Tools

HashiCorp's infrastructure-as-code tool: manage multi-cloud and SaaS resources with declarative config, previewing changes with plan before running apply. Providers cover all major clouds. Licensed under BSL 1.1.

HashiCorp's official Terraform plugin: runs the Terraform MCP Server in Docker against the Terraform Registry and HCP Terraform API to look up provider and module docs and help write IaC. Needs Docker; TFE_TOKEN is optional.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.

Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.

Terraform and OpenTofu best practices from Anton Babenko: diagnoses the failure mode first, then guides testing, module structure, state management, CI/CD and security scanning. Works for AWS, Azure and GCP.

HashiCorp's official server: looks up provider, module and policy docs in the Terraform Registry to help write IaC; with an HCP Terraform token it can also manage workspaces, variables and runs. Runs in Docker by default.

HashiCorp's official Terraform and Packer skills: write HCL in the official style, refactor modules, terraform test, provider development, Stacks and policy, plus AWS and Azure image builds.

HashiCorp's official plugin marketplace: the terraform plugin has 16 skills (configuration, modules, provider development, testing, import, Stacks and policy), and the packer plugin has 4 image-build and HCP Packer skills.

Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex.

Pulumi's official skills: Pulumi program best practices, components and the Automation API, ESC secrets and config, debugging failed pulumi up runs, and migrating from Terraform, CDK, CloudFormation or ARM to Pulumi.