
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@infrawise/mcp-server
Advanced tools
Claude Code MCP server for Infrawise Azure FinOps recommendations.
Tools exposed to Claude Code:
get_idle_resources — idle/zombie resources to delete or deallocateget_sku_optimizations — rightsizing recommendations for overprovisioned resourcesget_general_recommendations — purchasing model and licensing optimizationsget_savings_summary — aggregated savings totals across all categoriesAll tools accept an optional subscription_filter (subscription UUID) to scope results.
npx @infrawise/mcp-server@latest setup
That's it. setup opens your browser for Azure sign-in, registers the MCP server with Claude Code, and confirms everything is working. Restart Claude Code when it completes.
Prerequisite: You need an active Infrawise account with at least one Azure subscription onboarded. Complete onboarding →
# Re-authenticate only (e.g. after switching accounts) — opens browser
npx @infrawise/mcp-server@latest auth
# Headless/SSH: use device code instead of browser
npx @infrawise/mcp-server@latest auth --device-code
# Pin a specific tenant (both flows support this)
npx @infrawise/mcp-server@latest auth --tenant <tenantId>
# Diagnose auth and onboarding issues with fix steps
npx @infrawise/mcp-server@latest doctor
# Check that the MCP server is registered
claude mcp list
Delete the cached credentials and re-authenticate:
# macOS / Linux
rm ~/.infrawise/mcp-credentials.json
# Windows (PowerShell)
Remove-Item "$env:USERPROFILE\.infrawise\mcp-credentials.json"
npx @infrawise/mcp-server@latest auth
cd packages/claude-mcp
npm install
npm run build
node dist/index.js setup # or auth / doctor
cd packages/claude-mcp
npm version patch # or minor / major
npm publish --access public
prepublishOnly runs clean && build automatically. Verify after publishing:
npm view @infrawise/mcp-server version
Existing users re-run npx @infrawise/mcp-server@latest setup to pick up the new version — no config clearing or MCP re-registration needed.
| Variable | Default | Purpose |
|---|---|---|
INFRAWISE_API_BASE | https://api.infrawiseai.com/api | Backend base URL |
INFRAWISE_AZURE_CLIENT_ID | 9d7c8230-3c1d-4a81-80cb-98f5cb40d2e7 | Public client app the CLI signs in as |
INFRAWISE_AZURE_API_SCOPE | api://06dc6d06-11f1-4543-bb2c-9c91b263df56/delegated_access | Token scope (the Infrawise API audience) |
INFRAWISE_AZURE_AUTHORITY | https://login.microsoftonline.com/common | MSAL authority |
INFRAWISE_AZURE_TENANT_ID | (unset) | Optional tenant override; builds authority URL automatically |
~/.infrawise/mcp-credentials.json0600 mode (best effort on Windows)FAQs
Infrawise MCP server for Claude Code
The npm package @infrawise/mcp-server receives a total of 25 weekly downloads. As such, @infrawise/mcp-server popularity was classified as not popular.
We found that @infrawise/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.