OPA MCP

Turns Claude, Cursor, VS Code, or any MCP client into a full OPA Rego development environment by wrapping the OPA CLI and REST API. You get 52 tools covering policy authoring (format, parse, refactor), evaluation with explain and coverage flags, bundle building and signing, linting via Regal, and CRUD operations against a running OPA server. The rego_explain_decision tool walks through every rule that fired or didn't, answering "why was this rejected" without manual trace reading. Ships with curated resources including the built-in function catalog, the official style guide, and patterns for RBAC, Kubernetes admission, and API authorization. Runs locally over stdio with path allow-lists and subprocess timeouts. If you write Rego policies and want an agent that can debug denials or generate test skeletons without fighting opa eval's argument order, this bridges that gap.