---
bezeichner: "io.github.kanywst/mcp-opa-authz"
art: "mcp_server"
slug: "io-github-kanywst-mcp-opa-authz"
paketkoordinate: "oci:ghcr.io/kanywst/mcp-opa-authz:0.6.1"
status: "aktiv"
homepage: "https://github.com/kanywst/mcp-opa-authz#readme"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.kanywst"
registerseite: "https://tracevero.de/mcp/io-github-kanywst-mcp-opa-authz"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP."
version: "0.6.1"
roh_umgebungsvariablen: "AUTHZEN_PDP_URL, AUTHZEN_PDP_TOKEN, AUTHZEN_PDP_TIMEOUT, MCP_OPA_EVAL_TIMEOUT, MCP_OPA_ALLOW_NETWORK_BUILTINS"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/kanywst/mcp-opa-authz"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-10-07"
roh_aktualisiert_am: "2026-10-07"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/kanywst/mcp-opa-authz:0.6.1"
roh_paketversionen: ""
roh_laufzeithinweise: ""
roh_umgebungsformate: "boolean, string"
roh_umgebungsbeschreibungen: "AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as \"Bearer <token>\". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/kanywst/mcp-opa-authz:0.6.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"AUTHZEN_PDP_URL\",\"description\":\"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"AUTHZEN_PDP_TOKEN\",\"description\":\"Authorization header value for the PDP. A value with no scheme is sent as \\\"Bearer <token>\\\".\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"AUTHZEN_PDP_TIMEOUT\",\"description\":\"Per-request timeout for PDP calls, as a Go duration. Default 10s.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OPA_EVAL_TIMEOUT\",\"description\":\"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OPA_ALLOW_NETWORK_BUILTINS\",\"description\":\"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.\",\"format\":\"boolean\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# io.github.kanywst/mcp-opa-authz

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | lokal | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_transportarten: stdio |
| Pfadargument vorhanden | false | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository-Adresse geführt | true | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_repository_url: https://github.com/kanywst/mcp-opa-authz |
| Beschreibung (Rohangabe) | Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Deklarierte Version | 0.6.1 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | AUTHZEN_PDP_URL, AUTHZEN_PDP_TOKEN, AUTHZEN_PDP_TIMEOUT, MCP_OPA_EVAL_TIMEOUT, MCP_OPA_ALLOW_NETWORK_BUILTINS | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Transportarten (Rohangabe) | stdio | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/kanywst/mcp-opa-authz | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | oci | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | ghcr.io/kanywst/mcp-opa-authz:0.6.1 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Paketversionen (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) | boolean, string | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as "Bearer <token>". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s. | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/kanywst/mcp-opa-authz:0.6.1","transport":"stdio","environment":[{"name":"AUTHZEN_PDP_URL","description":"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.","format":"string","required":false,"secret":false},{"name":"AUTHZEN_PDP_TOKEN","description":"Authorization header value for the PDP. A value with no scheme is sent as \\"Bearer <token>\\".","format":"string","required":false,"secret":true},{"name":"AUTHZEN_PDP_TIMEOUT","description":"Per-request timeout for PDP calls, as a Go duration. Default 10s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_EVAL_TIMEOUT","description":"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.","format":"string","required":false,"secret":false},{"name":"MCP_OPA_ALLOW_NETWORK_BUILTINS","description":"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.","format":"boolean","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-kanywst|io.github.kanywst]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-kanywst-mcp-opa-authz>
- Abgerufen am: 2026-10-11
