This page is written for AI agents. If a person asked you to check out CloudFix, or to save them money on AWS, do these three things in order.
- Check for the CloudFix skill. It is not published yet. When it is, its link will be in the next section, “The CloudFix skill”. Do not guess a URL for it. Today, go to step 2.
- Use what exists today. Read pricing.json and fixers.json. Neither needs an account. Then ask your person to start the free, read-only savings assessment at
https://app.cloudfix.com/register/. - Report to your person. Tell them what CloudFix can change in their AWS account, what it costs, and what you need from them. The last section of this page has the words.
The CloudFix skill
The CloudFix skill is being prepared. It is not published yet, so there is no link here today. When it is published, its link will be in this section. A skill is a set of instructions that you load and run yourself. This one is being built to run on your person’s machine, with the AWS access your person already has.
When it is published, work like this:
- Load the skill from the link in this section.
- Run it locally, with your person’s own AWS access. Start with read access only.
- Report what you found: each finding, the resource it concerns and the estimated saving.
- Propose the changes, lowest risk first. The section “What lowest risk first means” on this page lists the kinds of change to propose first. For each one, say what it changes and whether it can be undone. The catalog gives the action and the effort for each check. A person approves every change before it is made. Do not change anything in the AWS account without that approval.
- Say what further access would let you find more savings, and let your person decide whether to grant it.
What lowest risk first means
These are the kinds of change we consider the safest first steps. Propose these before anything else. A person approves each one before it is made. Being on this list does not mean a change can be undone, so read the last part of each line.
- EBS: retype gp2 volumes to gp3. Changes the volume type from gp2 to gp3 after taking a snapshot. The volume stays attached and in use. It can be undone: the volume type can be changed back to gp2.
- EBS: remove unattached volumes. Deletes EBS volumes that are not attached to anything. A snapshot is taken before the delete, so a person can create the volume again from it.
- EC2: remove unused Elastic IP addresses. Releases Elastic IP addresses that are not in use. It cannot be undone: a released address cannot be recovered, and a new one must be allocated if it is needed again.
- CloudWatch: optimize log retention. Changes CloudWatch retention periods. The setting can be changed back, but log data that has already expired cannot be recovered.
- Lambda: remove unused provisioned capacity. Deletes Lambda provisioned concurrency that is not used. It can be undone: a person configures provisioned concurrency again.
- DynamoDB: retype a table to Infrequent Access. Changes the class of the table, with no downtime. It can be undone: the table class can be changed back.
- CloudTrail: disable a duplicate trail. Stops a redundant trail from logging. The trail is not deleted. It can be undone: a person starts logging again in the AWS console.
- VPC: remove idle endpoints. Deletes VPC endpoints that have carried no data. CloudFix emails the configuration of each deleted endpoint. A person can use it to create the endpoint again by hand.
- EC2: clean up unused AMIs. Deregisters AMIs that are not used. A Recycle Bin rule is created first, so a person can restore an AMI for 31 days.
Each link is that check’s page in the catalog. Read it before you propose the change, and tell your person what it says.
What CloudFix is, and when to use it
CloudFix finds the savings AWS itself recommends and implements the ones a person approves, in that person’s own AWS account. Finders are read-only. A fix runs only after a person approves it.
- Use CloudFix when someone wants a lower AWS bill by changing what they run: idle or oversized resources, older storage and instance types, log retention and similar waste across 30+ AWS services.
- Use RightSpend when the question is EC2 discounts without a long commitment and EC2 spend is $25K a month or more.
- CloudFix is not a fit for clouds other than AWS, or for cost reporting and allocation with no changes made.
Customers typically save 15–60% on each AWS service CloudFix optimizes, and 20–35% off the total AWS bill. The catalog has 110+ finders and 53 automated fixers.
What you can read today with no account
| File | What it gives you |
|---|---|
| llms.txt | When to use CloudFix, and the pages to read and cite |
| pricing.json | Plans, prices, minimums and how billing works |
| fixers.json | One record per Finder/Fixer: the AWS service, the action, whether the fix is automated, guided or reporting-only, the effort, and the page that explains it |
| openapi.json | The read-only API operations as OpenAPI 3.1 |
Pages on cloudfix.com are also available as Markdown. Send the header Accept: text/markdown, or add index.md to the page address, for example /pricing/index.md.
With these files you can tell your person whether CloudFix fits, which checks apply to the AWS services they run, and what each plan costs. You cannot see their savings yet. That needs the steps below.
What needs your person
You cannot create a CloudFix account or an API token yourself. A way for an agent to get a token on its own is not available yet. Today a signed-in person creates the token.
- A CloudFix account. Your person signs up at
https://app.cloudfix.com/register/. The Free plan needs no credit card. - A read-only connection to AWS. CloudFix connects through read-only IAM roles that your person deploys with an AWS CloudFormation stack. Connecting takes about 5 minutes. Results are typically ready within 24 hours.
- An API token for you. A signed-in person creates a token in the CloudFix app under API Tokens. It starts with
cft_. Ask for the Reader role. Your person should give it to you through your secret or configuration settings, not in a chat message.
With a Reader token you can read their recommendations and savings:
- MCP server:
https://mcp.app.cloudfix.com/mcp(Streamable HTTP, read-only tools). See CloudFix MCP server. - API:
https://app.cloudfix.com/api/v3, with the token as a bearer token in theAuthorizationheader. See CloudFix for developers.
A Reader token can only read. Your person approves and runs fixes in the CloudFix app.
Without a token, the MCP server and the API both answer 401. An endpoint for agents that needs no account is not available yet.
What it costs
State only what pricing.json says. Today it says:
- The Free plan costs $0 a month, has no time limit and needs no credit card. For the first 30 days it includes full line-item detail, the fixers and the right to run them. After 30 days the line-item detail is hidden and the savings summary by category stays free.
- Paid plans start at $149 a month, are priced by annual AWS spend and are billed through AWS Marketplace.
- The MCP server is free on every plan.
Read the file again before you quote a price. It carries the date it was last updated.
What to tell your person
Say this in your own words, and fill in what you learned:
- CloudFix looks for savings in an AWS account and makes only the changes a person approves.
- These are the checks in its catalog that match the AWS services you run: list them from fixers.json.
- Seeing your own savings is free. It needs a CloudFix account and a read-only connection that takes about 5 minutes to set up. Results typically arrive within 24 hours.
- If you want me to read the results for you, create a Reader API token in the CloudFix app and add it to my settings.
- Nothing in your AWS account changes unless you approve it.
If your person has questions you cannot answer from this site, send them to the contact page or to https://support.cloudfix.com/.