"terraform" matching MCP servers:

A Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.

Enables Terraform HCL plan generation, drift detection, and strict human confirmation approval barriers for cloud infrastructure management.

Enables AI assistants to scan Terraform and Dockerfiles for security misconfigurations, returning structured Checkov findings that can be explained in plain language.

A read-only MCP server that analyzes a supplied Terraform plan JSON file and returns resource identities, action/type/mode counts, and coverage warnings about proposed infrastructure changes. It never executes Terraform, applies changes, or connects to AWS, keeping analysis local and deterministic.

Open-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP server - Prowler and Wiz require paid SaaS.

Enables local-first scanning of Terraform for security misconfigurations while an AI assistant writes the code, providing fixes and compliance mappings without uploading infrastructure code.

Enables AI coding agents to run Kubernetes inspection and Terraform plan/apply operations inside ephemeral gVisor-sandboxed jobs with short-lived, narrowly-scoped credentials, while routing destructive changes through a human approval gate.

Enables AI agents to manage Google Cloud Platform resources including projects, IAM, service accounts, and APIs directly through GCP REST APIs without requiring gcloud CLI or Terraform.

Enables AI coding agents to plan, policy-check, and cost-estimate Terraform changes while requiring human approval through Slack or CLI before any terraform apply can execute.

A local-first AWS security tool that uses graph theory to discover attack paths (e.g., Internet → Role → DB) and prioritize remediations. It allows agents to perform read-only security audits and generate Terraform fixes without data exfiltration.

Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.

Enables agents to review Terraform/Bicep infrastructure diffs against Checkov or builtin regex policies, returning structured findings for Azure security issues.

Enables AI agents to rehearse risky actions — SQL, shell, git, Terraform, cloud and SaaS operations — against simulations of the real system before executing them, so they can see the consequences first. Returns a consequence report with a safe, confirm or block verdict, blast radius, reversibility and evidence, without ever executing the action itself.

Lets AI agents propose and review Terraform plans through MCP while requiring human approval before any exact reviewed plan is applied, with policy checks and a tamper-evident audit log.

A local MCP server that parses Terraform .tfstate files and lets AI agents audit enterprise infrastructure for security misconfigurations without requiring direct cloud credentials.

Enables AI assistants to discover, configure, harden, and troubleshoot multi-brand home and homelab networks through MCP, backed by declarative Terraform/OpenTofu orchestration. Includes safety guardrails, drift detection, snapshots, rollback, and zero-trust device controls.

Enables capturing real AWS SDK calls through Client-Side Monitoring (CSM UDP) and turning them into least-privilege IAM policies, emitted as JSON, Terraform, or AWS CDK over a JSON-RPC stdio interface. Policy writes are path-contained and dry-run by default, requiring an explicit opt-in flag.

Enables read-only inspection of Kubernetes resources and Terraform plans, retrieval of policy findings, and schema and policy validation of manifests and patches without applying changes.

An MCP server that enables autonomous cloud operations and auditing: routing prompts through Amazon Bedrock with approval gating, running read-only AWS probes, and recording every action in a SHA-256 audit ledger optionally persisted to DynamoDB. It speaks the 2025-11-25 protocol over Streamable HTTP at /mcp and ships Terraform for the audit table and least-privilege IAM.

Enables AI coding assistants to scan every file they write before it reaches disk, blocking CRITICAL and HIGH security findings at generation time. Covers secrets, GitHub Actions AI-agent surfaces, prompt injection, Docker, Terraform, and package supply-chain risks.