Connect OpenCode to Agent Authority

When you finish, every MCP tool call OpenCode makes is checked against your policies and recorded in the audit log. OpenCode, the open-source coding agent, reaches your approved tools through one SecureAuth Agent Authority gateway URL, and each developer signs in as themselves.

SetupCopy Anchor Link

1. Add the MCP server. Add the following to opencode.json in your project (or ~/.config/opencode/opencode.json for global):

   Copy Text

   {
     "mcp": {
       "secureauth": {
         "type": "remote",
         "url": "https://your-gateway-url/gateway/mcp"
       }
     }
   }

2. Authenticate.

   Copy Text

   opencode mcp auth secureauth

3. Start OpenCode.

   Copy Text

   opencode

   The agent is auto-registered on first connect.

Connecting to just one MCP? To stay under an agent's tool limit, point the URL at a single MCP — /gateway/mcp/{slug} instead of /gateway/mcp. Grab the exact URL from the resource's detail page; see Scope a connection.

Next stepsCopy Anchor Link

• Create a policy – control which tools OpenCode can call.
• Monitor activity – watch its tool calls appear in the dashboard and audit log.
• Audit log – filter and search every tool call OpenCode makes.