--- bezeichner: "io.github.OrygnsCode/opa-mcp" art: "mcp_server" slug: "io-github-orygnscode-opa-mcp" paketkoordinate: "npm:@orygn/opa-mcp" status: "aktiv" homepage: "https://orygn.tech" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.OrygnsCode" registerseite: "https://tracevero.com/mcp/io-github-orygnscode-opa-mcp" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client." version: "0.9.0" roh_umgebungsvariablen: "OPA_URL, OPA_TOKEN, OPA_BINARY, REGAL_BINARY, CONFTEST_BINARY, OPA_MCP_ALLOWED_PATHS, GITHUB_TOKEN, OPA_URL, OPA_TOKEN, GITHUB_TOKEN" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio, stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/OrygnsCode/opa-mcp-server" roh_paketquellen: "npm, oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-06" roh_aktualisiert_am: "2026-10-06" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "@orygn/opa-mcp, docker.io/orygn/opa-mcp:0.9.0" roh_paketversionen: "0.9.0" roh_laufzeithinweise: "npx" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "CONFTEST_BINARY=Path to the conftest binary (optional, used by conftest_* tools). Defaults to 'conftest' on PATH. · GITHUB_TOKEN=GitHub personal access token with the \"gist\" scope. Required only for rego_playground_share. · OPA_BINARY=Path to the opa binary. Defaults to 'opa' on PATH. · OPA_MCP_ALLOWED_PATHS=Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk. · OPA_TOKEN=Bearer token for OPA authentication. · OPA_TOKEN=Bearer token for OPA running with --authentication=token. · OPA_URL=Base URL of a running OPA server. · OPA_URL=Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools. · REGAL_BINARY=Path to the regal binary (optional; used by rego_lint, rego_security_audit and rego_fix). Defaults to 'regal' on PATH." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@orygn/opa-mcp\",\"version\":\"0.9.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"OPA_URL\",\"description\":\"Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools.\",\"required\":false,\"secret\":false},{\"name\":\"OPA_TOKEN\",\"description\":\"Bearer token for OPA running with --authentication=token.\",\"required\":false,\"secret\":true},{\"name\":\"OPA_BINARY\",\"description\":\"Path to the opa binary. Defaults to 'opa' on PATH.\",\"required\":false,\"secret\":false},{\"name\":\"REGAL_BINARY\",\"description\":\"Path to the regal binary (optional; used by rego_lint, rego_security_audit and rego_fix). Defaults to 'regal' on PATH.\",\"required\":false,\"secret\":false},{\"name\":\"CONFTEST_BINARY\",\"description\":\"Path to the conftest binary (optional, used by conftest_* tools). Defaults to 'conftest' on PATH.\",\"required\":false,\"secret\":false},{\"name\":\"OPA_MCP_ALLOWED_PATHS\",\"description\":\"Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk.\",\"required\":false,\"secret\":false},{\"name\":\"GITHUB_TOKEN\",\"description\":\"GitHub personal access token with the \\\"gist\\\" scope. Required only for rego_playground_share.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false},{\"registryType\":\"oci\",\"identifier\":\"docker.io/orygn/opa-mcp:0.9.0\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"OPA_URL\",\"description\":\"Base URL of a running OPA server.\",\"required\":false,\"secret\":false},{\"name\":\"OPA_TOKEN\",\"description\":\"Bearer token for OPA authentication.\",\"required\":false,\"secret\":true},{\"name\":\"GITHUB_TOKEN\",\"description\":\"GitHub personal access token with the \\\"gist\\\" scope. Required only for rego_playground_share.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # OPA MCP ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio, stdio | | Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/OrygnsCode/opa-mcp-server | | Description (raw) | Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.9.0 | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | | Environment variables (raw) | OPA_URL, OPA_TOKEN, OPA_BINARY, REGAL_BINARY, CONFTEST_BINARY, OPA_MCP_ALLOWED_PATHS, GITHUB_TOKEN, OPA_URL, OPA_TOKEN, GITHUB_TOKEN | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio, stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/OrygnsCode/opa-mcp-server | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | npm, oci | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-06 | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-06 | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | @orygn/opa-mcp, docker.io/orygn/opa-mcp:0.9.0 | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | | Package versions (raw) | 0.9.0 | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | | Runtime hints (raw) | npx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | CONFTEST_BINARY=Path to the conftest binary (optional, used by conftest_* tools). Defaults to 'conftest' on PATH. · GITHUB_TOKEN=GitHub personal access token with the "gist" scope. Required only for rego_playground_share. · OPA_BINARY=Path to the opa binary. Defaults to 'opa' on PATH. · OPA_MCP_ALLOWED_PATHS=Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk. · OPA_TOKEN=Bearer token for OPA authentication. · OPA_TOKEN=Bearer token for OPA running with --authentication=token. · OPA_URL=Base URL of a running OPA server. · OPA_URL=Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools. · REGAL_BINARY=Path to the regal binary (optional; used by rego_lint, rego_security_audit and rego_fix). Defaults to 'regal' on PATH. | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@orygn/opa-mcp","version":"0.9.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"OPA_URL","description":"Base URL of a running OPA server. Required only for opa_* runtime tools, not for rego_* language tools.","required":false,"secret":false},{"name":"OPA_TOKEN","description":"Bearer token for OPA running with --authentication=token.","required":false,"secret":true},{"name":"OPA_BINARY","description":"Path to the opa binary. Defaults to 'opa' on PATH.","required":false,"secret":false},{"name":"REGAL_BINARY","description":"Path to the regal binary (optional; used by rego_lint, rego_security_audit and rego_fix). Defaults to 'regal' on PATH.","required":false,"secret":false},{"name":"CONFTEST_BINARY","description":"Path to the conftest binary (optional, used by conftest_* tools). Defaults to 'conftest' on PATH.","required":false,"secret":false},{"name":"OPA_MCP_ALLOWED_PATHS","description":"Comma-separated list of root directories tools may read/write. When unset, file-based tools refuse to access the disk.","required":false,"secret":false},{"name":"GITHUB_TOKEN","description":"GitHub personal access token with the \\"gist\\" scope. Required only for rego_playground_share.","required":false,"secret":true}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"docker.io/orygn/opa-mcp:0.9.0","transport":"stdio","environment":[{"name":"OPA_URL","description":"Base URL of a running OPA server.","required":false,"secret":false},{"name":"OPA_TOKEN","description":"Bearer token for OPA authentication.","required":false,"secret":true},{"name":"GITHUB_TOKEN","description":"GitHub personal access token with the \\"gist\\" scope. Required only for rego_playground_share.","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-07T01:17:01.897Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-orygnscode|io.github.OrygnsCode]] --- - Registry page: - Retrieved on: 2026-10-10