Terraback
Scan AWS/Azure/GCP and generate Terraform HCL with import blocks, deterministically, for AI agents.
Connector by bmoldo · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/bmoldo-terraback
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 3 read · 0 write · 0 delete · 3 not yet classified
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Python package
Tools by what they do 6
Read from the source code; the running server may list different tools.
Read 3 · Look things up without changing anything.
codify_batchdetect_unmanagedlist_supported_resources
Not yet classified 3 · We could not tell from the name and description.
codify_resourcescan_infrastructureverify_plan
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
TERRABACK_LICENSE
Other settings (environment variables or headers).
ARM_SUBSCRIPTION_ID
Tools (6)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
codify_batchScan and generate Terraform HCL + import blocks for a batch of resources. Everything is scanned into an isolated staging area first; nothing is written to output_dir unless the batch is within your license's resource cap. Nothing is imported into Terraform state by this tool - it only generates code. License cap: on the Community tier, a single call is capped at 25 total resources (after tag_filters are applied, before exclude_managed is applied). If the scope has more than that, this tool returns {"error": "resource_cap_exceeded", "total", "cap", "counts_by_type", "hint"} and writes nothing…
codify_resourceGenerate Terraform HCL and an import block for exactly one resource. Scans just the requested resource type in the given scope, locates the resource matching resource_id, and writes a single .tf file plus a matching import JSON entry into output_dir. Nothing is imported into Terraform state by this tool - it only generates code; import is a separate, explicit step outside this MCP interface. Args: provider: Cloud provider - "aws", "azure", or "gcp". scope: AWS = region, Azure = subscription ID, GCP = project ID. type: Resource type name, bare (e.g. "ec2") or full registry key …
detect_unmanagedDiff a live cloud inventory against local Terraform state to find unmanaged resources. Read-only: runs a scan_infrastructure-equivalent scan and compares resource ids/ARNs against what your Terraform state already tracks. Nothing is written to state and nothing is imported. v1 limitation: state_files must be LOCAL file paths (e.g. a checked-out `terraform.tfstate`, or the output of `terraform state pull > state.json`). Remote backends (S3, azurerm, GCS, Terraform Cloud/Enterprise) are not read directly - pull the state to a local file first. Args: provider: Cloud provider - "aws", "azur…
list_supported_resourcesList resource types terraback can scan/codify, grouped by provider. Read-only and does not touch any cloud provider - this only reports what terraback's scan registry supports. Args: provider: Restrict the listing to one provider - "aws", "azure", or "gcp". Omit to list all three. Returns: {"providers": {"aws": [{"type": "aws_ec2", "tier": "community"}, ...], "azure": [...], "gcp": [...]}, "counts": {"aws": N, "azure": N, "gcp": N, "total": N}}. "tier" is "community", "professional", or "enterprise" - types above your license tier will fail if scanned.
scan_infrastructureRun a read-only inventory scan of live cloud infrastructure. This is a discovery tool: it enumerates what currently exists in the given scope. It never writes Terraform files, never touches Terraform state, and never imports anything - it only reads from the cloud provider's API. Args: provider: Cloud provider - "aws", "azure", or "gcp". scope: The scan boundary. For AWS this is a region (e.g. "us-east-1"). For Azure this is a subscription ID. For GCP this is a project ID. types: Optional list of resource type names to restrict the scan to, e.g. ["ec2", "a…
verify_planRun a read-only `terraform plan` against a generated directory and report drift. Never applies, imports, or otherwise mutates Terraform state - this only runs `terraform init` (if needed) and `terraform plan`. Requires Terraform >= 1.5 (import block support) installed and on PATH. Args: terraform_dir: Directory containing the generated .tf files. Returns: On success: {"drift": "none"|"drift_detected"|"plan_failed", "summary": {"imports", "adds", "changes", "destroys"}, "add_resources": [...], "change_resources": [...], "destroy_resources": [...]}. "drift" is "none" wh…
Signals
- Weekly downloads
- 45
- Last release
- Jul 16, 2026 (3 months ago)
- Last package publish
- Sep 23, 2026 (1 month ago)
From the package registry.
Details
- Registry name
io.github.bmoldo/terraback- Version
- 0.6.0
- Auth
- API key
- Packages
- pypi terraback
- License
- License unknown
- Website
- terraback.io/mcp/
- First seen
- Oct 24, 2026
- Last checked
- Oct 25, 2026
- Source
- Official MCP Registry
Cite this page
Terraback MCP server. Agent Mart. https://agentmart.dev/connectors/bmoldo-terraback (last updated 2026-10-25)