OPA MCP is a Model Context Protocol server that gives MCP-compatible clients a structured interface to Rego. It wraps the OPA CLI (opa fmt, opa check, opa eval, opa test, opa build, opa sign), the OPA REST API, the Regal linter, and Conftest, exposing 50+ tools with stable error codes and schema-validated input/output. Higher-level helpers (rego_explain_decision, rego_describe_policy, rego_generate_test_skeleton, rego_suggest_fix) compose the primitives into the tasks agents typically perform. A curated resource set exposes the OPA built-in function catalog, the Rego style guide, and a pattern library covering RBAC, ABAC, Kubernetes admission, IaC gates, API authorization, and rate limiting. Distributed via npm (@orygn/opa-mcp), Docker Hub (orygn/opa-mcp), and a signed .mcpb bundle.
Not monetized yet
Turn opa-mcp’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install opa-mcp
For anyone using opa-mcp — no Lulu account needednpx -y @smithery/cli@latest install orygn/opa-mcp --client claude
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
opa-mcp installs from source — follow the repository README.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Works well together