Pulumi MCP server

Connect Pulumi to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

Deploy PulumiBook a demo

What you can do with the Pulumi MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the list environments tool in Pulumi
  • Use the open environment tool in Pulumi
  • Use the manage webhooks tool in Pulumi
  • Use the get stack tool in Pulumi
  • Use the list audit logs tool in Pulumi
  • Use the delete stack tool in Pulumi

Supported Tools

list_environments

List Environments

List all Pulumi ESC environments in an organization. Returns environment names, projects, and timestamps.

open_environment

Open Environment

Open a Pulumi ESC environment to resolve and retrieve its computed values and secrets. This evaluates all dynamic providers (like AWS login, etc.) and returns the resolved values. Optionally retrieve a specific property path.

manage_webhooks

Manage Webhooks

List, create, or delete webhooks in Pulumi Cloud. Supports both organization-level webhooks (receive events for all stacks) and stack-level webhooks (scoped to a single stack).

get_stack

Get Stack

Retrieve a Pulumi stack's tags, current operation and version, with optional recorded outputs. Secret outputs remain in the provider's encrypted representation.

list_audit_logs

List Audit Logs

Retrieve audit log events for a Pulumi organization. Shows user activity including stack operations, deployments, and access changes. Available for Enterprise and Business Critical editions.

delete_stack

Delete Stack

Delete a Pulumi stack. Use `force` to delete even if resources still exist in the stack.

list_deployments

List Deployments

List deployments for a specific stack or across an entire organization. Useful for monitoring deployment history and status.

cancel_deployment

Cancel Deployment

Cancel an in-progress deployment on a stack. Use with caution — cancelling may leave the stack in an inconsistent state.

list_stacks

List Stacks

List all Pulumi stacks accessible to the authenticated user. Optionally filter by organization, project, or tags. Returns stack names, resource counts, and last update timestamps.

list_policy_packs

List Policy Packs

List all policy packs in a Pulumi organization. Policy packs contain compliance and governance rules that are enforced during stack updates.

manage_access_tokens

Manage Access Tokens

List access-token metadata for the authenticated user, create a personal access token, or revoke a token by ID. Listings can include personal and refresh-token metadata.

manage_stack_tags

Manage Stack Tags

Set or delete tags on a Pulumi stack. Tags are key-value metadata used for categorization and querying. You can set a new tag, update an existing one, or delete a tag.

create_stack

Create Stack

Create a new Pulumi stack within a project. The project will be created automatically if it does not exist.

trigger_deployment

Trigger Deployment

Trigger a Pulumi deployment operation on a stack. Supports **update**, **preview**, **refresh**, and **destroy** operations. Deployment settings configured on the stack are inherited by default.

get_deployment

Get Deployment

Retrieve details and optionally logs for a specific deployment. Use this to check deployment status, view logs, or monitor deployment progress.

search_resources

Search Resources

Search across all cloud resources managed by Pulumi in your organization using Pulumi query syntax. Useful for auditing, incident response, and resource discovery.

list_stack_updates

List Stack Updates

List the update history for a Pulumi stack. Shows past operations (update, preview, destroy, refresh) with their results, resource changes, and timing.

manage_environment

Manage Environment

Create, read, update, or delete a Pulumi ESC (Environments, Secrets, and Configuration) environment. Environments store secrets, config, and credentials as versioned YAML definitions.

list_org_members

List Organization Members

List all members of a Pulumi organization with their roles and profile information.

get_current_user

Get Current User

Identify the authenticated Pulumi user or machine-token principal and discover authorized organization logins for other tools.

Connect Pulumi to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Pulumi in Metorial. In your Metorial portal, enable the Pulumi MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Pulumi tools.

Run Pulumi through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Pulumi and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Pulumi tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Pulumi

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Sentry

Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Technical notes for Pulumi

Manage Pulumi Cloud stacks, deployment operations, ESC environments, personal access tokens and webhooks. Discover account identity and organizations, inspect update history and deployment logs, search cloud resources, and read policy packs, organization members and audit logs.

Frequently asked questions

Common questions about connecting Pulumi to AI agents with Metorial.

  1. How many tools does the Pulumi MCP server have?
    The Pulumi MCP server exposes 20 tools, including List Environments, Open Environment, Manage Webhooks. Each one is governed and traced through Metorial.
  2. Pulumi exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Pulumi MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Pulumi and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Pulumi MCP server yourself or use the hosted gateway.

Connect Pulumi to production AI agents

See how Metorial gives your team governed access to Pulumi, with tracing and security controls built in.

Book a demoDeploy Pulumi