richclement/tfccli

Overview

This skill provides a command-line interface for Terraform Cloud APIs, allowing programmatic management of workspaces, runs, plans, applies, organizations, projects, configuration versions, variables, users, and invoices. It exposes discovery, context management, and robust commands to script and automate Terraform Cloud workflows. The tool is designed for CI automation, admin tasks, and ad-hoc debugging against Terraform Cloud or HCP Terraform.

How this skill works

The CLI reads authentication from environment variables, Terraform CLI config files, or the credentials file created by terraform login, then issues HTTP requests to the Terraform Cloud API. It exposes domain-specific subcommands (organizations, projects, workspaces, runs, plans, configuration-versions, etc.) with flags to list, get, create, update, delete, upload, and download resources. Global flags let you switch contexts, override API addresses, change output format, enable debug logging, and force noninteractive behavior.

When to use it

• Automate Terraform Cloud workflows in CI/CD pipelines
• Script bulk workspace or variable management tasks
• Trigger, inspect, approve or cancel runs programmatically
• Upload or download configuration versions and plan outputs
• Query organization, project, or billing information from the terminal

Best practices

• Store tokens securely and prefer environment variables for automation (TF_TOKEN_<sanitized_hostname>)
• Use named contexts to manage multiple Terraform Cloud accounts or HCP endpoints
• Run tfccli doctor after changing credentials to validate connectivity and permissions
• Prefer json output for machine consumption and table output for human-friendly summaries
• Use --force only in automated contexts where confirmations are not required

Example use cases

• Create a workspace, upload a configuration version, trigger a run and apply it in CI
• Export workspace variables to JSON for backups or migration between workspaces
• List recent runs for a workspace and inspect a specific plan’s JSON execution plan
• Download an errored state file or apply details for forensic debugging
• Manage organizations and projects: create, rename, or delete programmatically