
Terraback
io.github.bmoldoPublished by GitHub account bmoldov0.6.0Updated Oct 24, 2026
Scan AWS/Azure/GCP and generate Terraform HCL with import blocks, deterministically, for AI agents.
Overview
Scans AWS, Azure, and GCP cloud resources and generates Terraform HCL with import blocks for AI agents.
- What you can do
- Terraback scans cloud accounts and produces Terraform configuration, including import blocks, so existing infrastructure can be brought under Terraform management. It is described as deterministic, meaning the same scan yields the same output. It runs as a local MCP server over stdio, so an assistant can invoke it as a tool during infrastructure work. The manifest does not list individual tool names.
- When to use it
- Useful when you want an assistant to inventory existing AWS, Azure, or GCP resources and draft Terraform code to adopt them. It fits infrastructure-as-code migration, drift review, and codifying manually created resources. It is a desktop-only local process, so it is not suited to browser or hosted use.
- Requirements
- Runs locally as a Python package (pypi terraback) launched with uvx over stdio; desktop only. Cloud credentials for the providers being scanned are needed, and ARM_SUBSCRIPTION_ID is recommended when scanning Azure for terraform plan verification with the azurerm provider. TERRABACK_LICENSE is an optional offline license key; without it the server runs in the free Community tier with codify_batch capped at 25 resources per run.
Installation
In SourceWeft
- Open Terraback in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Tools
0Version history
1- v0.6.0LatestSep 16, 2026
Score
25% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
- License10 pts
Declare a license in the repository or the registry entry.