SantyagoSeaman/aws-tf-modules-mcp-server

TFModSearch MCP Server

A Model Context Protocol (MCP) server that provides intelligent search capabilities for Terraform AWS module documentation using hybrid search (keyword matching, BM25, and semantic embeddings).

Ready to Use: Includes a pre-built search index with embeddings for 54 curated Terraform AWS modules. Install and run the MCP server immediately—no index building required!

🚀 Features

• Hybrid Search Engine: Combines keyword matching (IDF-weighted), BM25 text relevance, exact module name matching, and semantic similarity for accurate results
• MCP Integration: Seamlessly integrates with Claude Desktop and other MCP clients
• Fast & Efficient: Pre-built search index with CPU-only inference using BAAI/bge-base-en-v1.5 model
• Ready to Use: Includes pre-built index (model/tfmod_index.pkl) with embeddings from BAAI/bge-base-en-v1.5 model and curated Terraform AWS module documentation
• Comprehensive Catalog: Access to terraform-aws-modules documentation compiled from official sources with rich metadata
• Security-First: Built-in path validation and access controls for safe file operations
• Configurable Weights: Fine-tune search scoring through YAML config or CLI arguments

📋 Table of Contents

• Installation
• Quick Start
  • Claude Code CLI Integration
  • Claude Desktop Integration
  • GitHub Copilot Integration
• Usage
  • Building the Index
  • CLI Search
• MCP Tools
• Configuration
• Development
• Testing
• Architecture
  • Indexed Modules
• Contributing
• License

📦 Installation

Quick Install (No Clone Required)

The easiest way to use this MCP server is with uvx - no need to clone the repository.

Install uv first (if not already installed):

curl -LsSf https://astral.sh/uv/install.sh | sh

Then add to your MCP client config:

{
  "mcpServers": {
    "terraform-modules": {
      "command": "uvx",
      "args": ["git+https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server"]
    }
  }
}

Note: If you get "command not found" error, use the full path to uvx:

# Find uvx location
which uvx
# Example output: /Users/username/.local/bin/uvx

Then use the full path in your config:

"command": "/Users/username/.local/bin/uvx"

Prerequisites

• Python 3.13 or higher
• uv (recommended) or pip

Local Installation (For Development)

# Clone the repository
git clone https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server.git
cd aws-tf-modules-mcp-server

# Create virtual environment and install dependencies
uv venv --python 3.13
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
uv pip install -r pyproject.toml

Using pip

# Clone the repository
git clone https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server.git
cd aws-tf-modules-mcp-server

# Create virtual environment and install dependencies
python -m venv .venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
pip install -r pyproject.toml

Ready to Go: The repository includes a pre-built search index, so you can skip the index building step and run the MCP server immediately after installation!

🏃 Quick Start

1. Build the Search Index (Optional)

Note: This repository includes a pre-built search index at model/tfmod_index.pkl with embeddings for 54 curated Terraform AWS modules. You can skip this step and proceed directly to testing or running the server if you want to use the included modules.

To rebuild the index or create a new one with additional modules:

python src/tfmod_search_cli.py index \
  --docs_dir ./modules/terraform-aws-modules

Note: The first run will download the BAAI/bge-base-en-v1.5 model (~220MB).

2. Test the Search (CLI)

Test the search functionality using the command-line interface:

python src/tfmod_search_cli.py search \
  --query "s3 bucket with kms encryption and versioning" \
  --top_k 5

Claude Code CLI Integration

Option 1: Using uvx (Recommended - No Clone Required)

Add to your Claude Code settings (~/.claude/settings.json):

{
  "mcpServers": {
    "terraform-modules": {
      "command": "uvx",
      "args": ["git+https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server"]
    }
  }
}

Note: If uvx is not found, use the full path (run which uvx to find it):

"command": "/Users/username/.local/bin/uvx"

Option 2: Using Local Installation

# Add the MCP server (replace with your actual path)
claude mcp add --transport stdio terraform-modules -- \
  /absolute/path/to/aws-tf-modules-mcp-server/.venv/bin/python \
  /absolute/path/to/aws-tf-modules-mcp-server/src/tfmod_mcp_server.py

# Verify the server was added
claude mcp list

Or manually add to your Claude Code settings (~/.claude/settings.json):

{
  "mcpServers": {
    "terraform-modules": {
      "command": "/absolute/path/to/aws-tf-modules-mcp-server/.venv/bin/python",
      "args": [
        "/absolute/path/to/aws-tf-modules-mcp-server/src/tfmod_mcp_server.py"
      ]
    }
  }
}

Claude Desktop Integration

Add to your Claude Desktop configuration (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

Option 1: Using uvx (Recommended - No Clone Required)

{
  "mcpServers": {
    "terraform-modules": {
      "command": "uvx",
      "args": ["git+https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server"]
    }
  }
}

Note: If uvx is not found, use the full path (run which uvx to find it):

"command": "/Users/username/.local/bin/uvx"

Option 2: Using Local Installation

{
  "mcpServers": {
    "terraform-modules": {
      "command": "/absolute/path/to/aws-tf-modules-mcp-server/.venv/bin/python",
      "args": [
        "/absolute/path/to/aws-tf-modules-mcp-server/src/tfmod_mcp_server.py"
      ]
    }
  }
}

GitHub Copilot Integration (VS Code)

Add the MCP server to GitHub Copilot in VS Code (requires VS Code 1.99+):

Step 1: Create .vscode/mcp.json in your project root (or open user-level config via Command Palette: "MCP: Open User Configuration"):

Option 1: Using uvx (Recommended - No Clone Required)

{
  "servers": {
    "terraform-modules": {
      "type": "stdio",
      "command": "uvx",
      "args": ["git+https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server"]
    }
  }
}

Note: If uvx is not found, use the full path (run which uvx to find it).

Option 2: Using Local Installation

{
  "servers": {
    "terraform-modules": {
      "type": "stdio",
      "command": "/absolute/path/to/aws-tf-modules-mcp-server/.venv/bin/python",
      "args": [
        "/absolute/path/to/aws-tf-modules-mcp-server/src/tfmod_mcp_server.py"
      ]
    }
  }
}

Step 2: Click the "Start" button that appears at the top of the mcp.json file to initialize the server.

Step 3: Open GitHub Copilot Chat, select Agent mode from the popup menu, and click the tools icon to verify the terraform-modules server and its tools are available.

Alternative setup via Command Palette:

1. Open Command Palette (Cmd+Shift+P on macOS / Ctrl+Shift+P on Windows/Linux)
2. Run "MCP: Add Server"
3. Select "stdio" as the server type
4. Enter terraform-modules as the server name
5. Enter the Python path as the command
6. Enter the script path as the argument

Managing MCP Servers:

• "MCP: List Servers" — view installed servers and available actions
• "MCP: Reset Cached Tools" — refresh tool discovery if tools don't appear
• "MCP: Show Output" — debug server connection issues

For more details, see VS Code MCP documentation and GitHub Copilot MCP guide.

📖 Usage

1. Building the Index

Note: The repository includes a pre-built index—you only need to build a new index if you want to add more modules or customize the existing ones.

Build or rebuild the search index from your module documentation:

python src/tfmod_search_cli.py index \
  --docs_dir ./modules/terraform-aws-modules \
  --index_path ./model/tfmod_bge_base_index.pkl

Options:

• --docs_dir: Directory containing Terraform module markdown files (required)
• --index_path: Output path for the pickled index file (optional, defaults to ./model/tfmod_index.pkl)
• --model: Sentence transformer model to use (default: BAAI/bge-base-en-v1.5)

2. CLI Search (Standalone)

Search for modules without running the MCP server:

# Search by functionality
python src/tfmod_search_cli.py search \
  --query "kubernetes cluster management" \
  --top_k 3

# Search by exact module name
python src/tfmod_search_cli.py search \
  --query "vpc" \
  --top_k 5

# Search with custom weights
python src/tfmod_search_cli.py search \
  --query "object storage" \
  --w_kw 2.5 \
  --w_exact 4.0 \
  --w_bm25 1.5 \
  --w_sem 1.0

# Search with optional query instruction for BGE models
python src/tfmod_search_cli.py search \
  --query "s3" \
  --query-instruction "Represent this sentence for searching relevant passages: "

🛠️ MCP Tools

The MCP server exposes three tools for Terraform module discovery and documentation retrieval:

modules_list()

List all available Terraform modules in the catalog.

Parameters: None

Returns: Complete list of modules with names, paths, descriptions, and keywords.

Example:

{
  "modules": [
    {
      "module_name": "vpc",
      "path": "modules/terraform-aws-modules/vpc.md",
      "description": "Terraform module to create AWS VPC resources...",
      "keywords": ["vpc", "subnet", "networking", "aws"]
    }
  ],
  "count": 54
}

search_modules(query: str)

Search for Terraform modules using keywords, exact names, or natural language queries.

Parameters:

• query (string): Free-text search query

Returns: Top-3 ranked modules with metadata and relevance scores.

Example queries:

• "vpc" - Find VPC module by exact name
• "object storage with encryption" - Natural language search
• "kubernetes cluster management" - Find EKS module
• "serverless functions" - Find Lambda module

get_module(module_identifier: str)

Retrieve full documentation for a specific Terraform module.

Parameters:

• module_identifier (string): Module name (e.g., "vpc") or relative path (e.g., "modules/terraform-aws-modules/vpc.md")

Returns: Complete module documentation as markdown text.

Security: Only files under the modules/ directory are accessible. Absolute paths and path traversal attempts are rejected.

⚙️ Configuration

Search Weights Configuration

Create a config.yaml file in the project root to customize search scoring weights:

# Optional query instruction for BGE models (improves short query retrieval)
# Set to null to disable (default), or use:
# query_instruction: "Represent this sentence for searching relevant passages: "
query_instruction: null

search_weights:
  w_kw: 1.0      # Keyword overlap weight (IDF-weighted)
  w_exact: 3.0   # Exact module name match boost
  w_bm25: 2.0    # BM25 text relevance weight
  w_sem: 3.0     # Semantic similarity weight

Configuration Precedence (highest to lowest):

1. CLI arguments (--w_kw, --w_exact, --query-instruction, etc.)
2. config.yaml file
3. Built-in defaults

Module Documentation Format

Terraform module documentation files should be Markdown with YAML front-matter:

---
module_name: terraform-aws-vpc
keywords: [vpc, subnet, networking, aws]
---

# Terraform AWS VPC Module

Module description and documentation...

👩‍💻 Development

Setting Up Development Environment

# Clone the repository
git clone https://github.com/SantyagoSeaman/aws-tf-modules-mcp-server.git
cd aws-tf-modules-mcp-server

# Install with development dependencies
uv pip install -e ".[dev]"

# Install pre-commit hooks
pre-commit install

Development Dependencies

The project includes the following development tools:

• pytest: Testing framework with async support
• ruff: Fast Python linter and formatter
• mypy: Static type checker
• pre-commit: Git hooks for code quality

Code Quality

# Run linter
ruff check src/ tests/

# Run formatter
ruff format src/ tests/

# Run type checker
mypy src/

# Run all checks (linter + formatter + type checker)
pre-commit run --all-files

🧪 Testing

The project includes comprehensive integration tests covering all major functionality.

Running Tests

# Run all tests
pytest tests/ -v

# Run specific test suite
pytest tests/integration/test_mcp_server.py -v           # MCP server tests (17 tests)
pytest tests/integration/test_parse_markdown.py -v       # Parsing tests (12 tests)
pytest tests/integration/test_cli_index.py -v            # CLI index tests (4 tests)
pytest tests/integration/test_model_comparison.py -v -s  # Model comparison tests (31 tests)

# Run with coverage
pytest tests/ --cov=src --cov-report=term-missing --cov-report=html

Test Coverage

• MCP Server (17 tests): search_modules tool, get_module resource, security validation, integration workflows
• Markdown Parsing (12 tests): YAML front-matter parsing, description extraction, normalization
• CLI Index Building (4 tests): Index creation, validation, search integration
• Model Comparison (31 tests): Embedding model performance comparison with timing analysis

Total: 64 integration tests

🏗️ Architecture

Included Content

This repository includes:

• Pre-built Search Index (model/tfmod_index.pkl):

  • Ready-to-use search index with pre-computed embeddings using BAAI/bge-base-en-v1.5 model
  • Contains BM25 corpus, semantic vectors, and keyword IDF scores
  • Includes 54 curated Terraform AWS modules
  • File size: ~4.38 MB

• Curated Module Documentation (modules/terraform-aws-modules/):

  • Compiled documentation for 54 Terraform AWS modules covering compute, storage, networking, databases, security, and more
  • Sourced from official terraform-aws-modules project
  • Formatted as Markdown with YAML front-matter metadata
  • Each module includes comprehensive documentation with best practices, use cases, and examples

Indexed Modules

The search index includes 54 Terraform AWS modules across multiple service categories. Each module is documented with comprehensive descriptions, best practices, use cases, and integration examples.

Compute & Containers:

• app-runner - Containerized web application deployments
• autoscaling - EC2 Auto Scaling Groups
• batch - AWS Batch for batch computing workloads
• ec2-instance - EC2 virtual machines
• ecs - Elastic Container Service
• eks - Elastic Kubernetes Service
• eks-pod-identity - EKS Pod Identity configuration
• lambda - Serverless functions

Networking:

• alb - Application Load Balancer
• customer-gateway - VPN customer gateway
• elb - Classic Load Balancer
• transit-gateway - Transit Gateway for network hub
• vpc - Virtual Private Cloud
• vpn-gateway - VPN Gateway and Site-to-Site VPN

Storage:

• ebs-optimized - EBS optimization validation
• ecr - Elastic Container Registry
• efs - Elastic File System
• fsx - FSx file systems (Lustre, ONTAP, OpenZFS, Windows)
• s3-bucket - S3 object storage

Databases:

• dms - Database Migration Service
• dynamodb-table - DynamoDB NoSQL database
• elasticache - ElastiCache (Redis, Memcached)
• memory-db - MemoryDB for Redis
• opensearch - OpenSearch search and analytics
• rds - Relational Database Service
• rds-aurora - Aurora serverless databases
• rds-proxy - RDS Proxy for connection pooling
• redshift - Redshift data warehouse

Security & Identity:

• acm - AWS Certificate Manager
• iam - Identity and Access Management
• key-pair - EC2 key pairs
• kms - Key Management Service
• secrets-manager - Secrets Manager
• security-group - VPC security groups

Monitoring & Logging:

• cloudwatch - CloudWatch logs and metrics
• datadog-forwarders - Datadog log forwarding
• managed-service-grafana - Amazon Managed Grafana
• managed-service-prometheus - Amazon Managed Prometheus

Application Integration:

• apigateway-v2 - API Gateway HTTP and WebSocket APIs
• appsync - GraphQL API service
• eventbridge - Event-driven architecture
• msk-kafka-cluster - Managed Streaming for Kafka
• sns - Simple Notification Service
• sqs - Simple Queue Service
• step-functions - Serverless workflow orchestration

Networking & Content Delivery:

• cloudfront - CloudFront CDN
• global-accelerator - Global Accelerator for performance
• network-firewall - AWS Network Firewall
• route53 - DNS and domain management

Developer Tools & Automation:

• appconfig - Application configuration management
• atlantis - Terraform pull request automation
• notify-slack - Slack notification integration
• ssm-parameter - Systems Manager Parameter Store

All modules include detailed documentation with:

• Module metadata and version information
• Comprehensive feature descriptions
• Real-world use cases
• Security and operational best practices
• Integration examples and code snippets
• Links to official AWS documentation

Components

1. Search Library (src/tfmod_search_lib.py)

   • Core search engine with hybrid scoring (keyword + BM25 + semantic)
   • Index building and management
   • Markdown parsing with YAML front-matter support

2. CLI Tool (src/tfmod_search_cli.py)

   • Command-line interface for index building and testing
   • Two subcommands: index and search

3. MCP Server (src/tfmod_mcp_server.py)

   • FastMCP-based stdio server
   • Exposes search and retrieval tools
   • Configuration management and logging

Data Flow

Documentation (.md files)
    ↓
CLI builds index (parse + embed + BM25)
    ↓
Pickled index file (.pkl)
    ↓
MCP server loads index
    ↓
Tools: search_modules, get_module, modules_list
    ↓
Claude Desktop / MCP Clients

Search Scoring Algorithm

The hybrid search combines four signals with configurable weights:

1. Keyword Overlap (w_kw): IDF-weighted keyword matching
2. Exact Match (w_exact): Boost for exact module name matches
3. BM25 (w_bm25): Statistical text relevance (Okapi BM25)
4. Semantic Similarity (w_sem): Cosine similarity of neural embeddings

All scores are min-max normalized before weighted combination.

Embedding Model Comparison

The project supports multiple embedding models. Here are benchmark results comparing thenlper/gte-small and BAAI/bge-base-en-v1.5:

Test conditions: 15 queries across 3 modules (s3-bucket, rds, ec2-instance) with 5 query types each (1-word, 2-word, short-phrase, medium-phrase, long natural language query).

Key findings:

• Both models achieve 100% success rate for finding target modules in top-3 results
• gte-small is ~2.5x faster per query
• bge-base-en-v1.5 provides better similarity distribution for semantic search (addresses narrow clustering)
• BGE v1.5 supports optional query instruction prefix for improved short query retrieval

Default model: BAAI/bge-base-en-v1.5 is the default for better retrieval quality with larger embedding dimensions.

🤝 Contributing

Contributions are welcome! Please follow these guidelines:

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Make your changes
4. Run tests and code quality checks
5. Commit your changes (git commit -m 'Add amazing feature')
6. Push to the branch (git push origin feature/amazing-feature)
7. Open a Pull Request

Development Guidelines

• Follow PEP 8 style guidelines (enforced by ruff)
• Add type hints to all functions (checked by mypy)
• Write tests for new features
• Update documentation as needed
• Keep commits atomic and well-described

📄 License

This project is licensed under the MIT License - see the file for details.

🙏 Acknowledgments

• Built with FastMCP - FastAPI-style MCP server framework
• Uses sentence-transformers for semantic embeddings
• Terraform module documentation from terraform-aws-modules

📞 Support

For questions, issues, or feature requests:

• Open an issue on GitHub Issues
• Check existing issues for common problems and solutions