Open Policy Agent (OPA) is an open source, general-purpose policy engine.
-
Updated
Nov 11, 2025 - Go
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
What is OPA
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Open Policy Agent WebAssembly NPM module (opa-wasm)
Python client for Open Policy Agent
Open Policy Agent (OPA) plug-in for Kafka authorization
Open Policy Agent (OPA) Plugins for Backstage
Call Open Policy Agent (OPA) policies in WASM (Web Assembly) from .NET Core
Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS
Open Policy Agent for Spring Security
Experimental AWS ApiGateway Authorizer Go Lambda with embedded Open Policy Agent
Sphinx extension that automatically documents Open Policy Agent Rego policies
Pre-commit git hooks for Open Policy Agent (OPA) and Rego development
This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
Micronaut / OPA (Open Policy Agent) demo
A set of policies for Open Policy Agent to validate OpenAPI definitions.
Zed extension for the Rego policy language from Open Policy Agent (OPA)
Jarl is an Open Policy Agent (OPA) evaluator for the JVM and Javascript, written in Clojure(Script)
Rest API of Role-based Access Control using Open Policy Agent
Plugin adding various tasks to help out integrating Open Policy Agent (OPA) in Gradle builds.