tfmcp

Overview

tfmcp is a Rust-based command-line tool that extends Terraform capabilities through the Model Context Protocol. It provides comprehensive infrastructure management tools including configuration analysis, plan execution, state management, and workspace operations. The tool features robust security controls with configurable policies, audit logging, and operation restrictions, making it suitable for production environments. Its advanced analysis capabilities include module health scoring, dependency graph visualization, and compliance checking against Future Architect Terraform guidelines.

Try asking AI

After installing, here are 7 things you can ask your AI assistant:

• init_terraform

  Initialize Terraform working directory

  Try:Initialize a new Terraform projectTry:Set up Terraform in the current directory
• get_terraform_plan

  Generate and show execution plan

  Try:Show me the Terraform planTry:What changes will Terraform make?
• apply_terraform

  Apply Terraform configuration

  Try:Apply the Terraform configurationTry:Deploy the infrastructure
• destroy_terraform

  Destroy Terraform-managed infrastructure

  Try:Destroy all Terraform resourcesTry:Clean up the infrastructure
• validate_terraform

  Validate configuration syntax

  Try:Validate the Terraform configurationTry:Check for syntax errors
• analyze_plan

  Analyze plan with risk scoring and recommendations

  Try:Analyze the Terraform plan for risksTry:What are the potential issues with this plan?
• terraform_workspace

  Manage Terraform workspaces (list, show, new, select, delete)

  Try:List all workspacesTry:Create a new workspaceTry:Switch to production workspace
• terraform_import

  Import existing resources into Terraform state

  Try:Import an existing EC2 instanceTry:Add existing resources to Terraform
• analyze_terraform

  Analyze Terraform configuration

  Try:Analyze the Terraform configuration for best practicesTry:Review my infrastructure code
• terraform_graph

  Generate dependency graph of Terraform resources

  Try:Show the resource dependency graphTry:Visualize how resources are connected
• search_terraform_modules

  Search Terraform modules in the registry

  Try:Find AWS S3 modulesTry:Search for Terraform modules related to databases
• get_security_status

  Perform security scan with secret detection

  Try:Check for security issues in my configurationTry:Scan for secrets in Terraform code

Comparable tools

Installation

cargo install tfmcp

git clone https://github.com/nwiizo/tfmcp
cd tfmcp
docker build -t tfmcp .
docker run -it tfmcp

{
  "mcpServers": {
    "tfmcp": {
      "command": "/path/to/your/tfmcp",
      "args": ["mcp"],
      "env": {
        "HOME": "/Users/yourusername",
        "PATH": "/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin",
        "TERRAFORM_DIR": "/path/to/your/terraform/project"
      }
    }
  }
}

FAQ

How do I enable dangerous operations like terraform apply?

Set environment variable: TFMCP_ALLOW_DANGEROUS_OPS=true. For auto-approval, also set TFMCP_ALLOW_AUTO_APPROVE=true.

Where are the audit logs stored?

By default, audit logs are stored at ~/.tfmcp/audit.log. You can customize the path with TFMCP_AUDIT_LOG_FILE.

On Hacker News

Recent discussion from the developer community.

• Terraform Model Context Protocol▲ 3
  Story by lockedinspace · 2025-04-22

Compare tfmcp with