Opa Authz MCP Server: Install & Setup

Install Opa Authz in Claude Code

Claude Code

claude mcp add opa-authz -- docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.6.2

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "opa-authz": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/kanywst/mcp-opa-authz:0.6.2"
      ]
    }
  }
}

Frequently asked questions

What does the Opa Authz MCP server do?

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

Is the Opa Authz MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Opa Authz run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Opa Authz to Claude Code?

Run: claude mcp add opa-authz -- docker run -i --rm ghcr.io/kanywst/mcp-opa-authz:0.6.2

More security & identity MCP servers

View all

OSF CLI Go

edithatogo/osf-cli-go

Read-only MCP tools for authenticated Open Science Framework projects and files.

LocalFree

Mund — MCP Security Scanner

Tyox-all/Weave_Protocol

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

LocalFree

Palanit Core

stasxr/palanit-core

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

LocalFree

Liveauth

dulzuradev/liveauth-mcp

MCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.

LocalFree

Pentest

cyanheads/pentest-mcp-server

Offline methodology engine for authorized penetration testing, CTF, and security research.

Local + RemoteFree

Keymaster

AInoAKARI/keymaster-mcp

Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.

LocalAccount needed