Skip to content
Claude Code

mcp opa authz for Claude Code

io.github.kanywst/mcp-opa-authz

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

client:Claude Code transport:stdio runtime:oci

Install mcp opa authz in Claude Code

run in your project directory

Held in this page only — never stored, logged, or sent anywhere but back to your screen.

claude mcp add mcp-opa-authz -e AUTHZEN_PDP_URL=<AUTHZEN_PDP_URL> -e AUTHZEN_PDP_TOKEN=<AUTHZEN_PDP_TOKEN> -e AUTHZEN_PDP_TIMEOUT=<AUTHZEN_PDP_TIMEOUT> -e MCP_OPA_EVAL_TIMEOUT=<MCP_OPA_EVAL_TIMEOUT> -e MCP_OPA_ALLOW_NETWORK_BUILTINS=<MCP_OPA_ALLOW_NETWORK_BUILTINS> -- docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.3.0

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

mcp opa authz in other clients