Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
HashiCorp's own open-source server (MPL-2.0, Go), also in Claude's plugin directory. The default toolset is read-only registry lookups that need no login. Add a TFE_TOKEN and the terraform toolset can create workspaces, projects, teams and variables and start runs, using whatever the token's team may do. Only deletes, force-unlock and applying, discarding or cancelling a run sit behind ENABLE_TF_OPERATIONS=true, which is off by default. It earns full marks, with active maintenance (v1.4.1 on 2026-10-23) and no advisories. Main caution: create_run and the variable tools are on once you opt in to the terraform toolset, so use a narrow team token and keep tool approval on. HashiCorp's own note says Terraform data can reach the client and model.
How to connect
claude mcp add terraform -s user -t stdio -- docker run -i --rm hashicorp/terraform-mcp-server{
"mcpServers": {
"terraform": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e", "TFE_ADDRESS=<<PASTE_TFE_ADDRESS_HERE>>",
"-e", "TFE_TOKEN=<<PASTE_TFE_TOKEN_HERE>>",
"hashicorp/terraform-mcp-server:1.4.1"
]
}
}
}Is Terraform MCP Server safe?
Is Terraform MCP Server safe to use?
Terraform MCP Server grades A: all four checks are at full marks. Strong public trust signals. It is still not a full audit, so give it the narrowest access that works.
Does Terraform MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Terraform MCP Server support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Cloud & Hosting
- A AWS MCP ServerAWS's managed remote server for calling any AWS API, running sandboxed scripts, and searching AWS docs.
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Netlify MCP ServerNetlify's official MCP server, hosted at mcp.netlify.com or run from npm, to create and deploy projects and manage env vars and secrets, forms, extensions and access controls.
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
Embed this badge
[](https://trustedmcp.io/servers/terraform-mcp-server)<a href="https://trustedmcp.io/servers/terraform-mcp-server"><img src="https://trustedmcp.io/badge/terraform-mcp-server.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.