NestDaddy

Mcp Server Terraform

io.github.RajeevSirohi/mcp-server-terraform ยท v0.2.1

Safety-first Terraform: confirmation-gated apply/destroy, risk & cost analysis, drift detection

Connect Runs on your machine

Terminal
claude mcp add mcp-server-terraform -e ALLOW_ONLY_READONLY_TOOLS=<ALLOW_ONLY_READONLY_TOOLS> -e ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS=<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS> -e AUDIT_LOG_PATH=<AUDIT_LOG_PATH> -- npx -y @rajsir/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "mcp-server-terraform": {
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/[email protected]"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "mcp-server-terraform": {
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/[email protected]"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-server-terraform": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/[email protected]"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
ALLOW_ONLY_READONLY_TOOLS
Optional
Set to 'true' to expose only validate/plan/output/preflight/drift tools
ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS
Optional
Set to 'true' to block apply/destroy/state-mutation tools
AUDIT_LOG_PATH
Optional
File path for JSON-lines audit logging of all tool calls (var values redacted)

Details

Package@rajsir/[email protected] (NPM, stdio)
First published7 Jul 2026
Last updated7 Jul 2026
Registry nameio.github.RajeevSirohi/mcp-server-terraform

More cloud and devops servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.