# Connect the Pulumi MCP server to Unblocked to give AI agents live infrastructure context URL: https://getunblocked.com/integrations/pulumi/ Unblocked connects to Pulumi’s MCP server so AI coding agents can query your stacks, cloud resources, and policy violations live — then its Context Engine reconciles what they find with the code, pull requests, and conversations behind your infrastructure. --- ## Pulumi integration details - **Category:** Cloud Infrastructure - **Live-queried data:** stacks, resources - **Supported products:** Pulumi Cloud · Pulumi Registry - **Works with:** Claude Code, Cursor, Devin, GitHub Copilot, Codex, OpenCode, VS Code — via one MCP server connection - **Maintained by:** Pulumi · verified by Unblocked - **Content reviewed:** October 20, 2026 - **Website:** ## What the Pulumi integration adds Infrastructure code shows what a program declares, not what is actually deployed. Which stacks exist, which resources they manage, and which ones break policy live in Pulumi Cloud, so an agent changing a Pulumi program works without knowing the state it will touch. Pulumi’s MCP server exposes that state and the Pulumi Registry to AI agents, and Unblocked connects to it once so every agent can ask about your infrastructure without its own Pulumi setup. This is a third-party MCP server: Pulumi hosts and maintains it, and Unblocked connects to it as a verified MCP server. Nothing is ingested or indexed — Unblocked calls the read-only tools you select at the moment a question needs them, so answers reflect your stacks and resources as Pulumi Cloud reports them now. Wiring Pulumi’s MCP server straight into an agent gives it a resource search. Unblocked’s Context Engine reasons across those results and your other sources — following a policy violation on a storage bucket to the pull request that changed its stack, the ticket that requested it, and the Slack thread where the exception was discussed — and returns one cited answer. Once connected, any MCP-compatible coding agent — Claude Code, Cursor, Devin, GitHub Copilot, Codex — reaches Pulumi context through a single Unblocked MCP server connection. ### What you get - **Live stacks and resources** — Agents list the stacks in your Pulumi Cloud organization and search the resources they manage across clouds, as they stand now rather than as a snapshot. - **Policy violations in context** — Agents see which resources violate your Pulumi policies, so a fix to an infrastructure program starts from the actual compliance problem. - **Read-only, no-deploy tool control** — Only read-only tools are offered, so agents can inspect stacks and resources but never start Neo tasks or change infrastructure. Choose which tools Unblocked may call from Settings → Data Sources. - **Context Engine reasoning** — Pulumi results are reconciled with your code, pull requests, tickets, and conversations, so a resource leads to the change and the decision behind it — with citations. ## How to connect Pulumi to Unblocked Prerequisites: - An Unblocked account (free to start). - A Pulumi Cloud organization and a Pulumi access token that can read it — resource search requires the Essentials, Pro, or Enterprise edition. - An MCP-compatible coding agent (Claude Code, Cursor, Devin, etc.) to use the context in your editor. ### Step 1: Connect Pulumi to Unblocked 1. In Unblocked, go to Settings → Data Sources → Connect another data source, and under Cloud Infrastructure select Pulumi. 2. The Pulumi MCP server URL is filled in for you. Choose HTTP Headers, add an Authorization header with your Pulumi access token as Bearer YOUR_TOKEN and an X-Pulumi-Org header with your organization name, then click Connect. 3. Once Unblocked discovers the server’s tools, select the read-only tools it may use and click Save Settings. ### Step 2: Install the Unblocked MCP server On macOS or Linux, one command auto-detects and configures the supported agents on your machine: ```bash curl -fsSL https://getunblocked.com/install-mcp.sh | bash ``` On Windows, or when you prefer remote MCP, add the server manually using the configuration below or follow the manual install guide: Claude Code — add the remote server, then run /mcp in Claude Code, select unblocked, and log in via OAuth: ```bash claude mcp add -s user --transport http unblocked https://getunblocked.com/api/mcpsse ``` Cursor — open View: Open MCP Settings → Add Custom MCP, add the server, then click Connect to authenticate via OAuth: ```json { "mcpServers": { "unblocked": { "url": "https://getunblocked.com/api/mcpsse" } } } ``` Any MCP-compatible client (Devin, Codex, VS Code, Claude Desktop, and others) can connect to the remote server with OAuth: `https://getunblocked.com/api/mcpsse` ## Pulumi MCP server tools Pulumi hosts and maintains this MCP server. Unblocked calls only the read-only tools you select, at the moment a question needs them: - **`get-stacks`** — Returns the stacks in your Pulumi Cloud organization. - **`resource-search`** — Searches the cloud resources your Pulumi stacks manage and returns the matches. - **`get-policy-violations`** — Returns the policy violations Pulumi Cloud has recorded against your resources. - **`get-users`** — Returns the members of your Pulumi Cloud organization. - **`list-resources`** — Lists the resource types available in the Pulumi Registry. - **`get-resource`** — Returns the details of one resource type from the Pulumi Registry. ## Connect Pulumi to Claude Code, Cursor, and other AI agents To give Claude Code, Cursor, GitHub Copilot, Codex, or another MCP-compatible AI coding agent access to Pulumi context, connect Pulumi to Unblocked and add the single Unblocked MCP server to your agent. Unblocked acts as the MCP context layer for your Pulumi data, searching stacks and resources alongside your other connected sources and returning cited results through these tools: - **`context_research`** — Researches a question across your connected sources and calls the Pulumi tools you selected when stacks, resources, or policy violations are relevant, returning a synthesized answer with citations. - **`context_get_urls`** — Fetches the full content behind URLs your agent encounters across connected sources — Jira, Linear, Notion, Confluence, Slack, GitHub, and more. ## Questions to ask an AI agent about Pulumi Questions you (or your agent) can ask Unblocked about your Pulumi data: - "Which resources in the production stack violate our tagging policy, and which pull request last changed them?" - "What stacks does the payments service deploy, and is there a ticket about splitting them?" - "Who added this database to the staging stack, and was there a Slack thread about its sizing?" - "What does the Pulumi Registry say about this resource type, and how have we configured it elsewhere in our code?" ## Pulumi integration FAQ ### What is the Pulumi MCP server? The Pulumi MCP server is a remote Model Context Protocol server, hosted and maintained by Pulumi, that lets AI agents query Pulumi Cloud — your stacks, the cloud resources they manage, policy violations, and organization members — and look up resource types in the Pulumi Registry. Unblocked connects to it as a verified MCP server, so every agent reaches it through one Unblocked connection. ### Can Unblocked deploy or change my Pulumi infrastructure? No. Pulumi’s server never runs a deployment directly, and Unblocked only offers read-only tools for selection, excluding Neo tools that can start tasks or approve requests. Agents can read stacks and resources, never change them. ### Which Pulumi data can agents query? Through the read-only tools you select, agents can list stacks, search resources, read policy violations, list organization members, and look up provider resource types in the Pulumi Registry. Resource search requires the Essentials, Pro, or Enterprise edition of Pulumi Cloud. ### Can agents trace a Pulumi resource back to the change that created it? Yes. Pulumi supplies the live resource and its stack, and Unblocked’s Context Engine connects them to the infrastructure code, the pull request that changed it, and the tickets and conversations around that change, returning a cited answer. ### Does Unblocked index my Pulumi stack state? No. Nothing from Pulumi is ingested or indexed. Unblocked calls Pulumi’s tools while it answers a question, so results reflect your stacks and resources at that moment. ## Related integrations - [Cloudflare](https://getunblocked.com/integrations/cloudflare/) — Workers logs, invocations, and metrics from Cloudflare’s verified MCP server, queried live while Unblocked answers — nothing is ingested or indexed. - [Google Cloud MCP](https://getunblocked.com/integrations/google-cloud-mcp/) — Live, read-only access to Compute, Cloud Logging, and Cloud Monitoring in the Google Cloud projects you connect, queried through Google’s native MCP services. - [Snyk](https://getunblocked.com/integrations/snyk/) — AI asset inventory, risk, and policy context from Snyk’s verified MCP server, queried live while Unblocked answers — nothing is ingested or indexed. - [GitHub](https://getunblocked.com/integrations/github/) — Repositories, pull requests, issues, discussions, and full code history — indexed, kept in sync on every push, and cited in answers. ## Get started with Unblocked - Start a free trial: - Pricing: - All integrations: