Which Terraform Platform Has the Best MCP Server?

A year ago "does your platform have an MCP server" was a roadmap question. As of July 2026, HashiCorp, Scalr, Spacelift, and env0 all ship one, so the question that actually separates them is different: what can the agent reach through it, what can the agent change, and whose identity is it using when it does.

Full disclosure up front: Scalr is our product, and this comparison reflects a view we hold about agent access. We've tried to keep every factual claim dated and checkable, and where a competitor's design is the better fit for a use case, we say so.

What Should You Compare MCP Servers On?

Not tool counts. Four properties determine what a server means for your risk posture, drawn from the access-class taxonomy in our primer on IaC with AI coding agents:

1. Read scope. Registry documentation only, or control-plane data: workspaces, runs, logs, variables, drift, state-derived inventory.
2. Write scope. Can it mutate configuration objects? Trigger runs? Approve applies? Provision resources directly? Each step widens what a compromised or confused session can do.
3. Identity model. A hosted endpoint with per-user OAuth inherits your existing RBAC per person. A local server with a static token is exactly as safe as that token's scope and storage.
4. Blast-radius controls. Toolset flags, read/write scope separation, and whether destructive operations need explicit enablement.

How Do the Platforms Compare?

The snapshot below was verified against vendor documentation and repositories on July 21, 2026. These servers change monthly; treat it as a starting point, not a purchase decision.

Two entries deserve their own line. Terrakube has an official MCP server with workspace and module CRUD, but no run execution and no published releases yet, so it's early-stage rather than production tooling. Atlantis has no MCP or AI capability at all; as of July 2026 an MCP server exists only as an unassigned feature request, which is consistent with Atlantis's position as a lean pull-request automation tool.

Which Design Philosophy Fits Agent Work?

The table shows two philosophies, and naming them matters more than ranking them.

Maximum agent authority. Spacelift and env0 built their servers so an agent can complete a change: trigger the run, approve the deployment, in Spacelift's case create resources directly through Intent. If your goal is closed-loop automation where agents execute routine changes with humans supervising by exception, that's genuine capability and those platforms deliver more of it. HashiCorp's server lands nearby once operations are enabled, with run creation and apply actions available against HCP Terraform and TFE.

Agent as investigator, human as executor. Scalr's server exposes broad read access, including areas the others mostly don't cover, like billing, IAM, and fleet-wide usage reports, but its write surface stops at creating workspaces and variables. An agent connected to Scalr's MCP can triage a failed run, classify drift, audit policy coverage, or answer "which workspaces still run Terraform 1.5" across the fleet. It cannot start a run or approve an apply, because those tools don't exist in the server, regardless of what the authenticated user could do in the UI.

We hold the second philosophy, and the reasoning is in our primer: the reviewed plan is the safety boundary, and a tool that can't cross the apply line means one less layer you have to configure correctly. Prompt injection through tool results is a documented, unsolved risk (HashiCorp's own MCP security guidance warns about it), and a server whose worst case is a stray workspace beats a server whose worst case is an approved apply. The counterpoint: this is a limitation you might not want. A team confident in its guardrails, sandboxing, and review pipeline may reasonably prefer env0's deploy actions and treat human-by-default as friction. That tradeoff, not any tool count, is the real decision.

What About the Vendors' Own AI Features?

The MCP server is what your agents use; most vendors also sell AI of their own, and the gating differs sharply as of July 2026. Spacelift's Saturnhead AI, which summarizes and explains failed runs, requires the Enterprise plan and is off by default with admin opt-in. env0's Cloud Analyst, natural-language analytics over deployment data, is included only in its top Cloud Pilot tier, with enablement through support. HashiCorp announced HCP Terraform powered by Infragraph in public preview in May 2026, positioning a unified infrastructure graph as the substrate for future agent features. Scalr's approach centers on the MCP server itself, letting your agent of choice do the analysis; our post on the Scalr MCP server walks through what that looks like in practice.

If AI-assisted run debugging matters to you and you're not on (or budgeting for) an enterprise tier, check the gating column as carefully as the feature list.

So Which One Is Best?

Best for what the agent is allowed to do. If you want agents executing changes end to end, env0 and Spacelift expose the most execution authority through MCP, and they've built real controls around it. If you want agents investigating broadly and humans holding the apply, Scalr's read-mostly server with per-user OAuth is the design that enforces that posture instead of asking you to configure it. HashiCorp's server is the strongest pure registry-documentation source and the natural choice if you're staying on HCP Terraform.

Whichever you pick, connect it read-only first, watch what your agents actually use for a month, and widen scope from evidence rather than from the feature list. Our least-privilege Claude Code setup shows what that looks like on the client side.