Policy MCP Server

@TangoIndiaPapa

About Policy MCP Server

Model Context Protocol Server using FastMCP 2.0 to enforce policies

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "policy-mcp-server": {
      "command": "uv",
      "args": [
        "venv",
        ".venv"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Policy MCP Server?

A Model Context Protocol (MCP) server built with FastMCP that enforces policies via Open Policy Agent (OPA). It integrates OPA’s REST API for decision-making and is designed for AI agents or MCP-compatible clients needing compliance checks.

How to use Policy MCP Server?

Install dependencies with uv, copy .env.example to .env, then run python src/server.py. Configure it as an MCP server in VS Code settings or launch with Docker Compose for OPA. The tool enforce_policy_opa checks whether an action complies with policies defined in Rego.

Key features of Policy MCP Server

FastMCP compliant and modular architecture
Policy enforcement via OPA REST API
Rego‑based policy files and data
Easy to extend with new tools
XAI‑compliant and secure by design
Supports Docker, Dev Container, and VS Code

Use cases of Policy MCP Server

Enforce content policies on LLM‑generated prompts
Validate agent actions against organizational rules
Test policy rules interactively via MCP chat
Integrate compliance checks into AI agent workflows

FAQ from Policy MCP Server

How do I set up OPA?

Run docker compose -f docker-compose-opa.yaml up -d after creating a Docker network. OPA listens on port 8181 and loads policies from config/policy.rego and config/policy.json.

How do I configure the server for VS Code?

Add the server to your VS Code settings.json under `

Frequently asked questions

How do I set up OPA?

Run `docker compose -f docker-compose-opa.yaml up -d` after creating a Docker network. OPA listens on port 8181 and loads policies from `config/policy.rego` and `config/policy.json`.