three days.
• Choosing Free or the Pro trial in the app starts a two-step registration: you enter your own email address and agree to the terms and conditions, then type the 6-digit code from the email. After that, the license key appears in the app by itself, and the email you receive carries a copy of the key, for example for use on a new computer.
• A Pro license bought directly arrives by email.
• When a trial ends, the app moves to Free automatically. The next start shows a one-time notice: Savings Scans and the MCP server keep working with summary-level savings, and per-resource detail is locked.

Agentic FinOps: your AI assistant and your AWS costs

CloudPouch serves its own cost and savings data over the Model Context Protocol from the running application, so an assistant answers from your numbers instead of a general guess.

• Turn it on in Settings → MCP Server, also reachable from the header gear menu. Settings → AI assistants has a section per assistant with copy-ready setup cards for Claude Code, Claude Desktop, Cursor, Codex and Kiro. Config-file cards add an Open config file button, and CloudPouch never writes another application's files.
• Safeguards: the server is disabled by default, listens only on 127.0.0.1 (port 52700), requires a locally generated token that Settings shows masked, guards against DNS-rebinding and cross-origin abuse, and runs only while CloudPouch runs. It does not change anything in your AWS account and never exposes your AWS credentials.
• Twelve tools: nine data tools read CloudPouch's local data (status, profiles, cost summary, two month-to-month compare tools, savings summary, run history, opportunities, and one opportunity with its evidence). Three action tools: two trigger CloudPouch's own data collection (refresh cost data, run a Savings Scan), and the third checks scan status.
• On Free, an assistant can use status, profiles, cost summary, both compare tools and a summary-level savings summary. Run history, opportunity list and opportunity detail are Pro, and a Free caller receives an explicit upgrade message. Action tools work on every activated plan, Free included.
• A forced cost refresh sends a new Cost Explorer request, while an unforced repeat serves cached data. The compare tools reuse the Compare screen's own logic, so the numbers match what you see.
• Claude Desktop connects through the documented mcp-remote bridge and needs Node 18 or newer. The Claude Code command registers the server once per user.

Sign in to AWS your way

• Profiles created by aws login appear in the sidebar, including on machines without a ~/.aws/credentials file. Credentials refresh during long operations, and CloudPouch never reads or stores your refresh token. These profiles need AWS CLI 2.32.0 or newer.
• When an aws login session expires, a message names the profile and the exact command, aws login --profile <name>, with a Copy button.
• Helpers that supply credentials through credential_process (aws-vault, granted, saml2aws and custom corporate helpers) are run the way the AWS CLI runs them, without a shell, and their short-lived credentials are refreshed on expiry. Role profiles over a helper-backed or login-backed source profile work too, including multi-hop chains.
• Supported profile shapes are listed at https://docs.cloudpouch.dev/reference/credential-helpers/
• Static-key, assume-role and IAM Identity Center (SSO) profiles behave exactly as before.

Billing and interface

• The Billing Overview opens with a FinOps strip: Total period cost, Spend trend (6 months), Potential savings and a banded Cost efficiency score that is withheld when a run was partial.
• A redesigned header carries the view switch, timeframe buttons and a gear menu. Cmd/Ctrl + A, S and D jump to Billing, Savings and Compare.
• Settings → Appearance adds Light, Dark and System modes. The window is now two-pane, and Settings → Profiles hides any AWS profile without touching your AWS config files.
• Six-month cost history loads cache-first and refreshes in the background, and duplicate Cost Explorer requests are combined.
• The "Cached data outdated!" message no longer asks you to refresh data you just downloaded.
• Reload AWS Profiles (Cmd/Ctrl + R) refreshes the profile list without reloading the app.

Corporate networks and diagnostics

• Settings → Certificates points CloudPouch at your organization's CA bundle (PEM) when your network inspects HTTPS traffic. The same chooser appears on the login screen and in the registration dialog, and TLS trust failures now say what they are.
• Send error report… appears when something actually goes wrong. An optional note and a View the data preview of exactly what will be sent come first. A wrong or expired license key gets no such button.
• Known errors link to the matching page on docs.cloudpouch.dev.
• The application log no longer records secrets such as the license key or the registration email.

Privacy and data

CloudPouch analyzes your AWS costs on your own computer and sends no telemetry; what does leave your machine, and when, is listed at https://docs.cloudpouch.dev/concepts/privacy-and-data-handling/

Fixes and improvements

• Unused load balancers are counted once in the ELB Cost Insights savings total and "to delete" count, where they were counted twice before. The totals can therefore be lower than in 1.49.0. Per-row advice is unchanged.
• DocumentDB opportunities in the Savings Workspace carry their own estimated monthly saving per instance wherever the recommendation engine supplies one, and the per-row values add up to the savings totals the engine already reported.
• The EBS Volume Type Advisor no longer suggests HDD types (st1/sc1) for root volumes, a change AWS rejects. A Bootable value now shows in the advisor and in opportunity details.
• An Elastic IP still attached to a stopped EC2 instance reads Investigate instead of Terminate, and saved runs show the corrected label without a rescan.
• EC2 instance specifications now cover 1,407 instance types, so modern instance families show family, vCPU and memory everywhere.
• Savings opportunities on Auto Scaling groups show the readable type "Auto Scaling group".
• Cost totals include the first day of the period. For users at UTC offset zero or below, Previous month, Last six months and Year used to start on the 2nd, so these totals rise slightly and now match the AWS Cost Explorer console.
• Bulk Savings Scans with very large results, tested at 50,000 opportunities, complete with the run saved. Selected large Cost Insights tables use a bounded scroll viewport above 200 rows, rendering the visible range with a small buffer.
• Cost data cached by CloudPouch 1.49.0 or newer is reused after the upgrade instead of being fetched again.
• If CloudPouch cannot read its configuration at the moment you change a setting such as the certificate path, hidden profiles or the MCP server, the change fails visibly and nothing is overwritten.
• A transient error from the licensing service is retried instead of stopping you at the login screen, and your license key shows masked in Settings with Show and Copy actions.

Upgrading from 1.x

• The first start deletes the old log files once, because earlier versions logged values that the new log omits.
• Cost totals for earlier months may rise slightly after the first-day correction described above, and cached data is corrected with one extra fetch per profile and timeframe.
• A 1.x customer license keeps working unchanged as Pro.

Install

• macOS: download the DMG from https://cloudpouch.dev, or run brew install cloudpouch.
• Windows: download the EXE installer from https://cloudpouch.dev.
• Linux: download the AppImage from https://cloudpouch.dev.
• Requirements: macOS 12 or newer, Windows 10 or newer. First launch opens the Login screen: start your 7-day Pro trial, no credit card needed, or begin with a free account.

Links

• Website: https://cloudpouch.dev
• Documentation: https://docs.cloudpouch.dev
• Savings Workspace: https://docs.cloudpouch.dev/concepts/savings-workspace/
• Free and Pro plans: https://docs.cloudpouch.dev/concepts/free-and-pro-plans/
• MCP server: https://docs.cloudpouch.dev/concepts/mcp-server/ and https://docs.cloudpouch.dev/reference/mcp-tools/
• Installation: https://docs.cloudpouch.dev/getting-started/install-cloudpouch/
• Known limitations: https://docs.cloudpouch.dev/reference/limitations/