← MCP Security Catalog

OpenTofu MCP Server 0.1.5

npm · @opentofu/opentofu-mcp-server · latest release

Verified with no proven findings
Security result
5
Observed tools
55
Version rating
Change risk

Independent inventory

Observed 2026-08-14T15:44:31.969Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
get-datasource-docsGet detailed documentation for a specific OpenTofu data source by provider namespace, provider name, and data source name.
Input schema
{
  "type": "object",
  "properties": {
    "namespace": {
      "type": "string",
      "minLength": 1,
      "description": "Provider namespace (e.g., 'hashicorp', 'opentofu')"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "description": "Provider name WITHOUT 'terraform-provider-' prefix (e.g., 'aws', 'kubernetes')"
    },
    "dataSource": {
      "type": "string",
      "minLength": 1,
      "description": "Data source name WITHOUT provider prefix (e.g., 'ami', 'vpc')"
    },
    "version": {
      "type": "string",
      "description": "Provider version (e.g., 'v4.0.0'). If not specified, latest version will be used"
    }
  },
  "required": [
    "namespace",
    "name",
    "dataSource"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get-module-detailsGet detailed information about a specific OpenTofu module by namespace, name, and target. Use the simple module name, NOT the full repository name.
Input schema
{
  "type": "object",
  "properties": {
    "namespace": {
      "type": "string",
      "minLength": 1,
      "description": "Module namespace without prefix (e.g., 'terraform-aws-modules')"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "description": "Simple module name WITHOUT 'terraform-aws-' or similar prefix (e.g., 'vpc', 's3-bucket')"
    },
    "target": {
      "type": "string",
      "minLength": 1,
      "description": "Module target platform (e.g., 'aws', 'kubernetes', 'azurerm')"
    }
  },
  "required": [
    "namespace",
    "name",
    "target"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get-provider-detailsGet detailed information about a specific OpenTofu provider by namespace and name. Do NOT include 'terraform-provider-' prefix in the name.
Input schema
{
  "type": "object",
  "properties": {
    "namespace": {
      "type": "string",
      "minLength": 1,
      "description": "Provider namespace (e.g., 'hashicorp', 'opentofu')"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "description": "Provider name WITHOUT 'terraform-provider-' prefix (e.g., 'aws', 'kubernetes', 'azurerm')"
    }
  },
  "required": [
    "namespace",
    "name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get-resource-docsGet detailed documentation for a specific OpenTofu resource by provider namespace, provider name, and resource name.
Input schema
{
  "type": "object",
  "properties": {
    "namespace": {
      "type": "string",
      "minLength": 1,
      "description": "Provider namespace (e.g., 'hashicorp', 'opentofu')"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "description": "Provider name WITHOUT 'terraform-provider-' prefix (e.g., 'aws', 'kubernetes')"
    },
    "resource": {
      "type": "string",
      "minLength": 1,
      "description": "Resource name WITHOUT provider prefix (e.g., 's3_bucket', 'instance')"
    },
    "version": {
      "type": "string",
      "description": "Provider version (e.g., 'v4.0.0'). If not specified, latest version will be used"
    }
  },
  "required": [
    "namespace",
    "name",
    "resource"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
search-opentofu-registrySearch the OpenTofu Registry to find providers, modules, resources, and data sources. Use simple terms without prefixes like 'terraform-provider-' or 'terraform-module-'.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "minLength": 2,
      "description": "Search query for finding OpenTofu components (e.g., 'aws', 'kubernetes', 'database', 's3')"
    },
    "type": {
      "type": "string",
      "enum": [
        "provider",
        "module",
        "resource",
        "data-source",
        "all"
      ],
      "default": "all",
      "description": "Type of registry items to search for"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

Resources 1

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 812db8fc2625997dcf7711848df3bc2c4d21956954cff060ddf4705bd0e0805e

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.