Safety-first Terraform: confirmation-gated apply/destroy, risk & cost analysis, drift detection
Connect Runs on your machine
claude mcp add mcp-server-terraform -e ALLOW_ONLY_READONLY_TOOLS=<ALLOW_ONLY_READONLY_TOOLS> -e ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS=<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS> -e AUDIT_LOG_PATH=<AUDIT_LOG_PATH> -- npx -y @rajsir/[email protected]
{
"mcpServers": {
"mcp-server-terraform": {
"command": "npx",
"args": [
"-y",
"@rajsir/[email protected]"
],
"env": {
"ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
"ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
}
}
}
}
{
"mcpServers": {
"mcp-server-terraform": {
"command": "npx",
"args": [
"-y",
"@rajsir/[email protected]"
],
"env": {
"ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
"ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
}
}
}
}
{
"servers": {
"mcp-server-terraform": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@rajsir/[email protected]"
],
"env": {
"ALLOW_ONLY_READONLY_TOOLS": "<ALLOW_ONLY_READONLY_TOOLS>",
"ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ALLOW_ONLY_READONLY_TOOLSOptional | Set to 'true' to expose only validate/plan/output/preflight/drift tools |
ALLOW_ONLY_NON_DESTRUCTIVE_TOOLSOptional | Set to 'true' to block apply/destroy/state-mutation tools |
AUDIT_LOG_PATHOptional | File path for JSON-lines audit logging of all tool calls (var values redacted) |
Details
| Package | @rajsir/[email protected] (NPM, stdio) |
| First published | 7 Jul 2026 |
| Last updated | 7 Jul 2026 |
| Registry name | io.github.RajeevSirohi/mcp-server-terraform |
More cloud and devops servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
