Back to Home
nwiizo icon

tfmcp

Verified Safe

by nwiizo

Overview

A CLI tool and MCP server that enables LLMs to analyze, manage, and operate Terraform configurations and infrastructure environments.

Installation

Run Command
tfmcp mcp

Environment Variables

  • TERRAFORM_DIR
  • TFMCP_LOG_LEVEL
  • TFMCP_ALLOW_DANGEROUS_OPS
  • TFMCP_ALLOW_AUTO_APPROVE
  • TFMCP_MAX_RESOURCES
  • TFMCP_AUDIT_ENABLED
  • TFMCP_AUDIT_LOG_FILE
  • TFMCP_AUDIT_LOG_SENSITIVE
  • TERRAFORM_BINARY_NAME

Security Notes

The server implements robust security controls by default. Dangerous operations (apply/destroy) are disabled, sensitive file patterns are blocked (e.g., 'prod*', 'secret*'), and a maximum resource limit is enforced. All operations are subject to audit logging. The code also includes internal secret detection patterns for Terraform configurations to warn users of potential hardcoded secrets. Policies can be customized via environment variables, requiring users to explicitly opt-in to less secure behaviors. There are no obvious 'eval' or obfuscation patterns.

Similar Servers

Stats

Interest Score61
Security Score9
Cost ClassMedium
Avg Tokens750
Stars350
Forks25
Last Update2025-12-28

Tags

TerraformMCPLLMInfrastructure as CodeSecurity