Pulumi MCP Server

Pulumi's MCP server allows AI agents to author, preview, and deploy modern infrastructure-as-code programs across multi-cloud environments using general-purpose languages. It empowers agents to inspect Pulumi stacks, search cloud resources, validate cloud changes, and execute infrastructure updates.

Start for free

Pulumi MCP Server

Benefits with Ory + Pulumi MCP Server

Pulumi's MCP server lets your agents search cloud resources, read Pulumi stacks and Registry documentation, and preview and deploy infrastructure written in general-purpose languages. A deploy applies real changes to your cloud accounts. Ory Agent Security lets agents search resources and documentation while stack operations and deployments stay with the platform agents you approve, and every tool call is tied to the user behind it.

View documentation

Use Cases

— 01 use case

Agent IAM

Coding agents look up schemas at Read, Neo followers steer tasks at Write, stack updates need Admin, and Block keeps unrelated agents off your infrastructure.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Pulumi MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents searching resources and documentation, write for agents guiding infrastructure tasks already underway, admin for platform agents, and no access for agents outside infrastructure work.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied stack update stops before it reaches your cloud accounts, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents work with stacks and deployments and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the Pulumi MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Pulumi MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed infrastructure and for whom.