mcp-opa-authz
Rank #14,752io.github.kanywst/mcp-opa-authz
Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.
mcp-opa-authz is a Model Context Protocol (MCP) server published by kanywst. It ranks #14,752 of 132,046 servers tracked on MCP Toplist. mcp-opa-authz is listed across 2 registries — Official MCP and Glama, with 2 tracked versions. It was first listed on Aug 19, 2026 and most recently updated on Sep 11, 2026.
Ranks ahead of 117,294 of 132,046 servers on MCP Toplist.
Use mcp-opa-authz
No credentials or required configuration declared — add it to your MCP client and go.
claude mcp add mcp-opa-authz -e "AUTHZEN_PDP_URL=<your AUTHZEN_PDP_URL>" -e "AUTHZEN_PDP_TOKEN=<your AUTHZEN_PDP_TOKEN>" -e "AUTHZEN_PDP_TIMEOUT=<your AUTHZEN_PDP_TIMEOUT>" -e "MCP_OPA_EVAL_TIMEOUT=<your MCP_OPA_EVAL_TIMEOUT>" -e "MCP_OPA_ALLOW_NETWORK_BUILTINS=<your MCP_OPA_ALLOW_NETWORK_BUILTINS>" -- docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.3.0Replace each placeholder with your own value before saving.
[mcp_servers.mcp-opa-authz]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/kanywst/mcp-opa-authz:0.3.0"]
[mcp_servers.mcp-opa-authz.env]
AUTHZEN_PDP_URL = "<your AUTHZEN_PDP_URL>"
AUTHZEN_PDP_TOKEN = "<your AUTHZEN_PDP_TOKEN>"
AUTHZEN_PDP_TIMEOUT = "<your AUTHZEN_PDP_TIMEOUT>"
MCP_OPA_EVAL_TIMEOUT = "<your MCP_OPA_EVAL_TIMEOUT>"
MCP_OPA_ALLOW_NETWORK_BUILTINS = "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"mcp-opa-authz": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/kanywst/mcp-opa-authz:0.3.0"
],
"env": {
"AUTHZEN_PDP_URL": "<your AUTHZEN_PDP_URL>",
"AUTHZEN_PDP_TOKEN": "<your AUTHZEN_PDP_TOKEN>",
"AUTHZEN_PDP_TIMEOUT": "<your AUTHZEN_PDP_TIMEOUT>",
"MCP_OPA_EVAL_TIMEOUT": "<your MCP_OPA_EVAL_TIMEOUT>",
"MCP_OPA_ALLOW_NETWORK_BUILTINS": "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"mcp-opa-authz": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/kanywst/mcp-opa-authz:0.3.0"
],
"env": {
"AUTHZEN_PDP_URL": "<your AUTHZEN_PDP_URL>",
"AUTHZEN_PDP_TOKEN": "<your AUTHZEN_PDP_TOKEN>",
"AUTHZEN_PDP_TIMEOUT": "<your AUTHZEN_PDP_TIMEOUT>",
"MCP_OPA_EVAL_TIMEOUT": "<your MCP_OPA_EVAL_TIMEOUT>",
"MCP_OPA_ALLOW_NETWORK_BUILTINS": "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"mcp-opa-authz": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/kanywst/mcp-opa-authz:0.3.0"
],
"env": {
"AUTHZEN_PDP_URL": "<your AUTHZEN_PDP_URL>",
"AUTHZEN_PDP_TOKEN": "<your AUTHZEN_PDP_TOKEN>",
"AUTHZEN_PDP_TIMEOUT": "<your AUTHZEN_PDP_TIMEOUT>",
"MCP_OPA_EVAL_TIMEOUT": "<your MCP_OPA_EVAL_TIMEOUT>",
"MCP_OPA_ALLOW_NETWORK_BUILTINS": "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"mcp-opa-authz": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/kanywst/mcp-opa-authz:0.3.0"
],
"env": {
"AUTHZEN_PDP_URL": "<your AUTHZEN_PDP_URL>",
"AUTHZEN_PDP_TOKEN": "<your AUTHZEN_PDP_TOKEN>",
"AUTHZEN_PDP_TIMEOUT": "<your AUTHZEN_PDP_TIMEOUT>",
"MCP_OPA_EVAL_TIMEOUT": "<your MCP_OPA_EVAL_TIMEOUT>",
"MCP_OPA_ALLOW_NETWORK_BUILTINS": "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"mcp-opa-authz": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/kanywst/mcp-opa-authz:0.3.0"
],
"env": {
"AUTHZEN_PDP_URL": "<your AUTHZEN_PDP_URL>",
"AUTHZEN_PDP_TOKEN": "<your AUTHZEN_PDP_TOKEN>",
"AUTHZEN_PDP_TIMEOUT": "<your AUTHZEN_PDP_TIMEOUT>",
"MCP_OPA_EVAL_TIMEOUT": "<your MCP_OPA_EVAL_TIMEOUT>",
"MCP_OPA_ALLOW_NETWORK_BUILTINS": "<your MCP_OPA_ALLOW_NETWORK_BUILTINS>"
}
}
}
}Replace each placeholder with your own value before saving.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.kanywst%2Fmcp-opa-authz)<a href="https://mcptoplist.com/server/io.github.kanywst%2Fmcp-opa-authz"><img src="https://mcptoplist.com/badge/io.github.kanywst%2Fmcp-opa-authz.svg" alt="MCP Toplist: Top 25% of 132,046" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Listed on 2 registries
kanywst
Available versions (2)
| Version | Published |
|---|---|
| 0.3.0 | Sep 11, 2026 |
| 0.2.1 | Aug 19, 2026 |
Frequently asked questions
- Who maintains mcp-opa-authz?
- mcp-opa-authz is maintained by kanywst, which publishes 1 MCP server (2 total versions) tracked on MCP Toplist.
- Is mcp-opa-authz listed on the Official MCP Registry?
- Yes — mcp-opa-authz is listed on the Official MCP Registry, alongside Glama.
- How many versions does mcp-opa-authz have?
- MCP Toplist tracks 2 versions of mcp-opa-authz, most recently published on Sep 11, 2026.
- Where can I find the source code for mcp-opa-authz?
- The source code for mcp-opa-authz is hosted at github.com/kanywst/mcp-opa-authz.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.