terraform-infra

Provides 90%+ context savings vs raw Terraform MCP server. Includes critical safety controls for infrastructure operations.

• Terraform CLI (v1.0+)
• Cloud provider credentials configured
• Working directory with .tf files

Planning & Validation

| Tool | Description | Confirmation |

| -------- | ----------------------- | ------------ |

| plan | Generate terraform plan | No |

| validate | Validate configuration | No |

| fmt | Format terraform files | No |

State Operations

| Tool | Description | Confirmation |

| -------- | ---------------------- | ------------ |

| show | Display current state | No |

| list | List state resources | No |

| state-mv | Move resource in state | Yes |

Workspace Operations

| Tool | Description | Confirmation |

| ---------------- | ---------------- | ------------ |

| workspace-list | List workspaces | No |

| workspace-select | Select workspace | No |

| workspace-new | Create workspace | Yes |

Execution (⚠️ Dangerous)

| Tool | Description | Confirmation |

| ----- | ------------- | ------------ |

| apply | Apply changes | REQUIRED |

Blocked Operations

| Tool | Status |

| -------- | ----------- |

| destroy | BLOCKED |

| state-rm | BLOCKED |

```bash

# Initialize

terraform init

# Plan changes

terraform plan -out=tfplan

# Validate

terraform validate

# Apply (requires -auto-approve for automation)

terraform apply tfplan

```

• Working directory: Must contain terraform files
• TFVAR\*: Variable values via environment
• TF_WORKSPACE: Active workspace

⚠️ terraform apply ALWAYS requires confirmation

⚠️ terraform destroy is BLOCKED by default

⚠️ State modifications require confirmation

⚠️ Review plan output before apply

• devops (primary): Infrastructure management
• architect (secondary): Infrastructure design
• cloud-integrator (secondary): Cloud provisioning

| Issue | Solution |

| ------------ | ----------------------------- |

| Init failed | Check provider credentials |

| State locked | Check for other operations |

| Plan failed | Review error output carefully |

Before starting:

Read .claude/context/memory/learnings.md

After completing:

• New pattern -> .claude/context/memory/learnings.md
• Issue found -> .claude/context/memory/issues.md
• Decision made -> .claude/context/memory/decisions.md

> ASSUME INTERRUPTION: If it's not in memory, it didn't happen.