ZurekZurekMarketplace
Download
Back to catalog

OPA MCP

MCP

by OrygnsCode · v0.2.1

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

mcplocal

MCP configuration

stdio

Command

npx -y @orygn/opa-mcp@0.2.1

Environment

  • OPA_URL

    Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools.

  • OPA_TOKENsecret

    Bearer token for OPA running with --authentication=token.

  • OPA_BINARY

    Path to the opa binary. Defaults to 'opa' on PATH.

  • REGAL_BINARY

    Path to the regal binary (optional, used by rego_lint). Defaults to 'regal' on PATH.

  • CONFTEST_BINARY

    Path to the conftest binary (optional, used by conftest_* tools). Defaults to 'conftest' on PATH.

  • OPA_MCP_ALLOWED_PATHS

    Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk.

  • GITHUB_TOKENsecret

    GitHub personal access token with the "gist" scope. Required only for rego_playground_share.

Install in one click with Zurek

Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.

Download for macOSAbout the Zurek app