Loading
MCP Opa Authz
io.github.kanywstClaim this server
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.6.2Credentials from the publisher
- AUTHZEN_PDP_URL — Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.
- AUTHZEN_PDP_TOKEN — Authorization header value for the PDP. A value with no scheme is sent as "Bearer <token>".
- AUTHZEN_PDP_TIMEOUT — Per-request timeout for PDP calls, as a Go duration. Default 10s.
- MCP_OPA_EVAL_TIMEOUT — Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.
- MCP_OPA_ALLOW_NETWORK_BUILTINS — Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
AUTHZEN_PDP_URL=<value> AUTHZEN_PDP_TOKEN=<secret> AUTHZEN_PDP_TIMEOUT=<value> MCP_OPA_EVAL_TIMEOUT=<value> MCP_OPA_ALLOW_NETWORK_BUILTINS=<value> claude mcp add io.github.kanywst-mcp-opa-authz -- docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.6.2Run in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.kanywst-mcp-opa-authz": { "command": "docker", "args": [ "run", "-i", "--rm", "ghcr.io/kanywst/mcp-opa-authz:0.6.2" ], "env": { "AUTHZEN_PDP_URL": "<value>", "AUTHZEN_PDP_TOKEN": "<secret>", "AUTHZEN_PDP_TIMEOUT": "<value>", "MCP_OPA_EVAL_TIMEOUT": "<value>", "MCP_OPA_ALLOW_NETWORK_BUILTINS": "<value>" } } }}claude_desktop_config.json
Local · ociPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchServer facts
Local- Transport
- stdio
- Version
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ