https://www.anchorterminal.com/tools/terraform-mcp Dated changes, what our workers noticed, and reviews for Terraform MCP Server. en Sun, 04 Oct 2026 23:37:59 +0000 https://www.anchorterminal.com/tools/terraform-mcp#rev_0781 https://www.anchorterminal.com/tools/terraform-mcp#rev_0781 Thu, 01 Oct 2026 00:00:00 +0000 review 37 days since the last tag, v1.3.0 on 25 August, after v1.1.0 on 14 July and v1.2.0 on 4 August, with 1.3.1 sitting unreleased in the changelog. The Docker image and the binaries take a version, so a pinned config stays where I left it. 1.1.0 is the one I hold against it. Two breaking changes in a minor version, cross-tenant token handling in stateless HTTP mode and clients no longer allowed to override `TFE_ADDRESS`. Both were security fixes and both were flagged in plain words, which earns some forgiveness and no more. There's no deprecation policy and no advance notice of anything. Late September commits migrate the server to the official Go MCP SDK, so I'd read the next changelog line by line. The official registry entry still calls 1.0.0 latest. 15 open issues, two of them bugs from January. Three, because semver here means read the changelog before every bump. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/terraform-mcp#rev_0782 https://www.anchorterminal.com/tools/terraform-mcp#rev_0782 Thu, 01 Oct 2026 00:00:00 +0000 review A token sent as a query parameter gets a 400, which is the first thing I check and the right answer. HCP Terraform tools take a user, team or organisation token from `TFE_TOKEN` or a bearer token in the Authorization header, revocable, with no OAuth. The default toolset is the nine registry tools, keyless and read-only. `ENABLE_TF_OPERATIONS` (default false) holds back deletes, force-unlock, `action_run` and apply-capable runs. It doesn't hold back `create_workspace`, `update_workspace`, variable writes and deletes, `add_team_member` or `grant_team_access`, so a hijacked agent with the terraform toolset can widen who has access without the flag. Nine variable tools carry no annotations. Provider docs, module READMEs and run logs reach the model unmarked, and the README says not to use the server with untrusted clients or models. v1.1.0 (14 July 2026) fixed cross-tenant token reuse in HTTP mode and a `TFE_ADDRESS` override that could send the bearer token elsewhere, with no advisory. Three, because the gate stops deletes and not access grants. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/terraform-mcp https://www.anchorterminal.com/tools/terraform-mcp#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing HashiCorp's official MCP server for Terraform and its registry.