--- bezeichner: "io.github.kanywst/mcp-opa-authz" art: "mcp_server" slug: "io-github-kanywst-mcp-opa-authz" paketkoordinate: "oci:ghcr.io/kanywst/mcp-opa-authz:0.6.1" status: "aktiv" homepage: "https://github.com/kanywst/mcp-opa-authz#readme" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.kanywst" registerseite: "https://tracevero.com/mcp/io-github-kanywst-mcp-opa-authz" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP." version: "0.6.1" roh_umgebungsvariablen: "AUTHZEN_PDP_URL, AUTHZEN_PDP_TOKEN, AUTHZEN_PDP_TIMEOUT, MCP_OPA_EVAL_TIMEOUT, MCP_OPA_ALLOW_NETWORK_BUILTINS" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/kanywst/mcp-opa-authz" roh_paketquellen: "oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-07" roh_aktualisiert_am: "2026-10-07" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "ghcr.io/kanywst/mcp-opa-authz:0.6.1" roh_paketversionen: "" roh_laufzeithinweise: "" roh_umgebungsformate: "boolean, string" roh_umgebungsbeschreibungen: "AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as \"Bearer \". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/kanywst/mcp-opa-authz:0.6.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"AUTHZEN_PDP_URL\",\"description\":\"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"AUTHZEN_PDP_TOKEN\",\"description\":\"Authorization header value for the PDP. A value with no scheme is sent as \\\"Bearer \\\".\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"AUTHZEN_PDP_TIMEOUT\",\"description\":\"Per-request timeout for PDP calls, as a Go duration. Default 10s.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OPA_EVAL_TIMEOUT\",\"description\":\"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OPA_ALLOW_NETWORK_BUILTINS\",\"description\":\"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.\",\"format\":\"boolean\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # io.github.kanywst/mcp-opa-authz ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_repository_url: https://github.com/kanywst/mcp-opa-authz | | Description (raw) | Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.6.1 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft | | | Environment variables (raw) | AUTHZEN_PDP_URL, AUTHZEN_PDP_TOKEN, AUTHZEN_PDP_TIMEOUT, MCP_OPA_EVAL_TIMEOUT, MCP_OPA_ALLOW_NETWORK_BUILTINS | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository (raw) | https://github.com/kanywst/mcp-opa-authz | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Package registries (raw) | oci | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Package identifiers (raw) | ghcr.io/kanywst/mcp-opa-authz:0.6.1 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft | | | Package versions (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Environment variable formats (raw) | boolean, string | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Environment variable descriptions (raw) | AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as "Bearer ". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s. | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/kanywst/mcp-opa-authz:0.6.1","transport":"stdio","environment":[{"name":"AUTHZEN_PDP_URL","description":"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.","format":"string","required":false,"secret":false},{"name":"AUTHZEN_PDP_TOKEN","description":"Authorization header value for the PDP. A value with no scheme is sent as \\"Bearer \\".","format":"string","required":false,"secret":true},{"name":"AUTHZEN_PDP_TIMEOUT","description":"Per-request timeout for PDP calls, as a Go duration. Default 10s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_EVAL_TIMEOUT","description":"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_ALLOW_NETWORK_BUILTINS","description":"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.","format":"boolean","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-kanywst|io.github.kanywst]] --- - Registry page: - Retrieved on: 2026-10-10