Terraform Provider

Manage Grantex resources as infrastructure with the official Terraform provider.

Overview

The Grantex Terraform provider lets you manage agents, policies, webhooks, SSO configuration, and budget allocations as code.

Availability and Installation

The provider is currently source-only. On September 7, 2026, the public Terraform Registry lookup for mishrasanjeev/grantex returned HTTP 404. The configuration below is not an available registry install, and ordinary terraform init cannot download it. Registry publication and live acceptance testing remain separate release work; the repository build passing is not evidence that this provider is published or production-certified.

For local evaluation, build packages/terraform-provider-grantex with its declared Go toolchain and configure a local provider binary using HashiCorp’s development override instructions. Use a disposable sandbox account. Development overrides are not a production installation method and do not make registry-based initialization succeed.

The following is a provider configuration template for that local evaluation or a future verified registry release. The version constraint is illustrative, not a claim that version 0.1 is available:

terraform {
  required_providers {
    grantex = {
      source  = "mishrasanjeev/grantex"
      version = "~> 0.1"
    }
  }
}

provider "grantex" {
  api_key  = var.grantex_api_key   # or set GRANTEX_API_KEY env var
  base_url = "https://api.grantex.dev"
}

Resources

grantex_agent

resource "grantex_agent" "calendar_bot" {
  name        = "Calendar Assistant"
  description = "Manages calendar events for users"
  scopes      = ["read:calendar", "write:calendar"]
}

output "agent_did" {
  value = grantex_agent.calendar_bot.did
}

grantex_policy

resource "grantex_policy" "business_hours" {
  name             = "Business Hours Only"
  effect           = "deny"
  agent_id         = grantex_agent.calendar_bot.agent_id
  time_of_day_start = "18:00"
  time_of_day_end   = "08:00"
}

grantex_webhook

resource "grantex_webhook" "slack_alerts" {
  url    = "https://hooks.slack.com/services/T00/B00/xxx"
  events = ["grant.created", "grant.revoked", "budget.threshold"]
  secret = var.webhook_secret
}

grantex_sso_config

resource "grantex_sso_config" "okta" {
  provider_type = "okta"
  domain        = "mycompany.okta.com"
  client_id     = var.okta_client_id
  client_secret = var.okta_client_secret
  metadata_url  = "https://mycompany.okta.com/.well-known/openid-configuration"
}

grantex_budget_allocation

resource "grantex_budget_allocation" "prod_budget" {
  grant_id       = "grnt_01HXYZ..."
  initial_budget = 500.00
  currency       = "USD"
}

Data Sources

grantex_agent

data "grantex_agent" "existing" {
  agent_id = "agt_01HXYZ..."
}

output "agent_name" {
  value = data.grantex_agent.existing.name
}

grantex_grants

data "grantex_grants" "active" {
  status   = "active"
  agent_id = grantex_agent.calendar_bot.agent_id
}

output "active_grant_count" {
  value = length(data.grantex_grants.active.grants)
}

Import

Existing resources can be imported:

terraform import grantex_agent.calendar_bot agt_01HXYZ...
terraform import grantex_policy.business_hours pol_01HXYZ...
terraform import grantex_webhook.slack_alerts whk_01HXYZ...

State Management

The provider stores resource IDs in Terraform state. For team environments, use a remote backend:

terraform {
  backend "gcs" {
    bucket = "my-terraform-state"
    prefix = "grantex"
  }
}

Environment Variables

Variable	Description
GRANTEX_API_KEY	API key (alternative to api_key in provider block)
GRANTEX_BASE_URL	Base URL (alternative to base_url, default: https://api.grantex.dev)

Ownership

Grantex is owned by Orchestrum Technologies LLP. Inventor and owner: Sanjeev Kumar. Ownership contact: [e-mail] or [e-mail].