Loading…
Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.
io.github.kanywst/mcp-opa-authz is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding io.github.kanywst/mcp-opa-authz to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.6.2Review the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-25T13:44:44.659893Z",
"publishedAt": "2026-10-25T13:44:44.659893Z",
"statusChangedAt": "2026-10-25T13:44:44.659893Z"
}
},
"server": {
"name": "io.github.kanywst/mcp-opa-authz",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.6.2",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/kanywst/mcp-opa-authz:0.6.2",
"registryType": "oci",
"environmentVariables": [
{
"name": "AUTHZEN_PDP_URL",
"format": "string",
"description": "Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it."
},
{
"name": "AUTHZEN_PDP_TOKEN",
"format": "string",
"isSecret": true,
"description": "Authorization header value for the PDP. A value with no scheme is sent as \"Bearer <token>\"."
},
{
"name": "AUTHZEN_PDP_TIMEOUT",
"format": "string",
"description": "Per-request timeout for PDP calls, as a Go duration. Default 10s."
},
{
"name": "MCP_OPA_EVAL_TIMEOUT",
"format": "string",
"description": "Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s."
},
{
"name": "MCP_OPA_ALLOW_NETWORK_BUILTINS",
"format": "boolean",
"description": "Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process."
}
]
}
],
"repository": {
"url": "https://github.com/kanywst/mcp-opa-authz",
"source": "github"
},
"websiteUrl": "https://github.com/kanywst/mcp-opa-authz#readme",
"description": "Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP."
}
}