Field-by-field comparison

Compare the evidence before choosing an MCP.

Each signal stays separate, missing facts remain visible, and the column order follows your selection.

MCPs in this comparison

Uncheck an MCP to remove it. Comparing two or three keeps each signal in its own row.

Open canonical comparison link

Comparable alternatives

Shown only when capability or industry context overlaps.

Side-by-side MCP evidence comparison
Evidence fieldBifrostShortlist candidateTerraform MCPMCP100 Recommended
Task fit
Best for
  • Teams that want an MCP-aware gateway with centralized access control, routing and observability.
  • Connect compatible AI clients to HashiCorp's documented MCP capabilities.
Not ideal for
  • Small single-server deployments that do not need an additional gateway/control-plane layer.
  • Users who need a fully reviewed MCP100 recommendation today
Avoid when
  • Avoid deployment without reviewed authentication, tenant boundaries, credential handling, and audit controls.
  • Permissions, credentials, and connected data cannot be tested with least privilege
Provenance
Provenance details

First-party MCP

github:maximhq · Publisher source ↗

First-party MCP

HashiCorp · Publisher source ↗

Maintenance
Maintenance details

Repo: Not documented

Package: Not documented

Repo: Aug 14, 2026

Package: Not documented

Popularity evidence
GitHub starsNot documented

1,534

GitHub stars · checked 2026-09-25T18:35:00Z

Shared repository stars

9,002

Shared repository stars (not MCP-specific) · checked 2026-10-21

Not documented
Shared-package downloads / 30 days

4,088

shared-package downloads / 30 days (not MCP-specific) · checked 2026-10-21

Not documented
Client coverage
Client coverage detailsNot documented
Claude Code✓ Local stdio
Claude Desktop✓ Local stdio
Codex✓ Local stdio
VS Code✓ Local stdio
Cursor✓ Local stdio
OpenCode✓ Local stdio
Client coverage noteLocal stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server.
Access and data
AuthenticationSupports Bifrost access-control mechanisms such as virtual keys and OAuth2 as documented by the product.HCP Terraform/TFE API tokens; remote client may pass per-user TFE_TOKEN
CostOpen-source/managed Bifrost and underlying model/service usage may have separate costs.HCP/TFE/run costs may apply
PermissionsRoles, virtual keys and tool scoping can constrain the upstream MCP surface; upstream server permissions still apply.HCP Terraform/TFE RBAC
Data handlingMCP requests and telemetry pass through the Bifrost gateway; deployment and telemetry configuration determine retention.registry/HCP/TFE data may reach connected MCP client/LLM
Limitations
Tradeoffs
  • MCP-specific adoption and independent operational evidence are still emerging relative to established Recommended gateways.
  • Publisher attribution supports discovery, but does not replace an independent permissions and usability review.
Risk contextMCP-specific adoption and independent operational evidence are still emerging relative to established Recommended gateways.stdio/localhost defaults; strict CORS; TLS verify on; rate limits; ENABLE_TF_OPERATIONS=false by default
Evidence date
Editorial review2026-10-212026-07-24
Candidate evidence2026-10-21T00:00:00Z2026-09-25T18:35:00Z

Popularity, maintenance, fit, permissions, and client support are independent evidence fields.

Read the evidence method →