Back to Home
hyperpolymath icon

poly-iac-mcp

Verified Safe

by hyperpolymath

Overview

A unified Model Context Protocol (MCP) server for Infrastructure as Code (IaC) management, allowing AI assistants to plan, apply, and manage infrastructure using Terraform/OpenTofu and Pulumi.

Installation

Run Command
deno run --allow-net --allow-read --allow-write --allow-env --allow-run main.js

Security Notes

The server's core function involves executing external Infrastructure as Code (IaC) CLI tools (Terraform/OpenTofu, Pulumi) using `Deno.Command.run`. This operation is inherently high-privilege and requires `allow-run`, `allow-read`, `allow-write`, and `allow-env` permissions. While `Deno.Command` passes arguments as an array (mitigating direct shell injection within arguments), the server processes arguments directly from client input. Users must ensure robust authentication and authorization at the MCP client layer and rigorously validate inputs to prevent malicious IaC operations. The README provides important security considerations for users, emphasizing careful handling of credentials and plan reviews. No `eval` or intentional obfuscation was found.

Similar Servers

Stats

Interest Score30
Security Score6
Cost ClassLow
Avg Tokens100
Stars1
Forks0
Last Update2026-01-18

Tags

IaCMCPTerraformPulumiOpenTofuDeno