Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Cloud and hosting - official Pulumi server

Pulumi MCP server

Hosted MCP server that lets agents list Pulumi Cloud stacks, search resources, check policy violations, look up resource schemas in the Pulumi Registry, and hand tasks to Pulumi Neo. The server itself never runs pulumi up or changes infrastructure. Pulumi hosts it at https://mcp.ai.pulumi.com/mcp with OAuth or API key auth.

Last verified 14 tools2 sources

Install

Claude Code

About Claude Code
Terminal
claude mcp add --transport http pulumi https://mcp.ai.pulumi.com/mcp

Cursor

About Cursor
JSON
{
  "mcpServers": {
    "pulumi": {
      "url": "https://mcp.ai.pulumi.com/mcp"
    }
  }
}

Generic

JSON
{
  "mcpServers": {
    "pulumi": {
      "url": "https://mcp.ai.pulumi.com/mcp",
      "headers": {
        "Authorization": "Bearer ${PULUMI_MCP_TOKEN}",
        "X-Pulumi-Org": "acme"
      }
    }
  }
}

Tools

get-stacks
List the stacks in your organization.
resource-search
Search resources across all stacks using resource search queries.
get-policy-violations
List policy as code violations for your stacks.
get-users
List the members of your organization and their roles.
neo-bridge
Start a Neo task, send follow-up messages, and approve or reject its requests.
neo-get-tasks
List your organization's Neo tasks and their status.
neo-continue-task
Check the status of an existing Neo task and read its latest events.
neo-reset-conversation
Clear the server's tracked state for a task, or for all tasks.
list-resources
List the resource types in a provider or module.
list-functions
List the functions in a provider or module.
get-resource
Get a resource's properties and documentation.
get-function
Get a function's inputs, outputs, and documentation.
get-type
Get the JSON schema for a type reference.
deploy-to-aws
Return step-by-step instructions for writing Pulumi code that deploys an application to AWS.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Authentication uses a Pulumi access token: interactive clients open a browser flow where you paste a token and pick a default org (sessions last 30 days); headless clients send Authorization: Bearer plus optional X-Pulumi-Org headers.
  • Use a separate token from the CLI's. resource-search and neo-bridge need the Essentials, Pro, or Enterprise edition; neo-bridge starts Neo tasks that are billed to the organization and can change infrastructure once approved (deny mcp__pulumi__neo-bridge to prevent this).
  • Also exposes prompts for AWS deploys, Terraform-to-TypeScript conversion and CDK migration.
  • Stdio-only clients can use npx -y mcp-remote https://mcp.ai.pulumi.com/mcp (documented for Kiro).
  • The older local npm package @pulumi/mcp-server (last published 2025-09-26) is no longer referenced in the docs.
  • No beta/GA label.

More MCP servers for cloud and hosting

Related reading

FAQ

What does the Pulumi MCP server do?

Hosted MCP server that lets agents list Pulumi Cloud stacks, search resources, check policy violations, look up resource schemas in the Pulumi Registry, and hand tasks to Pulumi Neo. The server itself never runs pulumi up or changes infrastructure. The vendor documents 14 tools, including get-stacks, resource-search, get-policy-violations and get-users.

How do I add the Pulumi MCP server to Claude Code?

Run claude mcp add --transport http pulumi https://mcp.ai.pulumi.com/mcp, copied from Pulumi's docs. This page also has snippets for Cursor and Generic.

Does the Pulumi MCP server need authentication?

Yes, OAuth or API key. Transport: Streamable HTTP. Status: Unlabelled, last checked October 17, 2026.

Sources

Last verified against 2 Pulumi pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.