io.github.RajeevSirohi/mcp-server-terraform MCP Server

Name: io.github.RajeevSirohi/mcp-server-terraform MCP Server
Author: io.github.RajeevSirohi

io.github.RajeevSirohi/mcp-server-terraform

Repository Registry

What is the io.github.RajeevSirohi/mcp-server-terraform MCP server?

Safety-first Terraform: confirmation-gated apply/destroy, risk & cost analysis, drift detection

How to install io.github.RajeevSirohi/mcp-server-terraform

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

ALLOW_ONLY_READONLY_TOOLS
Set to 'true' to expose only validate/plan/output/preflight/drift tools
ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS
Set to 'true' to block apply/destroy/state-mutation tools
AUDIT_LOG_PATH
File path for JSON-lines audit logging of all tool calls (var values redacted)

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-server-terraform": {
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/mcp-server-terraform"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<YOUR_ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<YOUR_ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<YOUR_AUDIT_LOG_PATH>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server-terraform": {
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/mcp-server-terraform"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<YOUR_ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<YOUR_ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<YOUR_AUDIT_LOG_PATH>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcp-server-terraform": {
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/mcp-server-terraform"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<YOUR_ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<YOUR_ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<YOUR_AUDIT_LOG_PATH>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "mcp-server-terraform": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@rajsir/mcp-server-terraform"
      ],
      "env": {
        "ALLOW_ONLY_READONLY_TOOLS": "<YOUR_ALLOW_ONLY_READONLY_TOOLS>",
        "ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS": "<YOUR_ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS>",
        "AUDIT_LOG_PATH": "<YOUR_AUDIT_LOG_PATH>"
      }
    }
  }
}

Claude Code

claude mcp add mcp-server-terraform --env ALLOW_ONLY_READONLY_TOOLS=<YOUR_ALLOW_ONLY_READONLY_TOOLS> --env ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS=<YOUR_ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS> --env AUDIT_LOG_PATH=<YOUR_AUDIT_LOG_PATH> -- npx -y @rajsir/mcp-server-terraform