Schema | tf-approval-gate

tf-approval-gate

Describes the environment variables required to run the server.

Name	Required	Description	Default
`APPROVAL_MODE`	No	Approval mode: 'cli' for terminal-based approval, 'slack' for Slack approval (default).	slack
`SLACK_APP_TOKEN`	No	Slack app-level token (xapp-...) with Socket Mode enabled.
`SLACK_BOT_TOKEN`	No	Slack bot token (xoxb-...) from your Slac app.
`SLACK_APPROVAL_CHANNEL`	No	Slack channel where approal requests are posted.
`SLACK_APPROVER_USER_IDS`	No	Comma-separated Slac user IDs allowed to click Approve/Reject.
`TF_APPROVAL_GATE_SECRET`	No	Secret used to sign single-use approval tokens. Generate with `openssl rand -hex 32`.

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{ "listChanged": true }

Functions exposed to the LLM to take actions

Name	Description
tf_workspace_initC	Checks out/copies a Terraform project into a sandboxed workdir.
tf_write_fileA	Writes a .tf/.tfvars file into a sandboxed workspace (for agents with no native filesystem access).
tf_planB	Runs terraform init+plan and returns a resource-level change summary.
tf_policy_checkB	Runs Checkov (and OPA/Conftest if configured) against the current plan and returns a merged policy report.
tf_cost_estimateB	Runs Infracost against the current plan and returns a monthly cost delta (skipped if INFRACOST_API_KEY is unset).
tf_propose_changeB	Composite tool: runs plan, policy check, and cost estimate together and returns one bundled Proposal with a recommendation (safe/needs_review/blocked). Call this before tf_request_approval.
tf_request_approvalB	Sends the current plan for human approval (Slack, or the server's terminal in APPROVAL_MODE=cli). Refuses if policy findings are blocking. Returns an approvalId to poll.
tf_check_approval_statusB	Polls the status of a pending approval. Returns a signed approvalToken once a human approves.
tf_applyA	The only tool that runs terraform apply. Requires a valid approvalId + approvalToken minted by a real human approval; verifies signature, expiry, single-use, plan checksum, and drift server-side before applying.

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/SORABH13/tf-approval-gate'

If you have feedback or need assistance with the MCP directory API, please join our Discord server