Terraform
HashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-28
HashiCorp's official Terraform MCP server provides read-only access to the Terraform Registry for module discovery and schema lookups. The server runs in Docker and queries public registry APIs without requiring credentials or filesystem access. HashiCorp is a well-established infrastructure vendor (acquired by IBM in 2024), giving strong maintainer confidence. The permissions model is excellent: purely network outbound to registry.terraform.io with no write capabilities, no shell access, and no local file manipulation. The main supply-chain concern is Docker-only distribution rather than a versioned package registry, which limits reproducibility and makes pinning specific versions less transparent. The repository is open source with clear documentation and active maintenance. No security incidents are known. This is a low-risk integration suitable for infrastructure teams who want LLM assistance with Terraform workflows.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREEState files contain secrets. Outbound to provider APIs. Untrusted-input only via remote modules.
Green flags
- Official HashiCorp product, major vendor backing
- Read-only registry queries, no write or execute permissions
- Open source with clear docs and active GitHub presence
- Sandboxed Docker container limits blast radius
- No credentials or secrets required for basic operation
Red flags
- Docker-only distribution, no npm/pypi package with semver pinning
- No explicit version tags visible in install command
- Network access to external registry without rate-limit visibility
Permissions requested
Install
docker run -i --rm hashicorp/terraform-mcp-server
Review
Install this if you write Terraform professionally and want to stop context-switching to the registry website. Skip it if you're a casual user or don't already have Docker in your workflow. It's a narrow tool that does one thing well.
Good at
- Official HashiCorp support means it stays current with registry API changes.
- No API keys or authentication needed, just public registry data.
- Docker packaging keeps your system clean and makes it portable across machines.
- Genuinely faster than tabbing to the registry website mid-workflow.
- Works with multiple Claude hosts, not just the desktop app.
Watch out
- Requires Docker running locally, which adds overhead if you're not already using it.
- Read-only registry access means you can't publish or manage your own modules.
- Won't execute Terraform commands or interact with state files.
- No support for private registries or local module paths.
- Manual config needed for hosts beyond Claude Desktop.
Use cases
- Looking up provider documentation in-flow
- Generating boilerplate from registry modules
- Validating Terraform configs before apply
- Cross-referencing module versions
Getting started
Works with
Similar MCPs
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.
- LocalStackLocalStack's official MCP. Drive a local AWS environment from chat: create stacks, set quotas, inspect emulated services.