Connect [OpenFGA](https://openfga.dev/) and [Auth0 FGA](https://auth0.com/fine-grained-authorization) to AI agents via the Model Context Protocol.
Openfga mcp mcp server connects Openfga MCP to AI assistants that speak the Model Context Protocol. Connect OpenFGA and Auth0 FGA to AI agents via the Model Context Protocol.
Connect OpenFGA and Auth0 FGA to AI agents via the Model Context Protocol.
Once connected, the assistant can call these 4 tools directly:
Stores — Create, list, get, delete storesModels — Create models with DSL, list, get, verifyPermissions — Check, grant, revoke permissions; query users and objectsOpenFGA — The OpenFGA tool exposed by this serverSetup follows the standard MCP pattern: clone or install the server, then register it in your client's configuration file and restart the client. The configuration snippets on this page cover Claude Desktop, Claude Code and Cursor.
Before the server will start you need to supply 5 environment variables: OPENFGA_MCP_API_URL, OPENFGA_MCP_TRANSPORT_HOST, OPENFGA_MCP_API_TOKEN, OPENFGA_MCP_API_CLIENT_ID, OPENFGA_MCP_API_CLIENT_SECRET. Keep credentials in your client's env block or a secrets manager rather than committing them.
Developer-tool servers are usually the first ones people connect, because they turn "help me with this code" into an assistant that can actually read the repo and act on it. Openfga MCP sits in that group, and the shape of its toolset — Stores, Models, Permissions among others — tells you what it is really for. Worth comparing against the other developer tools servers in this directory before you commit to one, since several overlap in scope but differ sharply in setup cost and permissions.
| Tool | What it does |
|---|---|
| Stores | Create, list, get, delete stores |
| Models | Create models with [DSL](https://openfga.dev/docs/configuration-language), list, get, verify |
| Permissions | Check, grant, revoke permissions; query users and objects |
| OpenFGA | The OpenFGA tool exposed by this server. |
{
"mcpServers": {
"OpenFGA": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"--pull=always",
"evansims/openfga-mcp:latest"
]
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| OPENFGA_MCP_API_URL | Endpoint or connection string the server talks to. | Yes |
| OPENFGA_MCP_TRANSPORT_HOST | Endpoint or connection string the server talks to. | Optional |
| OPENFGA_MCP_API_TOKEN | Credential the server authenticates with. | Yes |
| OPENFGA_MCP_API_CLIENT_ID | Configuration value read at startup. | Optional |
| OPENFGA_MCP_API_CLIENT_SECRET | Credential the server authenticates with. | Yes |
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.