OpenFGA (Fine-Grained Auth) MCP Server with 16 Tools for Claude, Cursor, and AI Agents
GDPR Free for SubscribersManage fine-grained authorization with OpenFGA — create stores, define authorization models, and manage relationship tuples directly from your AI agent. Vinkius routes your AI agents directly to OpenFGA (Fine-Grained Auth) through a governed connection. 16 tools ready to use with Claude, ChatGPT, Cursor, or any AI agent — no hosting, no setup, connect in 30 seconds.
Ask AI about this server
Compatible with every major AI agent and IDE
Gemini* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
What is the OpenFGA MCP Server?
The OpenFGA MCP Server routes AI agents like Claude, ChatGPT, and Cursor directly to OpenFGA via 16 tools. Manage fine-grained authorization with OpenFGA — create stores, define authorization models, and manage relationship tuples directly from your AI agent. Powered by Vinkius — your credentials stay on your side of the connection, every request is auditable. Connect in under 2 minutes.
Built-in capabilities (16)
Tools for your AI Agents to operate OpenFGA
Ask your AI agent "List all my OpenFGA stores." and get the answer without opening a single dashboard. With 16 tools connected to real OpenFGA data, your agents reason over live information, cross-reference it with other MCP servers, and deliver insights you would spend hours assembling manually.
Works with Claude, ChatGPT, Cursor, and any MCP-compatible client. Powered by Vinkius — your credentials never touch the AI model, every request is auditable. Connect in under two minutes.
Why teams choose Vinkius
One subscription gives you the infrastructure to connect your AI agents to thousands of MCP servers — and deploy your own to the Vinkius Edge. Your credentials stay yours. Your data flows directly between your agent and the API. DLP blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade routing and governance, zero maintenance.
Build your own MCP Server with our secure development framework →The OpenFGA (Fine-Grained Auth) App Connector works with every AI agent you already use
…and any MCP-compatible client
Use all 16 OpenFGA (Fine-Grained Auth) tools with your AI agents right now
Vinkius routes your AI agents to OpenFGA (Fine-Grained Auth) through a governed proxy. Beyond a simple connection, you get full visibility into every action your agents perform, with enterprise-grade security and up to 60% savings on AI costs.
Batch check relations on OpenFGA (Fine-Grained Auth)
Perform multiple checks in one request
Check relation on OpenFGA (Fine-Grained Auth)
Check if a user has a relation to an object
Create store on OpenFGA (Fine-Grained Auth)
Create a new OpenFGA store
Delete store on OpenFGA (Fine-Grained Auth)
Delete an OpenFGA store
Expand relation on OpenFGA (Fine-Grained Auth)
Expand a relation into a tree
Get authorization model on OpenFGA (Fine-Grained Auth)
Get a specific authorization model
Get store on OpenFGA (Fine-Grained Auth)
Get OpenFGA store details
Health check on OpenFGA (Fine-Grained Auth)
Check OpenFGA server health
List authorization models on OpenFGA (Fine-Grained Auth)
List authorization models
List objects on OpenFGA (Fine-Grained Auth)
List all objects a user can access
List stores on OpenFGA (Fine-Grained Auth)
List all OpenFGA stores
List users on OpenFGA (Fine-Grained Auth)
List all users who have a relation to an object
Read changes on OpenFGA (Fine-Grained Auth)
Read changes to relationship tuples
Read tuples on OpenFGA (Fine-Grained Auth)
Query stored relationship tuples
Write authorization model on OpenFGA (Fine-Grained Auth)
Write a new authorization model
Write tuples on OpenFGA (Fine-Grained Auth)
Add or delete relationship tuples
What the OpenFGA (Fine-Grained Auth) MCP Server unlocks
Connect your OpenFGA instance to any AI agent to manage Relationship-Based Access Control (ReBAC) through natural conversation. OpenFGA is an open-source fine-grained authorization solution inspired by Google's Zanzibar.
What you can do
- Store Management — Create, list, and delete isolated stores to manage authorization data for different environments or applications.
- Authorization Modeling — Define and retrieve complex authorization models using types and relations to represent your system's permissions.
- Tuple Management — Write, read, and track changes to relationship tuples that define which users have which relations to specific objects.
- Relationship Checks — Instantly evaluate whether a user has a specific relation to an object (e.g., 'can user:anne view document:1?').
- Health Monitoring — Quickly check the status of your OpenFGA instance to ensure high availability.
How it works
1. Subscribe to this server
2. Enter your OpenFGA API URL and API Token (if applicable)
3. Start managing your authorization logic from Claude, Cursor, or any MCP-compatible client
Who is this for?
- Security Engineers — Audit relationship tuples and verify authorization models without manual API calls.
- Backend Developers — Quickly test and iterate on authorization models during development directly from the IDE.
- DevOps & SREs — Monitor store health and manage authorization environments across different clusters.
Frequently asked questions about the OpenFGA (Fine-Grained Auth) MCP Server
How can I check if a specific user has access to a resource?
You can use the check_relation tool. Provide the store ID and the relationship details (user, relation, and object) to get an immediate boolean response on whether the access is permitted.
Can I see the history of changes made to relationship tuples?
Yes, the read_changes tool allows you to retrieve the changelog of relationship tuples for a specific store, optionally filtered by object type.
How do I define a new authorization model?
Use the write_authorization_model tool. You will need to provide the store ID, the schema version, and a JSON array of type definitions that describe your relations.
More in this category
SketricGen
18 toolsConnect your AI agents to SketricGen to run multi-agent workflows, manage knowledge bases, debug traces, and interact with contacts.
Katalon TestOps (AI Test Management)
10 toolsManage test orchestration via Katalon TestOps — rerun test runs, monitor execution results, and audit software releases.
Bunny.net
10 toolsManage Bunny.net edge infrastructure — control your CDN Pull Zones, purge caching rules, and map Storage natively from an AI agent.
Resend Alternative
14 toolsSend emails and manage domains via Resend — send transactional emails, track deliveries, manage domains and API keys from any AI agent.
You might also like
Medium
10 toolsPublish and manage content on Medium — create posts and manage publications directly from any AI agent.
Agora
10 toolsOrchestrate Agora real-time engagement — manage channels, monitor usage, and handle cloud recording directly from any AI agent.
Cloudflare Tunnel
17 toolsManage Cloudflare Tunnels directly from your AI agent — list, create, and configure secure Zero Trust connections to your private infrastructure.
Bloomerang
10 toolsManage donors and donations via Bloomerang — list constituents, transactions, and campaigns directly from any AI agent.
We built the connector to OpenFGA (Fine-Grained Auth). Now put your agents to work. Fully governed.
Vinkius is the AI Gateway with managed hosting. Stop building connectors. Every connection runs inside eight layers of security.
Hosted, sandboxed, and live on AWS. You don't provision anything. You don't maintain anything. You connect.
Every tool call, every token, every response. Logged and auditable. Data flows direct from OpenFGA (Fine-Grained Auth) to your agent. Nothing is stored on our side. Ever.
Eight governance layers on every request. Sensitive data redacted before it reaches the model. Kill switch if anything goes sideways. Always on.