Best OpenTofu MCP Servers
OpenTofu is an open-source infrastructure as code tool that enables users to safely and predictably provision and manage infrastructure.
Why this server?
Execute OpenTofu infrastructure as code scripts through Gateway Manager.
AlicenseBqualityAmaintenanceMCP server for connecting LLMs to Itential Platform, enabling network automation, workflow orchestration, and platform monitoring.7635GPL 3.0Why this server?
Provides search and retrieval of OpenTofu Registry content, including information about providers, modules, resources, and data sources, along with their documentation and configuration examples.

OpenTofu MCP Serverofficial
AlicenseAqualityBmaintenanceA Model Context Protocol server that allows AI assistants to search for and retrieve information about OpenTofu providers, modules, resources, and data sources from the OpenTofu Registry.5421108Mozilla Public 2.0Why this server?
Integrates with OpenTofu for infrastructure provisioning and state management, supporting drift detection and convergence.
AlicenseAqualityBmaintenanceA self-contained, security-first, EU-sovereign unified AI-operations MCP server that fuses a live bitemporal fleet model, a drift engine, and a tiered audited actuator into one control plane.5Apache 2.0Why this server?
Analyzes OpenTofu configurations for attack paths, similar to Terraform support, detecting multi-hop chains to sensitive resources.
AlicenseAqualityCmaintenanceMCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.2MITWhy this server?
Provides analysis, validation, and optimization of OpenTofu configurations managed through Terragrunt, including dependency mapping, stack structure checks, and issue detection.
AlicenseAqualityAmaintenanceEnables analysis and validation of Terragrunt projects, including dependency mapping, stack structure, and optimization suggestions, directly in IDEs that support MCP.82MITWhy this server?
Supports looking up Terraform providers and modules from the OpenTofu Registry as an alternative registry.
AlicenseAqualityAmaintenanceEnables AI coding agents to retrieve the latest stable versions of packages and tools across multiple ecosystems, preventing outdated dependency versions in generated code.48Apache 2.0Why this server?
Scans OpenTofu infrastructure-as-code configurations for quantum-vulnerable cryptography as part of infrastructure coverage.
AlicenseAqualityAmaintenancePost-quantum readiness for AI coding agents: scans code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and returns NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, with fix verification and dependency checks. Content-based, advisory tools only; runs local (npx @quantakrypto/mcp) or as a hosted OAuth endpoint.1610Apache 2.0Why this server?
Provides validation tools for OpenTofu configurations, including formatting checks and validate commands to ensure infrastructure code is correct.
AlicenseNot gradedqualityCmaintenanceEnables read-only inspection of Git repository status and diff summaries, along with validation of OpenTofu and Ansible configurations, through a strictly limited, non-mutating toolset.MITWhy this server?
Provides an alternative to Terraform for deploying the Cloudflare infrastructure needed by Living Atlas, supported as a drop-in replacement for Terraform workflows.
AlicenseNot gradedqualityCmaintenanceEnables local tools to interact with a private-first knowledge graph, with full CRUD access to authorized data while remote AI providers only see approved plaintext through policy-scoped MCP surfaces.MIT