Terraform MCP Server

Add to your client

Copy the config for your MCP client and paste it into its config file.

{
  "mcpServers": {
    "terraform-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "hashicorp/terraform-mcp-server"
      ]
    }
  }
}

Step-by-step guides: Add to Claude Desktop · Add to Cursor · Add to Windsurf

Before you start

• An MCP-compatible client (Claude, Cursor, VS Code Copilot, etc.)
• Docker running, OR Go installed to build/install from source (`go install github.com/hashicorp/terraform-mcp-server/cmd/terraform-mcp-server@latest`)
• Public Registry tools need no credentials
• For private modules/providers and workspace tools: an HCP Terraform / Terraform Enterprise API token set as TFE_TOKEN (and TFE_ADDRESS for self-hosted TFE), created under your HCP Terraform user or team API tokens settings

About Terraform MCP Server

Tools & capabilities (12)

When to use it

• Use it when you want an agent to pick the correct provider/module and write valid HCL instead of guessing argument names
• Use it when reviewing or generating Terraform and you need authoritative Registry docs inline
• Use it when you need to list workspaces and inspect run/plan status in HCP Terraform or Terraform Enterprise
• Use it when an agent should trigger a run and read back the plan logs/JSON to explain proposed changes
• Use it when you want to expose private Registry modules/providers to your AI workflow behind a token

Quick setup

1. 1Choose a run method: Docker (`docker run -i --rm hashicorp/terraform-mcp-server`) or the Go binary
2. 2Add the server to your MCP client config (command + args, or URL for StreamableHTTP)
3. 3For Registry-only use, no auth is needed; for workspace/private tools, set TFE_TOKEN (and TFE_ADDRESS for TFE)
4. 4Optionally restrict exposed tools by selecting a toolset (registry, registry-private, terraform)
5. 5Restart the MCP client and confirm tools like search_providers appear
6. 6Run a test prompt (e.g. 'find the latest aws provider version') to verify connectivity

Terraform MCP Server FAQ