OpenFGA MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OPENFGA_PROD_URL | No | The URL for the production OpenFGA server. | |
| OPENFGA_LOCAL_URL | No | The URL for the local OpenFGA server. | http://localhost:8080 |
| OPENFGA_STAGING_URL | No | The URL for the staging OpenFGA server. | |
| OPENFGA_ENVIRONMENTS | No | Recommended. A JSON string containing environment configurations. Example: '{"prod": {"url": "https://openfga.example.com", "defaultStoreId": "01ABC..."}}' | |
| OPENFGA_PROD_STORE_ID | No | The default Store ID for the production environment. | |
| OPENFGA_LOCAL_STORE_ID | No | The default Store ID for the local environment. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| openfga_store_listC | OpenFGA 스토어 목록 조회 |
| openfga_model_readC | OpenFGA Authorization Model 조회 |
| openfga_model_writeC | OpenFGA Authorization Model 배포 - DSL 파일 경로 또는 DSL 문자열로 모델 배포 |
| openfga_tuple_readC | OpenFGA 튜플(권한 관계) 조회 |
| openfga_tuple_writeC | OpenFGA 튜플(권한 관계) 생성 |
| openfga_tuple_batch_writeC | OpenFGA 튜플 배치 생성 (여러 개 한번에) |
| openfga_tuple_deleteC | OpenFGA 튜플(권한 관계) 삭제 |
| openfga_checkC | OpenFGA 권한 체크 - 사용자가 특정 권한을 가지는지 확인 |
| openfga_list_objectsC | OpenFGA 오브젝트 목록 조회 - 사용자가 접근 가능한 오브젝트 목록 |
| openfga_expandB | OpenFGA 권한 트리 확장 - 특정 오브젝트의 권한 관계 트리 조회 |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 10 tools
Each tool has a clearly distinct purpose targeting specific OpenFGA operations: check, expand, list_objects, model_read/write, store_list, and tuple operations (read/write/delete/batch_write). No overlap exists between tools, making selection unambiguous for an agent.
All tools follow a consistent 'openfga_' prefix with snake_case naming, using descriptive verb_noun patterns (e.g., openfga_check, openfga_tuple_write). This uniformity makes the tool set predictable and easy to navigate.
With 10 tools, this server is well-scoped for OpenFGA operations, covering core functionalities like authorization checks, model management, tuple operations, and store handling. Each tool earns its place without being overwhelming or insufficient.
The tool set provides complete coverage for OpenFGA's domain, including CRUD operations for tuples and models, permission checks, expansion for relationship trees, and store management. No obvious gaps exist, enabling agents to handle full authorization workflows.