tfmcp

概述

tfmcp 是一个基于 Rust 的命令行工具，通过模型上下文协议扩展了 Terraform 的功能。它提供了全面的基础设施管理工具，包括配置分析、计划执行、状态管理和工作区操作。该工具具有强大的安全控制功能，包括可配置策略、审计日志和操作限制，适合生产环境使用。其高级分析功能包括模块健康评分、依赖关系图可视化和 Future Architect Terraform 指南的合规性检查。

试试问 AI

装完之后，这里有 7 个你可以让 AI 做的事：

• init_terraform

  Initialize Terraform working directory

  试试:Initialize a new Terraform project试试:Set up Terraform in the current directory
• get_terraform_plan

  Generate and show execution plan

  试试:Show me the Terraform plan试试:What changes will Terraform make?
• apply_terraform

  Apply Terraform configuration

  试试:Apply the Terraform configuration试试:Deploy the infrastructure
• destroy_terraform

  Destroy Terraform-managed infrastructure

  试试:Destroy all Terraform resources试试:Clean up the infrastructure
• validate_terraform

  Validate configuration syntax

  试试:Validate the Terraform configuration试试:Check for syntax errors
• analyze_plan

  Analyze plan with risk scoring and recommendations

  试试:Analyze the Terraform plan for risks试试:What are the potential issues with this plan?
• terraform_workspace

  Manage Terraform workspaces (list, show, new, select, delete)

  试试:List all workspaces试试:Create a new workspace试试:Switch to production workspace
• terraform_import

  Import existing resources into Terraform state

  试试:Import an existing EC2 instance试试:Add existing resources to Terraform
• analyze_terraform

  Analyze Terraform configuration

  试试:Analyze the Terraform configuration for best practices试试:Review my infrastructure code
• terraform_graph

  Generate dependency graph of Terraform resources

  试试:Show the resource dependency graph试试:Visualize how resources are connected
• search_terraform_modules

  Search Terraform modules in the registry

  试试:Find AWS S3 modules试试:Search for Terraform modules related to databases
• get_security_status

  Perform security scan with secret detection

  试试:Check for security issues in my configuration试试:Scan for secrets in Terraform code

可对比工具

安装

cargo install tfmcp

git clone https://github.com/nwiizo/tfmcp
cd tfmcp
docker build -t tfmcp .
docker run -it tfmcp

{
  "mcpServers": {
    "tfmcp": {
      "command": "/path/to/your/tfmcp",
      "args": ["mcp"],
      "env": {
        "HOME": "/Users/yourusername",
        "PATH": "/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin",
        "TERRAFORM_DIR": "/path/to/your/terraform/project"
      }
    }
  }
}

FAQ

如何启用 terraform apply 等危险操作？

设置环境变量：TFMCP_ALLOW_DANGEROUS_OPS=true。要启用自动批准，还需设置 TFMCP_ALLOW_AUTO_APPROVE=true。

审计日志存储在哪里？

默认情况下，审计日志存储在 ~/.tfmcp/audit.log。您可以使用 TFMCP_AUDIT_LOG_FILE 自定义路径。

Hacker News 讨论

开发者社区最近的相关讨论。

• Terraform Model Context Protocol▲ 3
  帖子 by lockedinspace · 2025-04-22

tfmcp 对比