CONNECT APP

Build with Terraform

Terraform Cloud enables infrastructure automation for provisioning, compliance, and management of any cloud, datacenter, and service.

Infrastructure & Cloud

API key

Visit Terraform ↗ Start building

MCP

Give your agent Terraform tools

Every Terraform action is exposed as an MCP tool on Pipedream's remote server. Point a client at it with your end user's ID and Connect resolves that user's Terraform account for each tool call — you store no tokens.

Pipedream Connect

// accessToken: mint a short-lived token with the Connect SDK — see the MCP guide
const transport = new StreamableHTTPClientTransport(
  new URL("https://remote.mcp.pipedream.net/v3"),
  {
    requestInit: {
      headers: {
        Authorization: `Bearer ${accessToken}`,
        "x-pd-project-id": "{project_id}",
        "x-pd-environment": "production",
        "x-pd-external-user-id": "{external_user_id}", // any stable ID for this user in your system
        "x-pd-app-slug": "terraform",
      },
    },
  },
)

const mcp = new Client({ name: "my-agent", version: "1.0.0" })
await mcp.connect(transport)

const { tools } = await mcp.listTools()

// e.g. run Create Run:
const result = await mcp.callTool({
  name: "terraform-create-run",
  arguments: {
    orgId: "Organization",
    workspaceId: "Workspace",
  },
})

# access_token: mint a short-lived token with the Connect SDK — see the MCP guide
headers = {
    "Authorization": f"Bearer {access_token}",
    "x-pd-project-id": "{project_id}",
    "x-pd-environment": "production",
    "x-pd-external-user-id": "{external_user_id}",  # any stable ID for this user in your system
    "x-pd-app-slug": "terraform",
}

async with streamablehttp_client("https://remote.mcp.pipedream.net/v3", headers=headers) as (read, write, _):
    async with ClientSession(read, write) as session:
        await session.initialize()
        tools = await session.list_tools()

        # e.g. run Create Run:
        result = await session.call_tool("terraform-create-run", {
            "orgId": "Organization",
            "workspaceId": "Workspace",
        })

MCP guide →

API PROXY

Call the Terraform API directly

For an endpoint with no pre-built tool, the Connect proxy forwards your request to the Terraform API with the connected user's credentials attached. You store no tokens and write no refresh logic.

Pipedream Connect

const resp = await pd.proxy.get({
  externalUserId: "{external_user_id}", // any stable ID for this user in your system
  accountId: "apn_xxxxxxx",
  url: "https://app.terraform.io/api/v2/account/details",
})

// Any allowed Terraform endpoint works here. Pipedream attaches the
// connected account's credentials to the outgoing request.

# The path segment is the target URL, URL-safe base64 encoded:
# https://app.terraform.io/api/v2/account/details

curl "https://api.pipedream.com/v1/connect/{project_id}/proxy/aHR0cHM6Ly9hcHAudGVycmFmb3JtLmlvL2FwaS92Mi9hY2NvdW50L2RldGFpbHM?external_user_id={external_user_id}&account_id=apn_xxxxxxx" \
  -H "Authorization: Bearer {access_token}" \
  -H "x-pd-environment: production"

API proxy guide →

SDK

Run Terraform actions from your backend

Connect a user's Terraform account once, then run Create Run on their behalf from your own code — TypeScript, Python, or plain HTTP.

Pipedream Connect

import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const result = await pd.actions.run({
  id: "terraform-create-run",
  externalUserId: "{external_user_id}", // any stable ID for this user in your system
  configuredProps: {
    terraform: { authProvisionId: "apn_xxxxxxx" },
    orgId: "Organization",
    workspaceId: "Workspace",
  },
})

from pipedream import Pipedream

pd = Pipedream(
    client_id="{oauth_client_id}",
    client_secret="{oauth_client_secret}",
    project_id="{project_id}",
    project_environment="production",
)

result = pd.actions.run(
    id="terraform-create-run",
    external_user_id="{external_user_id}",  # any stable ID for this user in your system
    configured_props={
        "terraform": {"authProvisionId": "apn_xxxxxxx"},
        "orgId": "Organization",
        "workspaceId": "Workspace",
    },
)

curl -X POST https://api.pipedream.com/v1/connect/{project_id}/actions/run \
  -H "Content-Type: application/json" \
  -H "X-PD-Environment: production" \
  -H "Authorization: Bearer {access_token}" \
  -d '{
    "external_user_id": "{external_user_id}",
    "id": "terraform-create-run",
    "configured_props": {
      "terraform": { "authProvisionId": "apn_xxxxxxx" },
      "orgId": "Organization",
      "workspaceId": "Workspace"
    }
  }'