OPA MCP

io.github.OrygnsCode/opa-mcp·v0.1.3·Other

Quality Score

/100

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Repository →Website →

§00 Trust verdict · v1 advisory · method

UNVERIFIEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

§01 Install

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "opa-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@orygn/opa-mcp"
      ],
      "env": {
        "OPA_URL": "http://host.docker.internal:8181",
        "OPA_TOKEN": "<your-opa_token>",
        "OPA_BINARY": "opa",
        "REGAL_BINARY": "regal",
        "OPA_MCP_ALLOWED_PATHS": "<opa_mcp_allowed_paths>"
      }
    }
  }
}

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "opa-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@orygn/opa-mcp"
      ],
      "env": {
        "OPA_URL": "http://host.docker.internal:8181",
        "OPA_TOKEN": "<your-opa_token>",
        "OPA_BINARY": "opa",
        "REGAL_BINARY": "regal",
        "OPA_MCP_ALLOWED_PATHS": "<opa_mcp_allowed_paths>"
      }
    }
  }
}

Cline (cline_mcp_settings.json)

npx -y @orygn/opa-mcp

Claude Desktop (Docker)

{
  "mcpServers": {
    "opa-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "docker.io/orygn/opa-mcp:0.1.3"
      ],
      "env": {
        "OPA_URL": "http://host.docker.internal:8181",
        "OPA_TOKEN": "<your-opa_token>",
        "OPA_BINARY": "opa",
        "REGAL_BINARY": "regal",
        "OPA_MCP_ALLOWED_PATHS": "<opa_mcp_allowed_paths>"
      }
    }
  }
}

§02 Environment variables

OPA_URL

Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools.

OPA_TOKEN

secret

Bearer token for OPA running with --authentication=token.

OPA_BINARY

Path to the opa binary. Defaults to 'opa' on PATH.

REGAL_BINARY

Path to the regal binary (optional, used by rego_lint). Defaults to 'regal' on PATH.

OPA_MCP_ALLOWED_PATHS

Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk.

OPA_URL

Base URL of a running OPA server.

OPA_TOKEN

secret

Bearer token for OPA authentication.

§03 MCP Quality Score · methodology

freshness

completeness

installability

documentation

stability

§04 Alternatives in Other

agency.lona/trading

AI-powered trading strategy development: backtesting, market data, and portfolio analysis

ABMeter

ai.abmeter/abmeter

Feature flagging and A/B testing platform with AI-first experimentation workflows.

AdAdvisor MCP Server

ai.adadvisor/mcp-server

Query Meta Ads performance data — accounts, campaigns, ad sets, ads, metrics & settings.