io.github.bmoldo/terraback

Official registry Cloud and DevOps

Scan AWS/Azure/GCP and generate Terraform HCL with import blocks, deterministically, for AI agents.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package terraback
Claude Code
claude mcp add terraback -e 'TERRABACK_LICENSE=<your terraback_license>' -e 'ARM_SUBSCRIPTION_ID=<ARM_SUBSCRIPTION_ID>' -- uvx terraback==0.6.0 mcp
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "terraback": {
            "command": "uvx",
            "args": [
                "terraback==0.6.0",
                "mcp"
            ],
            "env": {
                "TERRABACK_LICENSE": "<your terraback_license>",
                "ARM_SUBSCRIPTION_ID": "<ARM_SUBSCRIPTION_ID>"
            }
        }
    }
}

Environment variables

  • TERRABACK_LICENSE secret Optional offline license key (Ed25519-signed). Without it the server runs in the free Community tier with codify_batch capped at 25 resources per run.
  • ARM_SUBSCRIPTION_ID Azure subscription ID for terraform plan verification with the azurerm provider (recommended when scanning Azure).

Frequently asked questions

What is io.github.bmoldo/terraback?

Scan AWS/Azure/GCP and generate Terraform HCL with import blocks, deterministically, for AI agents.

How do I install io.github.bmoldo/terraback?

It runs on your machine. In Claude Code: claude mcp add terraback -e 'TERRABACK_LICENSE=<your terraback_license>' -e 'ARM_SUBSCRIPTION_ID=<ARM_SUBSCRIPTION_ID>' -- uvx terraback==0.6.0 mcp. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.bmoldo/terraback need an API key?

Yes. It expects TERRABACK_LICENSE, which you set in its configuration.

Who maintains io.github.bmoldo/terraback?

It is published by bmoldo. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.