mcp-opa-authz in namespace io.github
Local package path declaredNo credentials listedRepository declared by sourceUpdated 2026-10-07
io.github.kanywst/mcp-opa-authz · Registry status: active
No name of its own reaches this register for this entry. The heading therefore carries the trailing segment of the identifier; the identifier itself is listed below as a coordinate.
At a glance
Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.
Vendor's own description, untranslated and unverified
- Execution location
- Local package path declaredMCP-Register · 2026-08-20
- Required secrets declared
- No credentials listedMCP-Register · 2026-08-20
- Declared version and change
0.6.1· Source-reported change date 2026-10-07MCP-Register · 2026-10-08- Repository as declared
- github.com/kanywst/mcp-opa-authzMCP-Register · 2026-08-20
- Configuration
- can be built from the disclosed start template
Inspect connection paths and prerequisites
Related categories
- MCP servers without declared required secrets35,800
- Locally executed MCP servers17,056
- MCP servers with a repository URL30,107
- Local MCP servers without declared required secrets13,238
- Local MCP servers with a repository URL16,152
- MCP servers over stdio only13,710
6 of 8 categories. All categories in the segment catalogue
Page last changed:
Sources and collection
- Runs
- Local package path declared
- Credentials
- No credentials listed
- Registry record changed
- 2026-10-07
- Setup
- Template available
- Registry name
io.github.kanywst/mcp-opa-authz- Package coordinate
oci:ghcr.io/kanywst/mcp-opa-authz:0.6.1- Declared version
0.6.1- Source-reported listing date
- 2026-10-07
- Source-reported change date
- 2026-10-07
- First seen by tracevero
- 2026-08-20
- Vendor's website
- https://github.com/kanywst/mcp-opa-authz#readme
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin. What the confidence levels mean
Measured values
| Required secrets declared | No credentials listed no Original data – Required secret variables (raw): confirmed absent Original data – Required secret headers (raw): confirmed absent Source: MCP-Register · collected on 2026-08-20 · derived |
|---|---|
| Execution location | Local package path declared local Original data – Transports (raw): stdio Source: MCP-Register · collected on 2026-08-20 · derived |
| Path argument present | no Original data – Path arguments (raw): confirmed absent Original data – Path environment variables (raw): confirmed absent Source: MCP-Register · collected on 2026-08-20 · derived |
| Repository URL listed | Repository declared by source yes Original data – Repository (raw): https://github.com/kanywst/mcp-opa-authz Source: MCP-Register · collected on 2026-08-20 · derived |
| Declared version | 0.6.1 Source: MCP-Register · collected on 2026-10-08 · self-declared |
What is measured is what a manifest declares, not what a piece of software does. This registry fetches no repository URL, no endpoint and no package index; nothing here is verified. Which value comes from which source, and by which rule it was formed, is set out in the Methodology.
Source data25
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.
| Description (raw) | Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP. Source: MCP-Register · collected on 2026-08-26 · self-declared |
|---|---|
| Environment variables (raw) | AUTHZEN_PDP_URL, AUTHZEN_PDP_TOKEN, AUTHZEN_PDP_TIMEOUT, MCP_OPA_EVAL_TIMEOUT, MCP_OPA_ALLOW_NETWORK_BUILTINS Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Required secret variables (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Transports (raw) | stdio Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Path arguments (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Repository (raw) | https://github.com/kanywst/mcp-opa-authz Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Package registries (raw) | oci Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Required secret headers (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Path environment variables (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Remote URLs (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Remote hosts (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Registry status message (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| First listed in the registry (raw) | 2026-10-07 Source: MCP-Register · collected on 2026-10-08 · self-declared |
| Last changed in the registry (raw) | 2026-10-07 Source: MCP-Register · collected on 2026-10-08 · self-declared |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Delivery form (raw) | package Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Repository platform (raw) | github Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Repository subfolder (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Package identifiers (raw) | ghcr.io/kanywst/mcp-opa-authz:0.6.1 Source: MCP-Register · collected on 2026-10-08 · self-declared |
| Package versions (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Runtime hints (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Environment variable formats (raw) | boolean, string Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Environment variable descriptions (raw) | AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as "Bearer <token>". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s. Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Icon formats (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-20 · self-declared |
| Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/kanywst/mcp-opa-authz:0.6.1","transport":"stdio","environment":[{"name":"AUTHZEN_PDP_URL","description":"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.","format":"string","required":false,"secret":false},{"name":"AUTHZEN_PDP_TOKEN","description":"Authorization header value for the PDP. A value with no scheme is sent as \"Bearer <token>\".","format":"string","required":false,"secret":true},{"name":"AUTHZEN_PDP_TIMEOUT","description":"Per-request timeout for PDP calls, as a Go duration. Default 10s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_EVAL_TIMEOUT","description":"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_ALLOW_NETWORK_BUILTINS","description":"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.","format":"boolean","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} Source: MCP-Register · collected on 2026-10-08 · self-declared |
Embed this badge
Paste this line into a README of your own. The badge states how many values the registry holds for the entry and when it last looked, and it links back to this page.
[](https://tracevero.com/mcp/io-github-kanywst-mcp-opa-authz)
The image is drawn again on every request, so it always reports the current state while the pasted line stays as it is. It carries no rating and no traffic light – only the two measured figures.
Changes
| 2026-10-08 | Declared version: 0.6.0 → 0.6.1 |
|---|---|
| 2026-10-08 | Last changed in the registry (raw): 2026-10-03 → 2026-10-07 |
| 2026-10-08 | First listed in the registry (raw): 2026-10-03 → 2026-10-07 |
These are the 3 most recent changes to this entry. Full history
tracevero · https://tracevero.com/mcp/io-github-kanywst-mcp-opa-authz