OPA MCP

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

stdiocommunityapplication

Package Details

Transportstdio
Runtimenpx

Environment Variables

OPA_URL
Default:http://localhost:8181

Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools.

OPA_TOKEN
Secret

Bearer token for OPA running with --authentication=token.

OPA_BINARY
Default:opa

Path to the opa binary. Defaults to 'opa' on PATH.

REGAL_BINARY
Default:regal

Path to the regal binary (optional, used by rego_lint). Defaults to 'regal' on PATH.

OPA_MCP_ALLOWED_PATHS

Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk.