Admin Access Investigation and Auditing

View Opal events and syncs to investigate access and audit changes

Install

Select a method below to install the server.

Cursor

Claude Code

Claude Desktop

VS Code

Gemini CLI

Codex CLI

Available Tools (39)

opal_get_resource Retrieves a resource. ▾

Retrieves a resource.

opal_get_resources Returns a list of resources for your organization. ▾

Returns a list of resources for your organization.

opal_get_sync_errors Returns a list of recent sync errors that have occurred since the last successful sync. ▾

Returns a list of recent sync errors that have occurred since the last successful sync.

opal_get_resource_visibility Gets the visibility of this resource. ▾

Gets the visibility of this resource.

opal_get_uar Retrieves a specific UAR. ▾

Retrieves a specific UAR.

opal_get_ua_rs Returns a list of `UAR` objects. ▾

Returns a list of `UAR` objects.

opal_get_on_call_schedules Returns a list of `OnCallSchedule` objects. ▾

Returns a list of `OnCallSchedule` objects.

opal_get_message_channels Returns a list of `MessageChannel` objects. ▾

Returns a list of `MessageChannel` objects.

opal_get_tags Returns a list of tags created by your organization. ▾

Returns a list of tags created by your organization.

opal_sessions Returns a list of `Session` objects. ▾

Returns a list of `Session` objects.

opal_get_user_tags Returns all tags applied to the user. ▾

Returns all tags applied to the user.

opal_get_users Returns a list of users for your organization. ▾

Returns a list of users for your organization.

opal_get_resource_scoped_role_permissions Returns all the scoped role permissions that apply to the given resource. Only OPAL_SCOPED_ROLE resource type supports this field. ▾

Returns all the scoped role permissions that apply to the given resource. Only OPAL_SCOPED_ROLE resource type supports this field.

opal_get_resource_tags Returns all tags applied to the resource. ▾

Returns all tags applied to the resource.

opal_get_resource_nhis Gets the list of non-human identities with access to this resource. ▾

Gets the list of non-human identities with access to this resource.

opal_get_resource_users Gets the list of users for this resource. ▾

Gets the list of users for this resource.

opal_get_nhis Returns a list of non-human identities for your organization. ▾

Returns a list of non-human identities for your organization.

opal_get_resource_reviewer_stages Gets the list reviewer stages for a resource. ▾

Gets the list reviewer stages for a resource.

opal_get_resource_reviewers Gets the list of owner IDs of the reviewers for a resource. ▾

Gets the list of owner IDs of the reviewers for a resource.

opal_get_resource_message_channels Gets the list of audit message channels attached to a resource. ▾

Gets the list of audit message channels attached to a resource.

opal_get_requests Returns a list of requests for your organization that is visible by the admin. ▾

Returns a list of requests for your organization that is visible by the admin.

opal_get_request Returns a request by ID. ▾

Returns a request by ID.

opal_get_owner_users Gets the list of users for this owner, in escalation priority order if applicable. ▾

Gets the list of users for this owner, in escalation priority order if applicable.

opal_get_owners Returns a list of `Owner` objects. ▾

Returns a list of `Owner` objects.

opal_get_idp_group_mappings Returns the configured set of available `IdpGroupMapping` objects for an Okta app. ▾

Returns the configured set of available `IdpGroupMapping` objects for an Okta app.

opal_get_group_users Gets the list of users for this group. ▾

Gets the list of users for this group.

opal_get_group_visibility Gets the visibility of this group. ▾

Gets the visibility of this group.

opal_events Returns a list of `Event` objects. ▾

Returns a list of `Event` objects.

opal_get_groups Returns a list of groups for your organization. ▾

Returns a list of groups for your organization.

opal_get_group_containing_groups Gets the list of groups that the group gives access to. ▾

Gets the list of groups that the group gives access to.

opal_get_group_on_call_schedules Gets the list of on call schedules attached to a group. ▾

Gets the list of on call schedules attached to a group.

opal_get_group_resources Gets the list of resources that the group gives access to. ▾

Gets the list of resources that the group gives access to.

opal_get_group_message_channels Gets the list of audit and reviewer message channels attached to a group. ▾

Gets the list of audit and reviewer message channels attached to a group.

opal_get_bundle_groups Returns a list of `Group` objects in a given bundle. ▾

Returns a list of `Group` objects in a given bundle.

opal_get_bundle_visibility Gets the visibility of the bundle. ▾

Gets the visibility of the bundle.

opal_get_bundle_resources Returns a list of `Resource` objects in a given bundle. ▾

Returns a list of `Resource` objects in a given bundle.

opal_get_apps Returns a list of `App` objects. ▾

Returns a list of `App` objects.

opal_get_configuration_templates Returns a list of `ConfigurationTemplate` objects. ▾

Returns a list of `ConfigurationTemplate` objects.

opal_get_bundles Returns a list of `Bundle` objects. ▾

Returns a list of `Bundle` objects.

No tools match your search.

Server URL

https://app.getgram.ai/mcp/opal-auditing

Raw Configuration

If you have a client that's not listed above, access the raw MCP configuration below. Check out the troubleshooting documentation for more help.

{
  "command": "npx",
  "args": [
    "mcp-remote@0.1.25",
    "https://app.getgram.ai/mcp/opal-auditing",
    "--header",
    "Mcp-Opal-Bearer-Auth:${MCP_OPAL_BEARER_AUTH}"
  ],
  "env": {
    "MCP_OPAL_BEARER_AUTH": "<your-value-here>"
  }
}

Instructions

Instructions

Instructions

For Teams & Enterprise

Instructions