Every infrastructure change carries risk: a Terraform plan that deletes a production load balancer, a CloudFormation changeset that replaces a database, a Pulumi preview buried in CI output. You need a tool that reads those plan files and tells you, in plain language, what changed, what it costs, and how to undo it — without switching CLI contexts or learning yet another DSL.
DeployDiff reads Terraform plan JSON, CloudFormation change sets, and Pulumi preview files from a single CLI. It shows a human-readable diff, estimates the monthly cost impact, and generates rollback commands — all before you hit deploy.
pip install git+https://github.com/Coding-Dev-Tools/deploydiff.git
DeployDiff is not published on public PyPI (publishing is pending). It is MIT-licensed, Python 3.10+, and runs fully offline on the free tier — no telemetry, no account required. If you use Homebrew or Scoop, both are also available: brew tap Coding-Dev-Tools/tap && brew install deploydiff or scoop bucket add Coding-Dev-Tools https://github.com/Coding-Dev-Tools/scoop-bucket && scoop install deploydiff.
Point DeployDiff at any Terraform plan JSON, CloudFormation change set, or Pulumi preview file. It parses the provider-specific format and renders a unified summary of creates, updates, deletes, and replaces.
deploydiff preview --tf plan.json
deploydiff preview --cfn changeset.json
deploydiff preview --pulumi preview.json
deploydiff preview --tf plan.json -v # verbose: before/after per property
deploydiff preview --tf plan.json --exit-on-destroy # exit 1 if destructive
The -v flag shows property-level diffs: exactly what changed, from what value to what new value. Destructive actions (deletes and replaces) are highlighted so they stand out in terminal output. The --exit-on-destroy flag lets you gate a CI pipeline — exit 1 if the plan would destroy or replace any resource.
DeployDiff reads cost metadata from the plan file and estimates the monthly change. You can supply custom pricing data for resources the provider does not include.
deploydiff cost --tf plan.json
deploydiff cost --cfn changeset.json
deploydiff cost --tf plan.json --pricing custom-pricing.json
The output shows per-resource before/after costs and a total monthly delta. No separate API call, no per-resource pricing lookup — just a summary row that tells you whether this change is cheap or expensive.
When a deploy goes wrong, the first instinct is to undo it fast — but panic-mode command construction is how mistakes compound. DeployDiff reads a plan and writes the correct rollback commands for your provider.
deploydiff rollback --tf plan.json
deploydiff rollback --cfn changeset.json
The output is provider-specific: Terraform terraform apply -target=... commands, CloudFormation stack rollback, etc. Copy, paste, recover — no manual command construction.
| Scenario | What DeployDiff gives you |
|---|---|
| CI pipeline gate | deploydiff preview --tf plan.json --exit-on-destroy fails a PR that would delete production resources |
| Multi-provider team | One CLI for Terraform, CloudFormation, and Pulumi — no context-switching |
| Cost-conscious deploy | deploydiff cost shows the monthly delta before anyone hits "merge" |
| Incident recovery | deploydiff rollback generates correct undo commands in seconds |
| AI agent integration | deploydiff mcp runs as an MCP server so Claude Code or Cursor can inspect infrastructure diffs directly |
DeployDiff blocks on no input provided, so you can pipe the output into any CI pipeline step:
# Fail on destructive changes
deploydiff preview --tf plan.json --exit-on-destroy
# Show cost delta in deploy log
deploydiff cost --tf plan.json
# Generate and store rollback commands for rapid recovery
deploydiff rollback --tf plan.json > rollback-commands.sh
You can, but a Terraform plan JSON is hundreds of lines of nested objects. DeployDiff strips the provider-specific noise and shows what matters: resource type, action (create/update/delete/replace), changed properties, cost delta, and a recovery path. It also normalises across three providers so your team uses one tool regardless of which IaC tool each service chose.
The free tier includes CLI preview, cost estimation (1 plan comparison), and rollback generation — fully offline, no telemetry, no account required. DeployDiff Individual is $15/mo ($12/mo billed annually) for unlimited stacks, multi-provider support, and cost estimation. Suite is $49/mo ($39/mo annually) for all 11 Coding Dev Tools CLI tools under one license. Team is $79/mo for up to 5 devs with shared reports and Slack alerts. Enterprise pricing is custom.
DeployDiff is one of 11 tools in the Coding Dev Tools suite, built by autonomous AI. Point it at your next Terraform plan, review the diff, estimate the cost, and generate a rollback — before you hit deploy.
MIT, Python 3.10+, no telemetry.