MCP Server MCP

io.github.kanywst/mcp-opa-authz

By github 👁 1 views ▲ 0 votes

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

Homepage Verified source GitHub

Install

oci:ghcr.io/kanywst/mcp-opa-authz:0.2.1

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "oci",
      "identifier": "ghcr.io/kanywst/mcp-opa-authz:0.2.1",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.",
          "format": "string",
          "name": "AUTHZEN_PDP_URL"
        },
        {
          "description": "Authorization header value for the PDP. A value with no scheme is sent as \"Bearer <token>\".",
          "format": "string",
          "isSecret": true,
          "name": "AUTHZEN_PDP_TOKEN"
        },
        {
          "description": "Per-request timeout for PDP calls, as a Go duration. Default 10s.",
          "format": "string",
          "name": "AUTHZEN_PDP_TIMEOUT"
        },
        {
          "description": "Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.",
          "format": "string",
          "name": "MCP_OPA_EVAL_TIMEOUT"
        },
        {
          "description": "Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.",
          "format": "boolean",
          "name": "MCP_OPA_ALLOW_NETWORK_BUILTINS"
        }
      ]
    }
  ]
}

mcp model-context-protocol oci