Terraform Cloud MCP
Manage Terraform Cloud workspaces, trigger plan/apply runs, and inspect infrastructure changes.
Overview
| Catalog ID | mcp-terraform |
| Category | ci-cd |
| Auth method | API key |
| Blast radius | high |
| Trust | Verified — published by cendriix |
| Version | 1.0.0 |
| Regions | us-east-1, eu-west-1 |
Tools
| Tool | Description |
|---|---|
list_workspaces | List Terraform Cloud workspaces. |
trigger_run | Trigger a Terraform run. |
get_run_status | Get run status. |
get_plan_output | Get plan output. |
apply_run | Apply a confirmed run. |
Tool parameters
list_workspaces
List Terraform Cloud workspaces.
| Parameter | Type | Description | |
|---|---|---|---|
organization | string | required | Organization name |
trigger_run
Trigger a Terraform run.
| Parameter | Type | Description | |
|---|---|---|---|
workspace_id | string | required | Workspace ID |
message | string | optional | Run message |
is_destroy | boolean | optional | Destroy run |
get_run_status
Get run status.
| Parameter | Type | Description | |
|---|---|---|---|
run_id | string | required | Run ID |
get_plan_output
Get plan output.
| Parameter | Type | Description | |
|---|---|---|---|
plan_id | string | required | Plan ID |
apply_run
Apply a confirmed run.
| Parameter | Type | Description | |
|---|---|---|---|
run_id | string | required | Run ID |
comment | string | optional | Apply comment |
Installing
- In Cendriix, go to Settings → MCPs
- Find Terraform Cloud and click Install
- Paste your API key after installing. It is validated, then encrypted at rest in a secrets vault scoped to your tenant.
- Click Test Connection to run a health check and list available tools
Authentication. Paste your API key after installing. It is validated, then encrypted at rest in a secrets vault scoped to your tenant.
Blast radius
This MCP is classified high. This MCP can modify infrastructure or reach sensitive data. High-blast-radius tool calls require explicit approval when your organisation enables approval gates in Policies.
Every tool invocation is recorded in your Audit Log. You can remove this MCP at any time from Settings → MCPs, which revokes tool access immediately.
Further reading
- MCP Marketplace — browse and install MCPs
- Policies & Guardrails — approval gates and blast radius
- Audit Log — review tool invocations
Last updated on