terraform-mcp-server

The server primarily executes Terraform CLI commands via `subprocess.run`. It uses argument lists to prevent shell injection vulnerabilities. Crucially, it implements strong safety checks for destructive operations: `terraform_apply` requires explicit approval (`auto_approve=True` or `plan_file`), and `terraform_state` explicitly blocks `rm` and `mv` commands. All commands include timeout protection. While user/AI input is directly passed as Terraform arguments (e.g., resource addresses, variable values), the server's strong safety mechanisms for destructive actions, combined with Terraform CLI's own argument parsing, significantly reduce the risk of unintended or malicious behavior. No hardcoded secrets or 'eval' are present.