Back to Home
Gyeom icon

openfga-mcp

Verified Safe

by Gyeom

Overview

Integrates OpenFGA authorization management with Claude Code, enabling AI agents to manage stores, models, tuples, and permissions.

Installation

Run Command
node dist/index.js

Environment Variables

  • OPENFGA_ENVIRONMENTS
  • OPENFGA_LOCAL_URL
  • OPENFGA_LOCAL_STORE_ID
  • OPENFGA_INT_URL
  • OPENFGA_INT_STORE_ID
  • OPENFGA_STAGE_URL
  • OPENFGA_STAGE_STORE_ID
  • OPENFGA_PROD_URL
  • OPENFGA_PROD_STORE_ID
  • OPENFGA_REAL_URL
  • OPENFGA_REAL_STORE_ID

Security Notes

The server uses `child_process.execSync` to invoke the `fga` CLI for model transformations (`openfga_model_write`). While the temporary file path used in the command is properly quoted, the content of the DSL passed to the `fga` CLI originates from user input. This introduces a dependency on the security of the `fga` CLI itself against potential vulnerabilities such as command injection through crafted DSL content. `execSync` is also a blocking call, which can impact performance and availability under high load for this specific operation.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-12-14

Tags

OpenFGAAuthorizationPermissionsMCPClaude Code