Crossplane

Drive the product through a documented public API G

Agent access

Connect an agent via an official MCP server G

Agent access

Delegate tasks to a built-in AI assistant inside the product G

Agentic features

Plug MCP servers into this product so it can use their tools G

Agent access

Run the product headlessly / in CI for automation G

Agent access

Use an official CLI G

Agent access

Set up automations that run autonomously in the background G

Agentic features

Issue scoped/least-privilege API credentials for an agent G

Agent access

Download a machine-readable API spec (OpenAPI or equivalent) G

Api quality

Get AI-generated insights and suggestions from my data inside the product G

Agentic features

Operate the product with natural-language commands G

Agentic features

Build against official SDKs G

Agent access

Explore an interactive API reference with runnable examples G

Api quality

Point an agent at llms.txt or agent-oriented docs G

Agent access

Rely on versioned APIs with a documented deprecation policy G

Api quality

Subscribe to events via webhooks G

Agent access

Test against a sandbox environment without touching production data G

Api quality

Self-host the core product G

Detect drift between my declared configuration and the actual cloud resources C

Drift

Consume and publish reusable modules or components from a public registry C

Modules

Define rules that trigger actions automatically on events G

Manage resources across all major clouds and SaaS providers through a broad provider ecosystem C

Providers

Export all of my data in open formats and leave G

Have an agent author an infrastructure change, run a plan headlessly, and present the diff for my approval C

Ai infra ops

Get machine-readable plan output (JSON) that an agent can parse to reason about a proposed change C

Agent plan parsing

Preview exactly what will change — creates, updates, and destroys — before applying C

Plan workflow

Run plan and apply non-interactively in CI using saved plan artifacts and approval flags C

Plan workflow

Enforce policy-as-code checks that block non-compliant infrastructure changes before apply C

Policy

Import existing cloud resources under management and generate matching configuration code G

Import

Pass secrets and sensitive configuration into deployments without exposing them in code or logs C

Secrets

Prevent my data from being used to train AI models G

Rely on an open license and open governance so the tool cannot be relicensed out from under my company G

Licensing

Store state in a remote backend with locking so concurrent runs cannot corrupt it C

State backends

Do everything through the API that I can do in the UI G

Drive deployments programmatically from my own application code rather than only through the CLI G

Automation api

Write automated tests for my infrastructure code and run them without touching production C

Testing

Define infrastructure in a general-purpose programming language with types, loops, and IDE support C

Languages

Let an agent plan and apply with least-privilege credentials and review gates so it cannot make unapproved changes C

Ai infra ops

Manage per-environment configuration (dev, staging, prod) as separate stacks or workspaces C

Config stacks

Safely inspect and modify state — moving, removing, or renaming resources — when refactoring C

State backends

Tear down an entire environment cleanly with a destroy operation C

Plan workflow

Choose where my data is stored (region/residency) G

Control data retention and deletion G

Encrypt state at rest so credentials and sensitive values are not readable in plaintext state files C

State backends

Generate infrastructure code from natural language using AI assistance built into the toolchain C

Ai authoring

Migrate an existing Terraform-format codebase and its state into this tool C

Migration

Opt out of telemetry and usage tracking G

Perform bulk operations across many items at once G

Read the product's source under an open license G

Rely on documented compatibility promises and upgrade guides between releases C

Stability

Schedule recurring jobs or workflows G

Version, review, and roll back my automations G

Validate and auto-format my configuration before planning C

Testing

Target or exclude specific resources in a plan or apply C

Plan workflow