by hashicorp · MCP Server · ★ 1.5k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is terraform-mcp-server safe to install? View the security audit →
Terraform MCP Server The Terraform MCP Server is a Model Context Protocol (MCP) server that provides seamless integration with Terraform Registry APIs, enabling advanced automation and interaction capabilities for Infrastructure as Code (IaC) development. Features Dual Transport Support: Both Stdio and StreamableHTTP transports with configurable endpoints Terraform Registry Integration: Direct integration with public Terraform Registry APIs for providers, modules, and policies HCP Terraform & Terraform Enterprise Support: Full workspace management, organization/project listing, and private registry access Workspace Operations: Create, update, delete workspaces with support for variables, tags, and run management Security Note: At this stage, the MCP server is intended for local use only. If using the StreamableHTTP transport, always configure the MCPALLOWEDORIGINS environment variable to restrict access to trusted origins only. This helps prevent DNS rebinding attacks and other cross-origin vulnerabilities. Security Note: Depending on the query, the MCP server may expose certain Terraform data to the MCP client and LLM. Do not use the MCP server with untrusted MCP clients or LLMs.
claude mcp add terraform -s user -t stdio -- docker run -i --rm hashicorp/terraform-mcp-server
docker run -p 8080:8080 --rm -e TRANSPORT_MODE=streamable-http -e TRANSPORT_HOST=0.0.0.0 hashicorp/terraform-mcp-serverTaken from the project's README on GitHub. Check the security audit before running it.
No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
| Stars | 1,548 |
| Forks | 201 |
| Language | Go |
| Category | MCP Server |
| License | MPL-2.0 |
| Quality Score | 74.5140635644828/100 |
| Open Issues | 53 |
| Last Updated | 2026-10-12 |
| Created | 2025-04-19 |
| Platforms | go, mcp |
| Est. Tokens | ~19k |
Explore other popular mcp server tools:
terraform-mcp-server is The Terraform MCP Server provides seamless integration with Terraform ecosystem, enabling advanced automation and interaction capabilities for Infrastructure as Code (IaC) development.. It is categorized as a MCP Server with 1.5k GitHub stars.
terraform-mcp-server is primarily written in Go.
The README on GitHub (github.com/hashicorp/terraform-mcp-server) gives: claude mcp add terraform -s user -t stdio -- docker run -i --rm hashicorp/terraform-mcp-server , then docker run -p 8080:8080 --rm -e TRANSPORT_MODE=streamable-http -e TRANSPORT_HOST=0.0.0.0 hashicorp/terraform-mcp-server. Usage details are in the same README.
terraform-mcp-server is released under the MPL-2.0 license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: