Oso Cloud MCP Server
About
Understand, develop, and debug authorization policies in Oso Cloud.
Details
- Author
- Unknown
- Categories
- Developer Tools, Knowledge Base, Other
Jump to
- Get your authorization policy— Retrieve the current policy to review or diagram its rules usingget_policy.
- Check a specific permission— Ask whether an actor can perform an action on a resource withauthorize.
- Inspect all facts— List every fact stored in your Oso Cloud environment withget_facts.
- Query facts by pattern— Find facts matching a particular actor, resource, or relation using fact query tools.
- Run policy tests— Execute your existing test suite to verify policy behavior withrun_tests.
- Modify local dev data— Update policy, add facts, delete facts, or clear all data on a local dev server.
Integrate your local LLM setup with Oso Cloud APIs via our MCP server.
- develop a better understanding of your policy
- use natural language to ask authorization-related questions
- debug why an authorization decision does not match what you expect
This guide assumes you have already installed and set up theCLI.
Don't have the CLI installed or don't want to manually add the configuration? No worries - download the following DXT file and double-click to automatically install the Oso MCP Server intoClaude Desktopor other AI clients that acceptDXTs.
curl -O https://d2nl1ljmg8n1q8.cloudfront.net/latest/oso-cloud-mcp.dxt
curl -sL https://d2nl1ljmg8n1q8.cloudfront.net/latest/oso-cloud-mcp.dxt.sha256 | shasum -a 256 -c
curl -sL https://d2nl1ljmg8n1q8.cloudfront.net/latest/oso-cloud-mcp.dxt.sha256 | sha256sum -c
curl -O https://d2nl1ljmg8n1q8.cloudfront.net/0.33.2/oso-cloud-mcp.dxt
Note: There are no DXT versions<0.33.0
The following installation methods assume you have already installed and set up theCLI(version>=0.33.0).
In your LLM client of choice, add the following to your MCP config file to run it against alocal dev server:
{ "mcpServers": { "oso": { "command": "oso-cloud", "args": ["experimental", "mcp"], "env": { "OSO_URL": "http://localhost:8080", "OSO_AUTH": "e_0123456789_12345_osotesttoken01xiIn" } } } }
- You may optionally omit theOSO_URLenvironment variable or set it tohttps://cloud.osohq.comif you want to run it against a live production server.
- The providedOSO_AUTHtoken is for the local dev server. You can obtain your live serverOSO_AUTHtoken from theOso Cloud UI.
Here are guides for some common clients:
- Claude Desktop
- Cursor
- VS Code Copilot
- Kiro
This server is primarily intended for use with dev servers to aid in development. Please use extra caution when using against a live environment.
Once you have your MCP server up and running, you can ask your LLM any authorization related questions and watch it use the tools available. Currently, we expose read tools to:
- Get your policy
- Get all facts
- Run anauthorizequery
- Query your facts with pattern matching
- Run policy tests
We also expose the following write tools, restricted for use only with local dev servers:
- Update your policy
- Add facts
- Delete facts
- Clear all data
Try sending any of the following messages:
- Draw a mermaid diagram of my authorization policy
- What permissions does<actor>have on<resource>?
- e.g. "What permissions does Alice have on Project XYZ?"
We are actively iterating on developer experience and would appreciate all feedback on the Oso MCP Server and the broader development experience with Oso Cloud. Please do not hesitate toreach out on Slack!
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Extentos is a multi-vendor development platform for adding smart-glasses capabilities to existing iOS and Android apps. The simplest analogy is Stripe for smart glasses
An MCP server tailored for React Native–first development using Gluestack UI
Create and read feature flags, review experiments, generate flag types, search docs, and interact with GrowthBook's feature flagging and experimentation platform.
Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control.
Up-to-date documentation for your coding agent. Covers 1000s of public repos and sites. Built by ref.tools
Points agents to the canonical Agentry install docs for errors, product analytics, and deploy attribution.
Gives coding agents deterministic, read-only documentation handoffs with edit boundaries, ownership, and required checks before repository changes.
Deterministic JSON checks with signed evidence and x402-paid execution
Search Apple's Developer Documentation with smart search and wildcard support.
Tamper-evident action logging for AI agents: hash-chained ledger_append/ledger_verify MCP tools over one JSONL file, zero dependencies — proves the record wasn't altered in place (limits stated honestly in the docs).
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
