Openfga MCP

🚀 OpenFGA MCP Server

An experimental Model Context Protocol (MCP) server that enables Large Language Models (LLMs) to read, search, and manipulate OpenFGA stores. Unlock authorization for agentic AI and achieve fine-grained Vibe Coding for humans ✨.

🚀 Quick Start

Requirements

• Python 3.12+
• An OpenFGA server

✨ Features

Tools

Store Management

• create_store: Create a new store. (create-store)
• list_stores: List all stores. (list-stores)
• get_store: Get store details. (get-store)
• delete_store: Delete a store. (delete-store)
• get_store_id_by_name: Get the store ID by name.

Authorization Model Management

• write_authorization_model: Write an authorization model. (write-authorization-model)
• read_authorization_models: List all authorization models. (read-authorization-models)
• get_authorization_model: Get an authorization model. (get-authorization-model)

Relationship Tuple Management

• batch_get_triples: Batch get relationship tuples. (batch-get-triples)
• get_triple: Get a single relationship tuple. (get-triple)
• upsert_triple: Insert or update a relationship tuple. (upsert-triple)
• delete_triples: Delete relationship tuples. (delete-triples)

Queries

• check_permission: Check permissions.
• list_objects: List objects.
• list_users_or_groups: List users or groups.

💻 Usage Examples

Basic Usage

To run the server:

make run \
  OPENFGA_URL=http://127.0.0.1:8080 \
  STORE_ID=your-store-id \
  MODEL_ID=your-model-id

Integration

Integration with Claude

Add the following to the configuration file:

{
  "mcpInspectors": {
    "default": {
      "class": "OpenFGAInspector",
      "args": {
        "baseUrl": "http://localhost:8081"
      }
    }
  }
}

🔧 Technical Details

Development

Set up the development environment:

make setup

Run the development server:

make run \
  OPENFGA_URL=http://127.0.0.1:8080 \
  STORE_ID=your-store-id \
  MODEL_ID=your-model-id

📄 License

Apache 2.0