OpenFGA MCP

OpenFGA MCP Server

An experimental Model Context Protocol (MCP) server that enables Large Language Models (LLMs) to read, search, and manipulate OpenFGA stores. Unlocks authorization for agentic AI, and fine-grained vibe coding✨ for humans.

Requirements

Python 3.12+
An OpenFGA server

Features

Tools

Store Management

create_store: Creates a new Store. (create-store)
list_stores: List all stores. (list-stores)
get_store: Get a store details. (get-store)
delete_store: Delete a store. (delete-store)
get_store_id_by_name: Get the ID of a store by it's name.

Authorization Model Management

write_authorization_model: Write an authorization model. (write-authorization-model)
read_authorization_models: List all authorization models. (read-authorization-models)
get_authorization_model: Get a particular version of an authorization model details. (get-authorization-model)

Relationship Tuples Management

write_relation_tuples: Write relation tuples. (write-relation-tuples)
read_relation_tuples: Read relation tuples. (read-relation-tuples)

Relationship Queries

check: Check if a user has a relation to an object. (check)
list_objects: List objects of a type that a user has a relation to. (list-objects)
list_users: List users that have a given relationship with a given object. (list-users)

Resources

Prompts

Usage

We recommend running the server using UVX:

uvx openfga-mcp@latest

Installing via Smithery

To install OpenFGA MCP Server for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @evansims/openfga-mcp --client claude

Configuration

The server accepts the following arguments:

--openfga_url: URL of your OpenFGA server
--openfga_store: ID of the OpenFGA store the MCP server will use
--openfga_model: ID of the OpenFGA authorization model the MCP server will use

For API token authentication:

--openfga_token: API token for use with your OpenFGA server

For Client Credentials authentication:

--openfga_client_id: Client ID for use with your OpenFGA server
--openfga_client_secret: Client secret for use with your OpenFGA server
--openfga_api_issuer: API issuer for use with your OpenFGA server
--openfga_api_audience: API audience for use with your OpenFGA server

For example:

uvx openfga-mcp@latest \
  --openfga_url="http://127.0.0.1:8080" \
  --openfga_store="your-store-id" \
  --openfga_model="your-model-id"

Using with Claude Desktop

To configure Claude to use the server, add the following to your Claude config:

{
  "mcpServers": {
    "openfga-mcp": {
      "command": "uvx",
      "args": ["openfga-mcp@latest"]
    }
  }
}

You may need to specify the full path to your uvx executable. Use which uvx to find it.
You must restart Claude after updating the configuration.

Using with Raycast

Using with Cursor

Using with Windsurf

Development

To setup your development environment, run:

make setup

To run the development server:

make run \
  --openfga_url="http://127.0.0.1:8080" \
  --openfga_store="your-store-id" \
  --openfga_model="your-model-id"

To run the development server with the MCP Inspector:

make dev

License

Apache 2.0

This server cannot be installed

security - not tested

license - permissive license

quality - not tested

How are these scores calculated?

remote-capable server

The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.

An experimental Model Context Protocol server that enables Large Language Models to read, search, and manipulate OpenFGA authorization stores, unlocking fine-grained access control for agentic AI and natural language interactions.

Related MCP Servers

OpenAPI MCP Server
ivo-toby
-
security
A
license
-
quality
A server that enables Large Language Models to discover and interact with REST APIs defined by OpenAPI specifications through the Model Context Protocol.
Last updated -
1,641
136
TypeScript
MIT License
MCP TapData Serverofficial
tapdata
-
security
F
license
-
quality
A Model Context Protocol server that enables Large Language Models to access and interact with database connections, including viewing schemas and performing CRUD operations on connected databases.
Last updated -
Filesystem MCP Server
cyanheads
A
security
A
license
A
quality
A Model Context Protocol server that provides AI agents with secure access to local filesystem operations, enabling reading, writing, and managing files through a standardized interface.
Last updated -
10
688
16
TypeScript
Apache 2.0
GeoServer MCP Server
mahdin75
A
security
A
license
A
quality
A Model Context Protocol server that connects Large Language Models to the GeoServer REST API, enabling AI assistants to query and manipulate geospatial data through natural language.
Last updated -
9
33
Python
MIT License

View all related MCP servers