Terraform

Source: https://runstack.engineer/docs/toolkits/terraform

HCP Terraform workspaces, runs, state, variables, teams, policies, registry, and integrations via the Terraform Cloud API.

Tools (99):

Tool	Description
`terraformListOrganizations`	List HCP Terraform organizations visible to the token.
`terraformGetOrganization`	Get an organization with permissions, plan, and feature flags.
`terraformCreateOrganization`	Create a new HCP Terraform organization with an owner email.
`terraformUpdateOrganization`	Update organization settings such as name, email, or execution mode defaults.
`terraformDeleteOrganization`	Permanently delete an organization and everything in it.
`terraformGetOrganizationEntitlements`	Get organization feature entitlements (agents, SSO, Sentinel, limits).
`terraformListProjects`	List projects in an organization. Projects group workspaces for access scoping.
`terraformGetProject`	Get a project by ID with workspace/team counts and permissions.
`terraformCreateProject`	Create a project in an organization to group workspaces.
`terraformUpdateProject`	Update a project name or description.
`terraformDeleteProject`	Delete an empty project.
`terraformListWorkspaces`	List workspaces in an organization with lock state and run status.
`terraformGetWorkspace`	Get a workspace by ID with settings, permissions, and current run.
`terraformGetWorkspaceByName`	Get a workspace by organization and name (human-friendly lookup).
`terraformCreateWorkspace`	Create a workspace with execution settings, optionally in a project.
`terraformUpdateWorkspace`	Update workspace settings such as auto-apply, execution mode, or Terraform version.
`terraformDeleteWorkspace`	Delete a workspace and its runs, state, and variables.
`terraformSafeDeleteWorkspace`	Safely delete a workspace only if it has no managed resources.
`terraformLockWorkspace`	Lock a workspace to prevent new runs, with an explanatory reason.
`terraformUnlockWorkspace`	Unlock a workspace so runs can be queued again.
`terraformForceUnlockWorkspace`	Force-unlock a workspace stuck locked by a crashed run.
`terraformListWorkspaceRuns`	List runs in a workspace with status/operation filters.
`terraformCreateRun`	Queue a plan/apply run in a workspace (or destroy/refresh-only/plan-only).
`terraformGetRun`	Get run details: status, plan/apply state, permissions, timestamps.
`terraformListOrganizationRuns`	List runs across an organization with status and workspace filters.
`terraformApplyRun`	Confirm and apply a run paused for confirmation.
`terraformDiscardRun`	Discard a run waiting for confirmation so later runs can proceed.
`terraformCancelRun`	Gracefully cancel a planning or applying run.
`terraformForceCancelRun`	Immediately terminate a run and unlock the workspace.
`terraformForceExecuteRun`	Execute a pending run now, discarding blocking prior runs.
`terraformGetPlan`	Get a plan with resource change summary and status.
`terraformGetPlanJsonOutput`	Download the machine-readable JSON output of a plan.
`terraformGetApply`	Get an apply with status, timestamps, and log readout URL.
`terraformGetCostEstimate`	Get a run cost estimate with proposed monthly cost delta.
`terraformListStateVersions`	List state versions of a workspace, newest first.
`terraformGetStateVersion`	Get a state version by ID with download URL and lineage.
`terraformGetCurrentStateVersion`	Get the workspace's current state version.
`terraformGetCurrentStateVersionOutputs`	Get output values of the workspace's current state.
`terraformGetStateVersionOutputs`	Get output values of a specific state version.
`terraformCreateStateVersion`	Upload a new state version for local-execution workspaces.
`terraformCreateConfigurationVersion`	Create a configuration version on a workspace (API-driven run step 1).
`terraformGetConfigurationVersion`	Get a configuration version with source and upload status.
`terraformUploadConfigurationVersion`	Upload a .tar.gz configuration bundle to a configuration version.
`terraformListVariables`	List variables for a workspace.
`terraformCreateVariable`	Create a Terraform or environment variable on a workspace.
`terraformGetVariable`	Get a variable by ID (sensitive values never returned).
`terraformUpdateVariable`	Update a variable key, value, description, or flags.
`terraformDeleteVariable`	Delete a variable from a workspace.
`terraformListVariableSets`	List variable sets for sharing variables across workspaces.
`terraformGetVariableSet`	Get a variable set by ID with scope and attachments.
`terraformCreateVariableSet`	Create a variable set scoped globally, to projects, or workspaces.
`terraformUpdateVariableSet`	Update a variable set name, description, scope, or priority.
`terraformDeleteVariableSet`	Delete a variable set and its variables.
`terraformListVariableSetVars`	List variables inside a variable set.
`terraformAttachVariableSetWorkspaces`	Attach a variable set to workspaces.
`terraformDetachVariableSetWorkspaces`	Detach a variable set from workspaces.
`terraformListTeams`	List teams in an organization with member counts.
`terraformGetTeam`	Get a team by ID with permissions and member count.
`terraformCreateTeam`	Create a team with organization-level permissions.
`terraformUpdateTeam`	Update team name, visibility, or organization permissions.
`terraformDeleteTeam`	Delete a team (workspace access through it is revoked).
`terraformListTeamTokens`	List team API tokens in an organization (metadata only).
`terraformGetTeamToken`	Get team token metadata by token ID (secret never returned).
`terraformCreateTeamToken`	Generate a team API token. Secret returned once — store immediately.
`terraformDeleteTeamToken`	Revoke a team API token by token ID.
`terraformListTeamAccess`	List team-to-workspace access grants.
`terraformGetTeamAccess`	Get one team access grant by ID.
`terraformCreateTeamAccess`	Grant a team access to a workspace (fixed or custom permissions).
`terraformUpdateTeamAccess`	Change the permission level of a team access grant.
`terraformDeleteTeamAccess`	Revoke a team access grant from a workspace.
`terraformListPolicies`	List Sentinel policies in an organization.
`terraformGetPolicy`	Get a Sentinel policy by ID with enforcement mode.
`terraformCreatePolicy`	Create a Sentinel policy (code uploaded separately).
`terraformUpdatePolicy`	Update a Sentinel policy name, description, or enforcement.
`terraformDeletePolicy`	Delete a Sentinel policy.
`terraformListPolicySets`	List policy sets with workspace attachments.
`terraformGetPolicySet`	Get a policy set by ID with policies and VCS settings.
`terraformCreatePolicySet`	Create a policy set, optionally attached to workspaces.
`terraformUpdatePolicySet`	Update a policy set name, description, scope, or attachments.
`terraformDeletePolicySet`	Delete a policy set.
`terraformGetPolicyCheck`	Get a policy check result for a run.
`terraformOverridePolicyCheck`	Override soft-failed policies so the run can be applied.
`terraformListRegistryModules`	List private registry modules with versions.
`terraformGetRegistryModule`	Get a registry module with versions and VCS repo.
`terraformDeleteRegistryModuleVersion`	Delete one version of a private registry module.
`terraformListAgentPools`	List agent pools for remote execution via agents.
`terraformGetAgentPool`	Get an agent pool by ID.
`terraformListOAuthClients`	List VCS OAuth clients (GitHub, GitLab, Bitbucket, Azure DevOps).
`terraformGetOAuthClient`	Get a VCS OAuth client by ID.
`terraformListNotificationConfigs`	List notification configurations on a workspace.
`terraformGetNotificationConfig`	Get a notification configuration by ID.
`terraformCreateNotificationConfig`	Create a workspace notification for run events.
`terraformUpdateNotificationConfig`	Update a notification configuration.
`terraformDeleteNotificationConfig`	Delete a notification configuration.
`terraformVerifyNotificationConfig`	Send a test notification to verify delivery.
`terraformListRunTriggers`	List run triggers that queue runs when a source workspace applies.
`terraformGetRunTrigger`	Get a run trigger by ID.
`terraformCreateRunTrigger`	Create a run trigger so source applies queue runs here.
`terraformDeleteRunTrigger`	Delete a run trigger to stop cross-workspace chaining.