terraform-mcp-server
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/hashicorp/terraform-mcp-server |
|---|---|
| Category | Terraform |
| Systems touched | Terraform registry/ecosystem |
| Access (as described) | configurable |
| License / price | MPL-2.0 / free |
| GitHub stars | 1551 |
| Read tools | Registry search/docs; list workspaces/runs/projects/teams; get plan/apply details and logs; whoami, get_token_permissions |
| Write / delete / exec tools | create_run, action_run (apply/discard/cancel), create/update/delete_workspace_safely, workspace variables & variable sets, create_team/project, force_unlock_workspace |
| Read-only mode | Partial: ENABLE_TF_OPERATIONS=false by default gates tools that need explicit approval; --toolsets/--tools to limit (e.g. registry only) |
| Safety notes | Registry-only toolset is effectively read-only and safe. HCP TF/TFE tools act with your TFE token's permissions; scope the token. |
| Verified | yes (source review 2026-10-20) |
| Notes | Official HashiCorp |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.