# 安装 OPA MCP

- 类型: MCP 工具
- 说明: 帮助开发与运维人员编写、校验、调试并解释 OPA Rego 策略。
- 仓库: https://github.com/OrygnsCode/opa-mcp-server

## 方式一 · 一键代装（复制提示词让 AI 代劳）

### Claude Code
```
请帮我安装 askskill 上的 "OPA MCP" MCP 服务：
执行：claude mcp add io-github-orygnscode-opa-mcp -- npx -y @orygn/opa-mcp
```

### Codex
```
请帮我安装 askskill 上的 "OPA MCP" MCP 服务：
在 ~/.codex/config.toml 中添加：
[mcp_servers.io-github-orygnscode-opa-mcp]
command = "npx"
args = ["-y","@orygn/opa-mcp"]
然后重启 Codex 生效
```

### Cursor
```
请帮我安装 askskill 上的 "OPA MCP" MCP 服务：
在 .cursor/mcp.json 的 "mcpServers" 中添加：
"io-github-orygnscode-opa-mcp": { "command": "npx", "args": ["-y","@orygn/opa-mcp"] }
然后在 Cursor 设置 > MCP 中启用
```

## 方式二 · 命令行安装（原生命令与配置）

### Claude Code
```bash
claude mcp add --env OPA_URL=YOUR_VALUE --env OPA_TOKEN=YOUR_VALUE --env OPA_BINARY=YOUR_VALUE --env REGAL_BINARY=YOUR_VALUE --env CONFTEST_BINARY=YOUR_VALUE --env OPA_MCP_ALLOWED_PATHS=YOUR_VALUE --env GITHUB_TOKEN=YOUR_VALUE --transport stdio io-github-orygnscode-opa-mcp -- npx -y @orygn/opa-mcp
```
需要环境变量：OPA_URL, OPA_TOKEN, OPA_BINARY, REGAL_BINARY, CONFTEST_BINARY, OPA_MCP_ALLOWED_PATHS, GITHUB_TOKEN

### Codex
```bash
codex mcp add --env OPA_URL=YOUR_VALUE --env OPA_TOKEN=YOUR_VALUE --env OPA_BINARY=YOUR_VALUE --env REGAL_BINARY=YOUR_VALUE --env CONFTEST_BINARY=YOUR_VALUE --env OPA_MCP_ALLOWED_PATHS=YOUR_VALUE --env GITHUB_TOKEN=YOUR_VALUE io-github-orygnscode-opa-mcp -- npx -y @orygn/opa-mcp
```
配置文件 ~/.codex/config.toml：
```toml
[mcp_servers.io-github-orygnscode-opa-mcp]
command = "npx"
args = ["-y","@orygn/opa-mcp"]

[mcp_servers.io-github-orygnscode-opa-mcp.env]
OPA_URL = "YOUR_VALUE"
OPA_TOKEN = "YOUR_VALUE"
OPA_BINARY = "YOUR_VALUE"
REGAL_BINARY = "YOUR_VALUE"
CONFTEST_BINARY = "YOUR_VALUE"
OPA_MCP_ALLOWED_PATHS = "YOUR_VALUE"
GITHUB_TOKEN = "YOUR_VALUE"
```
需要环境变量：OPA_URL, OPA_TOKEN, OPA_BINARY, REGAL_BINARY, CONFTEST_BINARY, OPA_MCP_ALLOWED_PATHS, GITHUB_TOKEN

### Cursor
配置文件 .cursor/mcp.json：
```json
{
  "mcpServers": {
    "io-github-orygnscode-opa-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@orygn/opa-mcp"
      ],
      "env": {
        "OPA_URL": "YOUR_VALUE",
        "OPA_TOKEN": "YOUR_VALUE",
        "OPA_BINARY": "YOUR_VALUE",
        "REGAL_BINARY": "YOUR_VALUE",
        "CONFTEST_BINARY": "YOUR_VALUE",
        "OPA_MCP_ALLOWED_PATHS": "YOUR_VALUE",
        "GITHUB_TOKEN": "YOUR_VALUE"
      }
    }
  }
}
```
一键安装：cursor://anysphere.cursor-deeplink/mcp/install?name=io-github-orygnscode-opa-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkBvcnlnbi9vcGEtbWNwIl0sImVudiI6eyJPUEFfVVJMIjoiWU9VUl9WQUxVRSIsIk9QQV9UT0tFTiI6IllPVVJfVkFMVUUiLCJPUEFfQklOQVJZIjoiWU9VUl9WQUxVRSIsIlJFR0FMX0JJTkFSWSI6IllPVVJfVkFMVUUiLCJDT05GVEVTVF9CSU5BUlkiOiJZT1VSX1ZBTFVFIiwiT1BBX01DUF9BTExPV0VEX1BBVEhTIjoiWU9VUl9WQUxVRSIsIkdJVEhVQl9UT0tFTiI6IllPVVJfVkFMVUUifX0
需要环境变量：OPA_URL, OPA_TOKEN, OPA_BINARY, REGAL_BINARY, CONFTEST_BINARY, OPA_MCP_ALLOWED_PATHS, GITHUB_TOKEN