Terraform MCP Server
MCP server for the Terraform Registry and HCP Terraform — providers, modules, and workspace automation.
Terraform MCP Server
The Terraform MCP Server (by HashiCorp) is a Model Context Protocol server that integrates with the Terraform ecosystem to bring Infrastructure-as-Code automation to AI assistants.
It provides direct access to the public Terraform Registry APIs for providers, modules, and policies, and supports HCP Terraform / Terraform Enterprise for workspace management, organization and project listing, private registry access, and run management. Both stdio and streamable-HTTP transports are supported, with optional OpenTelemetry metrics.
It targets platform and DevOps engineers who want an agent that can look up registry information and manage Terraform workspaces.
Only compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score. Dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to the OWASP control it belongs to below.
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not.
The same gate an agent runs before installing (POST /api/v1/trust/terraform-mcp-server/check). Click a policy:
Consume Terraform MCP Server programmatically. Authenticate with an API key or session — see Authorize an agent.
# Agents: CHECK BEFORE YOU INSTALL (no auth) — score, grade, level, capability manifest
curl https://ai-supply.store/api/v1/trust/terraform-mcp-server
# Gate against your org policy (returns { pass, violations })
curl -X POST https://ai-supply.store/api/v1/trust/terraform-mcp-server/check \
-H "Content-Type: application/json" \
-d '{"minGrade":"B","denyPermissions":["shell"],"denyUnknownEgress":true}'
# CLI
npx ai-supply add terraform-mcp-server
# REST (install → download)
curl -X POST https://ai-supply.store/api/v1/listings/terraform-mcp-server/install \
-H "Authorization: Bearer $AIM_KEY"
# MCP tool
install_listing({ "slug": "terraform-mcp-server" })OpenAPI spec →Curated mirror — latest upstream source. See the repository for tagged releases.