Terraform MCP server release notes

This page describes the release highlights for Terraform MCP server 1.x versions.

1.3.0

Release Date: August 25, 2026

Team management tools

The terraform toolset includes these tools for managing teams in HCP Terraform and Terraform Enterprise. Refer to Team tools for more information.

list_teams lists the teams in an organization. Use the team_names argument to filter by exact team names, or use the search_query argument to filter by a substring of the team name.
get_team fetches the details of a single team by ID, including its members, organization access permissions, and SSO settings.
create_team creates a team in an organization. Set the optional visibility argument to secret or organization.
add_team_member adds a single member to a team. Provide either the username argument or the organization_membership_id argument, but not both. The username argument works only for users who accepted the organization invitation. The organization_membership_id argument works for both accepted and pending invitations.
grant_team_access grants a team access to a workspace or a project. Provide the team_id and access_level arguments, and either the workspace_id argument or the project_id argument.
delete_team permanently deletes a team. The server registers this tool only when you set ENABLE_TF_OPERATIONS to true. Refer to Destructive operations for more information.

Identity and project tools

The terraform toolset includes these tools for inspecting your token and your projects. Refer to Identity and organization tools and Project tools for more information.

whoami returns the identity of the authenticated Terraform token. The response includes the username, the email address, and whether the token belongs to a service account.
get_project fetches the details of a project by its ID.

Changelog

Review improvements, bug fixes, security patches, and breaking changes in the changelog.

1.2.0

Release Date: August 4, 2026

State version and run comment tools

The terraform toolset includes these tools for inspecting workspace state and runs. Refer to State version tools and Run, plan, and apply tools for more information.

list_state_versions lists the state versions of a workspace. Provide the terraform_org_name and workspace_name arguments.
get_state_version retrieves a state version. Provide the state_version_id argument to retrieve a specific state version, or provide the workspace_id argument to retrieve the latest state version of that workspace.
get_run_comments lists the comments that users submitted on a run. Provide the run_id argument.

Project management tools

The terraform toolset includes these tools for managing projects. Refer to Project tools for more information.

create_project creates a project in an organization. Provide the terraform_org_name and project_name arguments.
delete_project deletes a project by ID. The request fails when the project still contains workspaces or Stacks. The server registers this tool only when you set ENABLE_TF_OPERATIONS to true.

Organization allowlist enforcement for tool calls

When you configure an organization allowlist with the MCP_ORGANIZATION_ALLOWLIST environment variable, the server rejects tool calls whose terraform_org_name argument names an organization that is not in the allowlist. The server does not apply this check to tool calls that have no terraform_org_name argument. Refer to Restrict access by organization for more information.

Server version in the health endpoint

The /health endpoint response includes a version field that reports the version of the running server. Refer to Health endpoint for more information.

Instana instrumentation

Set the INSTANA_ENABLED environment variable to true to enable Instana metrics and HTTP request tracing for the streamable HTTP server. Set the INSTANA_SERVICE_NAME environment variable to change the service name from the default value of terraform-mcp-server. Refer to Enable telemetry for more information.

Shared secret header

Set the TF_MCP_SHARED_SECRET environment variable to send an X-Tf-Mcp-Secret header on requests to HCP Terraform or Terraform Enterprise. The header lets the backend identify requests from a trusted MCP server deployment. Refer to Environment variables for more information.

Changelog

Review improvements, bug fixes, security patches, and breaking changes in the changelog.

1.1.0

Release Date: July 14, 2026

Breaking changes

Client-supplied Terraform address.
In streamable HTTP mode, the server does not accept the Terraform address from a client. Requests that supply TFE_ADDRESS in an HTTP header or a query parameter receive a 403 response. Set the TFE_ADDRESS environment variable on the server instead. Previously, a client could redirect the server's requests and its authorization bearer token to an arbitrary endpoint. Refer to Environment variables for more information.
Client IP sourcing.
The server does not trust the X-Forwarded-For header by default. Set the MCP_REMOTE_IP_METHOD environment variable to RemoteAddr, X-Real-IP, or X-Forwarded-For to choose how the server determines the client IP address. The default value is RemoteAddr, which trusts only the direct connection. When you run the server behind a proxy and rely on the X-Forwarded-For header, set MCP_REMOTE_IP_METHOD to X-Forwarded-For and set MCP_XFF_TRUSTED_HOPS to the number of trusted proxies. Refer to Forward client IP addresses for more information.

Organization allowlist

Use the --organization-allowlist flag or the MCP_ORGANIZATION_ALLOWLIST environment variable to restrict the streamable HTTP server to a comma-separated list of organizations. The server rejects requests when the authorization bearer token does not have access to any organization in the allowlist. The environment variable takes precedence over the flag. Refer to Restrict access by organization for more information.

Force unlock tool

The force_unlock_workspace tool force unlocks a workspace that is stuck in a lock. The tool requires workspace admin permissions. The server registers this tool only when you set ENABLE_TF_OPERATIONS to true. Refer to Workspace tools for more information.

Root URL redirect

Set the MCP_REDIRECT_ROOT_URL environment variable to redirect requests for the / path of the streamable HTTP server to another URL. Refer to Environment variables for more information.

Security fixes

Allowlist token validation.
Organization allowlist validation and the requests that the server sends to the Terraform API use the same authorization bearer token. Previously, a conflicting TFE_TOKEN header could bypass the allowlist.
Token isolation between sessions.
This release fixes cross-tenant HCP Terraform token reuse in stateless HTTP mode. This release also fixes a session-scoped client cache that bypassed per-token request validation in streamable HTTP mode.

Changelog

Review improvements, bug fixes, security patches, and breaking changes in the changelog.

1.0.0 release highlights

Release Date: June 9, 2026

Sentinel mock data tool

The get_sentinel_mock tool exports and downloads the Sentinel mock bundle data for a Terraform plan. Use the data to test Sentinel policies against plan output. Provide the plan_id argument. Refer to Run, plan, and apply tools for more information.

Non-root container user

The container image runs as a non-root user for Kubernetes compatibility. Refer to Docker container for more information.

Client IP forwarding

Set the MCP_FORWARD_CLIENT_IP environment variable to true to forward the client IP address in the X-Forwarded-For header on requests that the server sends to the Terraform registry, HCP Terraform, and Terraform Enterprise. Refer to Forward client IP addresses for more information.

Client type metric

When you enable OpenTelemetry metrics, the server records the name and version of each MCP client that connects. Refer to Telemetry metrics for more information.

Changelog

Review improvements, bug fixes, security patches, and breaking changes in the changelog.