TerraVision
Professional cloud architecture diagrams in official AWS, Azure and GCP style, from a description in Claude or ChatGPT or from your Terraform
TerraVision is a free, open-source cloud architecture diagram generator for AWS, Azure and Google Cloud that works in both directions: design to code (describe it to your AI assistant, get the diagram, then the Terraform) and code to diagram (draw what your Terraform deploys).
Ask your AI assistant for a cloud architecture diagram, in plain words, and get the diagram a cloud architect would draw: the official AWS, Azure and GCP icons, with every resource in its VPC, subnet, zone or resource group. From a description, from your Terraform code, or the other way round, with the Terraform written from the diagram. TerraVision runs on your own computer and needs no cloud access.
Draw prod without prod access.
TerraVision draws what your Terraform will deploy, from the code alone. The infrastructure doesn't have to exist yet, and you need no access to any account it deploys to. Live cloud scanners can't do that. See how →
Watch the 90-Second Intro
Gallery
The same three-tier design on each cloud, then a flagship for each. Every example comes with the prompt and the source file: see the full gallery →
More in the gallery: AWS serverless event-driven · AWS data lake · AWS multi-region failover · AWS multi-account network · Azure AKS · Google Cloud data pipeline
Get started in Claude or ChatGPT
TerraVision installs as an extension in Claude Desktop and a plugin in the ChatGPT desktop app, where the diagram appears right in the chat. It also works in Claude Code, Codex CLI, GitHub Copilot, Cursor and any other MCP client.
1. Install the prerequisites (once)
TerraVision needs Graphviz (to draw) and Git. uv runs TerraVision for Claude Code, Codex, Antigravity CLI and other MCP clients; Claude Desktop brings its own on Windows and macOS, so skip it there. Terraform is only needed to draw from Terraform code.
With Homebrew:
brew install graphviz git
brew install uv # not needed for Claude Desktop
brew install hashicorp/tap/terraform # optional: to draw from Terraform code
In PowerShell:
winget install --id Graphviz.Graphviz -e
winget install --id Git.Git -e
winget install --id astral-sh.uv -e # not needed for Claude Desktop
winget install --id Hashicorp.Terraform -e # optional: to draw from Terraform code
Then open a new terminal, and restart your AI app, so they see the new programs.
sudo apt install graphviz git
# Ubuntu 26.04 and later only (also Debian 14 "forky"/testing).
# Skip on older releases such as Ubuntu 24.04: graphviz already includes it.
sudo apt install libgvplugin-neato-layout8
curl -LsSf https://astral.sh/uv/install.sh | sh # Claude Desktop on Linux needs uv pre-installed
# optionally install terraform, to draw from Terraform code: HashiCorp's apt repository
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
sudo apt update && sudo apt install terraform
Other distributions: HashiCorp's install guide.
Can't use a package manager? Without admin rights, or when your organisation's Artifactory or Nexus doesn't carry these packages, download each one from its own site instead: Graphviz (on Windows, the ZIP archive unpacks into any folder without admin rights; on macOS and Linux, build it from source into your home folder: steps), Git (Windows has a portable edition), uv (its installer needs no admin rights) and Terraform (a single program to unzip). Then add each one's folder to your PATH (how, on Windows) and restart your AI app, or ask your IT team to install them.
2. Connect your assistant
Claude Desktop:
Download terravision-<version>.mcpb from the latest release and open it (or drag it into Settings → Extensions). Diagrams appear right in the chat, with buttons to open the image, edit it in draw.io, show it in its folder and see its source.
Claude Code (terminal, VS Code or JetBrains):
claude plugin marketplace add patrickchugh/terravision
claude plugin install terravision-cloud-diagrams@terravision
Then start a new Claude Code session. Diagrams are saved in a diagrams folder in your project.
The very first start downloads and installs TerraVision, which can take longer than Claude Code waits. If /mcp shows TerraVision failed to connect, choose Reconnect. To avoid it, install it ahead of time: uvx --from "terravision[mcp]" terravision --version.
ChatGPT desktop app and OpenAI Codex CLI (the desktop app includes Codex and uses the same plugins):
In the desktop app, go to Settings, add the marketplace https://github.com/patrickchugh/terravision, then select terravision-cloud-diagrams. For the CLI:
codex plugin marketplace add https://github.com/patrickchugh/terravision
codex plugin add terravision-cloud-diagrams@terravision
Google Antigravity CLI (agy, which replaced Gemini CLI):
agy mcp add terravision -- uvx --from "terravision[mcp]" terravision mcp --output-dir /path/for/diagrams
Gemini CLI stopped working for personal Google accounts on 18 June 2026; with a Gemini Code Assist Standard or Enterprise licence or a paid API key it still runs, and installs TerraVision with gemini extensions install https://github.com/patrickchugh/terravision.
VS Code with GitHub Copilot, Cursor and other MCP clients:
Add TerraVision as an MCP server that runs uvx --from "terravision[mcp]" terravision mcp --output-dir <folder for diagrams>. The setup guide has the configuration for each.
Any other agent (Cursor, GitHub Copilot, Codex, Claude Code and more) with the skills CLI:
npx skills add patrickchugh/terravision
This installs the skill only: the instructions that teach the assistant the TerraVision graph format. It does not install TerraVision itself. The assistant then runs the terravision command, so install TerraVision and the prerequisites first. It does not include the MCP server, so there is no diagram view in the chat; for that, use the Claude Desktop extension or the Claude Code / ChatGPT plugin above. The installer needs Node.js, which provides npx.
3. Ask for a diagram (or code)
The first diagram takes a little longer while TerraVision installs itself. If anything is missing, the assistant says what to install. To check at any time, ask: "Is TerraVision set up correctly?"
The full guide, with more example prompts: Use TerraVision with AI assistants.
Keep diagrams current in CI/CD
Point the TerraVision GitHub Action at your Terraform, and the diagram redraws itself on every change:
- uses: hashicorp/setup-terraform@v3
- uses: patrickchugh/terravision-action@v2
with:
source: ./infrastructure
outfile: docs/architecture
format: both
A terravision.yml next to the Terraform adds the title, numbered flows and connection labels to every version. GitLab, Jenkins, Azure DevOps and others: CI/CD Integration.
Why TerraVision?
- ✅ Built for AI assistants — marketplace extensions and plugins for Claude, Codex, Gemini, Copilot and Cursor; diagrams appear right in the chat in Claude Desktop and the ChatGPT desktop app (guide)
- ✅ Provably Accurate diagrams — accurate diagrams generated directly from your Terraform code so your code is the source of truth - what you see is what you get
- ✅ Draw prod without prod access — the infrastructure does not need to exist, and you need no access to any account the code deploys to; one codebase draws dev, staging and prod from their variables files (how)
- ✅ MCP server and agent skill — let any AI agent, or an assistant in an IDE such as Visual Studio Code, generate diagrams from a JSON graph or your Terraform (guide)
- ✅ In Diagram flow annotations — labels, titles, and flow sequences supported via YAML or generated by AI models including Ollama (running local) and AWS Bedrock
- ✅ JSON graph input — describe an architecture in a few lines of JSON and render it, resources match Terraform names so no need to learn a custom DSL (Graph Format)
- ✅ 100% client-side — designed with security in mind; no cloud access required, runs locally, your code never leaves your machine
- ✅ CI/CD ready — automate diagram updates on every PR merge
- ✅ Free & open source — no expensive diagramming tool licenses
- ✅ Multi-cloud — AWS, Google Cloud (GCP) and Azure supported
- ✅ Interactive HTML output — clickable nodes, pan/zoom, search, animated data flow
- ✅ Editable draw.io export — open in draw.io, Lucidchart, or any mxGraph editor
- ✅ Terragrunt compatible — auto-detects single- and multi-module Terragrunt projects
How it compares
Already draw by hand? Generate the first version with TerraVision, then polish the exported file in draw.io or Lucidchart. Full comparison: TerraVision vs draw.io, Lucidchart, Eraser, Mermaid and others.
Supported Cloud Providers
Full list: Node types.
Use it from the command line
TerraVision is also a command-line tool, for scripts and for people who prefer to write the graph themselves.
Install
pipx install terravision # or: uv tool install terravision
# or: pip install terravision in a virtual env
You also need Python 3.11+ (uv installs one for you), Graphviz and Git, plus Terraform 1.x (or OpenTofu) when drawing from Terraform code; JSON graphs don't need it. See the Installation Guide for platform-specific instructions, Docker, and Nix.
Diagram from JSON (no Terraform needed)
Describe the architecture as nodes and connections. AWS is shown here; expand the Azure and GCP examples below.
{
"tv_aws_users.users": ["aws_cloudfront_distribution.cdn"],
"aws_cloudfront_distribution.cdn": ["aws_s3_bucket.static_site", "aws_alb.api"],
"aws_vpc.main": ["aws_subnet.public~1", "aws_subnet.private~1"],
"aws_subnet.public~1": ["aws_alb.api"],
"aws_subnet.private~1": ["aws_lambda_function.orders"],
"aws_alb.api": ["aws_lambda_function.orders"],
"aws_lambda_function.orders": ["aws_dynamodb_table.orders", "aws_sqs_queue.events"]
}
{
"tv_azurerm_users.users": ["azurerm_cdn_frontdoor_profile.edge"],
"azurerm_cdn_frontdoor_profile.edge": ["azurerm_linux_web_app.api"],
"azurerm_resource_group.app": ["azurerm_virtual_network.main", "azurerm_mssql_database.orders", "azurerm_servicebus_queue.events", "azurerm_key_vault.secrets"],
"azurerm_virtual_network.main": ["azurerm_subnet.app"],
"azurerm_subnet.app": ["azurerm_linux_web_app.api"],
"azurerm_linux_web_app.api": ["azurerm_mssql_database.orders", "azurerm_servicebus_queue.events", "azurerm_key_vault.secrets"]
}
{
"tv_gcp_users_icon.users": ["google_compute_global_forwarding_rule.lb"],
"google_compute_global_forwarding_rule.lb": ["google_cloud_run_v2_service.api"],
"google_cloud_run_v2_service.api": ["google_sql_database_instance.orders", "google_pubsub_topic.events", "google_storage_bucket.assets"],
"google_pubsub_topic.events": ["google_cloudfunctions2_function.worker"]
}
Render it:
terravision draw --source architecture.tvg.json --format svg
Each key is <terraform_resource_type>.<name>; each value is what it connects to or contains. That is the whole format. Full spec, schema and more examples: Graph Format. Works for AWS (aws_*), Azure (azurerm_*) and GCP (google_*).
Diagram from Terraform
git clone https://github.com/patrickchugh/terravision.git
cd terravision
# EKS cluster example
terravision draw --source tests/fixtures/aws_terraform/eks_automode --show
# Azure VM scale set
terravision draw --source tests/fixtures/azure_terraform/test_vm_vmss --show
# From a public Git repo (note the // for subfolder)
terravision draw --source https://github.com/patrickchugh/terraform-examples.git//aws/wordpress_fargate --show
That's it — your diagram is saved as architecture-aws.dot.png (the provider is appended to the name) and opens automatically.
The diagram is derived from terraform plan, so it shows what the code actually deploys: conditionals, count, for_each and modules are resolved. Eraser and friends draw what the AI imagines; TerraVision proves what the code deploys.
Generate an interactive HTML diagram
terravision visualise --source ./path-to-your-terraform --show
Click any resource to see its Terraform metadata, search resources, pan/zoom, and watch animated data flow on edges. The HTML is a single self-contained file that works fully offline.
Try the Interactive Demos
Click any of these to see the interactive HTML output TerraVision produces:
- 🟧 AWS demo — Wordpress on ECS Fargate with CloudFront, RDS, EFS
- 🟦 Azure demo — VM scale set with load balancer and VNet
- 🟩 GCP demo — Core GCP networking and compute
Advanced Usage Examples
Generate a diagram
# From a local directory
terravision draw --source ./path-to-your-terraform
# From a Git repository
terravision draw --source https://github.com/user/repo.git
# Custom format and filename
terravision draw --source ./path-to-your-terraform --format svg --outfile my-architecture
# Editable draw.io file
terravision draw --source ./path-to-your-terraform --format drawio --outfile my-architecture
Draw prod without prod access
The diagram comes from the code and a variables file, not from a live account. The infrastructure does not need to exist, and read-only credentials for any account with the same provider (your own sandbox will do) are enough: you need no access to the accounts the code deploys to.
terravision draw --source ./path-to-your-terraform --varfile dev.tfvars --outfile architecture-dev
terravision draw --source ./path-to-your-terraform --varfile staging.tfvars --outfile architecture-staging
terravision draw --source ./path-to-your-terraform --varfile prod.tfvars --outfile architecture-prod
Each diagram shows what that environment's variables make the code deploy: more zones, more servers, read replicas, a CDN only in prod.
Why it matters:
- Security review. A reviewer draws another team's code and checks it against their design document, or against the pattern approved in the previous review round, and pushes back on anything that differs. No access to the team's accounts, and nothing has to be deployed yet.
- Onboarding. A new team member can see every environment on day one, before they are given access to any cloud account.
- Shared modules. When a centrally managed module changes, the next drawing shows what the new version deploys in each stack that uses it.
- Audits. Auditors see production without production access, and when CI commits each redrawn diagram, the repository history is a versioned record of every architecture change and the code change behind it.
More uses, such as disaster recovery regions that exist only as code and checking staging matches prod, are in Draw prod without prod access. The exceptions (data sources that look up resources in the target account, remote state, assume_role) are on the same page.
Use a pre-generated Terraform plan (no cloud credentials needed)
# Step 1: in your Terraform environment
terraform plan -out=tfplan.bin
terraform show -json tfplan.bin > plan.json
terraform graph > graph.dot
# Step 2: diagram generation, no Terraform or cloud access required
terravision draw --planfile plan.json --graphfile graph.dot --source ./path-to-your-terraform
AI-powered annotations (optional)
terravision draw --source ./path-to-your-terraform --ai-annotate ollama # local LLM (no data leaves your machine)
terravision draw --source ./path-to-your-terraform --ai-annotate bedrock # AWS Bedrock via boto3 (uses your AWS credentials)
terravision draw --source ./path-to-your-terraform --ai-annotate restapi # any OpenAI-compatible endpoint (OpenAI, LiteLLM, vLLM, ...)
Only metadata and the summary graph are sent to the LLM — never your .tf source. The bedrock backend authenticates via the standard AWS credential chain (no infrastructure to deploy); restapi is configured via TV_RESTAPI_URL, TV_RESTAPI_KEY, and TV_RESTAPI_MODEL. See the Annotations Guide and AI-Powered Annotations for the full configuration.
Simplified view
terravision draw --source ./path-to-your-terraform --simplified
Strips VPCs, subnets, and networking plumbing. Great for executive presentations.
Common options
terravision --help shows full help text details.
Documentation
The complete documentation lives at patrickchugh.github.io/terravision.
For users:
- Installation Guide
- Usage Guide
- Draw prod without prod access
- Annotations Guide
- CI/CD Integration
- MCP Server Guide
- llms.txt (docs index for AI agents)
- FAQ
- Troubleshooting
Diagram generators and comparisons:
- Gallery of example architecture diagrams
- Cloud architecture diagram generator
- AI cloud architecture diagram generator (description to diagram) and diagram to Terraform
- AWS, Azure and Google Cloud architecture diagram generators
- Terraform diagram generator
- TerraVision vs draw.io, Lucidchart, Eraser, Mermaid and live cloud scanners
For contributors:
FAQ
Common questions — cloud credentials, drawing environments you can't access, LLM data privacy, offline use, Terragrunt, output formats, and more — are answered in the FAQ on the documentation site.
Contributing
Contributions are very welcome. See CONTRIBUTING.md for development setup, coding standards, and the PR process.
Support
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Documentation: patrickchugh.github.io/terravision
License
See LICENSE.
Acknowledgments
- Graphviz — diagram rendering
- Terraform — infrastructure parsing
- Terragrunt — multi-module orchestration
- Cloud provider icons from official AWS, GCP, and Azure icon sets