Terraform Registry API

Base URL

https://registry.terraform.io/v1

Authentication

Public modules and providers need no token. Private registries under Terraform Cloud require a bearer token, which is a separate API.

Rate limit

Not published for the public registry. Terraform's own CLI uses these endpoints, so behave like a well-mannered client and cache.

Pricing

Free for the public registry.

CORS

Not enabled — call it from your server

Official docs

Read the docs

Every request below was executed against the live API on 2026-08-21, and the response shown is the real body it returned — not an illustration.

curl 'https://registry.terraform.io/v1/modules?limit=2'

const res = await fetch("https://registry.terraform.io/v1/modules?limit=2");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);

import requests

res = requests.get("https://registry.terraform.io/v1/modules?limit=2", timeout=20)
res.raise_for_status()
print(res.json())

{
  "meta": {
    "limit": 2,
    "current_offset": 0,
    "next_offset": 2,
    "next_url": "https://registry.terraform.io/v1/modules?limit=2&offset=2"
  },
  "modules": [
    {
      "id": "GoogleCloudPlatform/lb-http/google/14.2.0",
      "owner": "",
      "namespace": "GoogleCloudPlatform",
      "name": "lb-http",
      "version": "14.2.0",
      "provider": "google",
      "provider_logo_url": "/images/providers/google-cloud.svg",
      "description": "Creates a global HTTP load balancer for Compute Engine by using forwarding rules",
      "source": "https://github.com/terraform-google-modules/terraform-google-lb-http",
      "tag": "v14.2.0",
      "published_at": "2026-01-15T00:10:36.13339Z",
      "downloads": 11391763,
      "verified": true
    },
    {
      "id": "GoogleCloudPlatform/managed-instance-group/google/1.1.15",
      "owner": "",
      "namespace": "GoogleCloudPlatform",
      "name": "managed-instance-group",
      "version": "1.1.15",
      "provider": "google",
      "provider_logo_url": "/images/providers/google-cloud.svg",
      "description": "Modular Google Compute Engine managed instance group for Terraform.",
      "source": "https://github.com/GoogleCloudPlatform/terraform-google-managed-instance-group",
      "tag": "1.1.15",
      "published_at": "2019-02-14T16:55:26.567562Z",
      "downloads": 179084,
      "verified": true
    }
  ]
}

metaobject

Paging state: `limit`, `current_offset`, `next_offset` and a prepared `next_url`. Follow `next_url` rather than building the query yourself.

modules[].idstring

Full coordinate `namespace/name/provider/version`. Strip the version to get the value for a Terraform `source` argument.

modules[].namespace / name / provider / versionstring

The coordinate split into parts. `provider` is the cloud the module targets, not the publisher.

modules[].sourcestring

Repository URL, almost always GitHub. This is where the code actually lives.

modules[].downloadsinteger

Cumulative download count. Useful as a popularity proxy, though it heavily favours older modules.

modules[].verifiedboolean

HashiCorp has verified the publisher. It is not a security or quality audit; treat it as identity only.

modules[].published_atstring

ISO 8601 publication timestamp of that version. Pair it with `downloads` to spot popular but stale modules.

modules[].ownerstring

Frequently an empty string rather than null, so test for emptiness, not for absence.

• Check whether a module you depend on has a newer version before an upgrade
• Build an internal catalogue of approved Terraform modules
• Flag modules that have not been published to in years during an infrastructure review
• Resolve a module name to its source repository for a code review
• Compare module popularity when choosing between competing implementations