Terraform Registry API

Base URL

https://registry.terraform.io/v1

Authentication

Public modules and providers need no token. Private registries under Terraform Cloud require a bearer token, which is a separate API.

Rate limit

Not published for the public registry. Terraform's own CLI uses these endpoints, so behave like a well-mannered client and cache.

Pricing

Free for the public registry.

CORS

Not enabled — call it from your server

Official docs

Read the docs

Every request below was executed against the live API on 21 Aug 2026, and the response shown is the real body it returned — not an illustration.

curl 'https://registry.terraform.io/v1/modules?limit=2'

const res = await fetch("https://registry.terraform.io/v1/modules?limit=2");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);

import requests

res = requests.get("https://registry.terraform.io/v1/modules?limit=2", timeout=20)
res.raise_for_status()
print(res.json())

{
  "meta": {
    "limit": 2,
    "current_offset": 0,
    "next_offset": 2,
    "next_url": "https://registry.terraform.io/v1/modules?limit=2&offset=2"
  },
  "modules": [
    {
      "id": "GoogleCloudPlatform/lb-http/google/14.2.0",
      "owner": "",
      "namespace": "GoogleCloudPlatform",
      "name": "lb-http",
      "version": "14.2.0",
      "provider": "google",
      "provider_logo_url": "/images/providers/google-cloud.svg",
      "description": "Creates a global HTTP load balancer for Compute Engine by using forwarding rules",
      "source": "https://github.com/terraform-google-modules/terraform-google-lb-http",
      "tag": "v14.2.0",
      "published_at": "2026-01-15T00:10:36.13339Z",
      "downloads": 11391763,
      "verified": true
    },
    {
      "id": "GoogleCloudPlatform/managed-instance-group/google/1.1.15",
      "owner": "",
      "namespace": "GoogleCloudPlatform",
      "name": "managed-instance-group",
      "version": "1.1.15",
      "provider": "google",
      "provider_logo_url": "/images/providers/google-cloud.svg",
      "description": "Modular Google Compute Engine managed instance group for Terraform.",
      "source": "https://github.com/GoogleCloudPlatform/terraform-google-managed-instance-group",
      "tag": "1.1.15",
      "published_at": "2019-02-14T16:55:26.567562Z",
      "downloads": 179084,
      "verified": true
    }
  ]
}

metaobject

Paging state: `limit`, `current_offset`, `next_offset` and a prepared `next_url`. Follow `next_url` rather than building the query yourself.

modules[].idstring

Full coordinate `namespace/name/provider/version`. Strip the version to get the value for a Terraform `source` argument.

modules[].namespace / name / provider / versionstring

The coordinate split into parts. `provider` is the cloud the module targets, not the publisher.

modules[].sourcestring

Repository URL, almost always GitHub. This is where the code actually lives.

modules[].downloadsinteger

Cumulative download count. Useful as a popularity proxy, though it heavily favours older modules.

modules[].verifiedboolean

HashiCorp has verified the publisher. It is not a security or quality audit; treat it as identity only.

modules[].published_atstring

ISO 8601 publication timestamp of that version. Pair it with `downloads` to spot popular but stale modules.

modules[].ownerstring

Frequently an empty string rather than null, so test for emptiness, not for absence.

• Check whether a module you depend on has a newer version before an upgrade
• Build an internal catalogue of approved Terraform modules
• Flag modules that have not been published to in years during an infrastructure review
• Resolve a module name to its source repository for a code review
• Compare module popularity when choosing between competing implementations

If Terraform Registry does not fit, these developer & testing apis cover similar ground. Every one was called before publishing, and each links to its own reference page with a working curl command and the response it returned.