Mcp-opa-authz MCP Server

Mcp-opa-authz is an MCP integration. Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

Packages and local setup

The published oci package is ghcr.io/kanywst/mcp-opa-authz:0.6.1. Its declared MCP transport is stdio.

The package declares AUTHZEN_PDP_URL: Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.; AUTHZEN_PDP_TOKEN: Authorization header value for the PDP. A value with no scheme is sent as "Bearer ".; AUTHZEN_PDP_TIMEOUT: Per-request timeout for PDP calls, as a Go duration. Default 10s.; MCP_OPA_EVAL_TIMEOUT: Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.; MCP_OPA_ALLOW_NETWORK_BUILTINS: Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.6.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.