OPC UA MCP Server

Was du damit machen kannst

Für diesen Server haben wir noch keine Zusammenfassung in einfacher Sprache geschrieben. Unten stehen die Fakten, die wir aus der Registry gelesen haben.

• Verbindung: Läuft auf deinem Computer
• Transport: stdio
• Kategorie: Sonstiges
• Das musst du eintragen: OPCUA_SERVER_URL, OPCUA_CLIENT_KEY, OPCUA_PASSWORD, OPCUA_USER_KEY, OPCUA_PROFILE, OPCUA_AUDIT_CHAIN_KEY_FILE

Installation

Wähle die KI-App, die du nutzt, und kopiere die Einstellungen.

Du brauchst

• npmNode.js installiert (für den Befehl npx)

Welche App nutzt du?

{
  "mcpServers": {
    "opcua": {
      "command": "npx",
      "args": [
        "-y",
        "opcua-mcp-server"
      ],
      "env": {
        "OPCUA_SERVER_URL": "your-value",
        "OPCUA_PYTHON_BACKEND": "your-value",
        "OPCUA_SECURITY_POLICY": "your-value",
        "OPCUA_SECURITY_MODE": "your-value",
        "OPCUA_CLIENT_CERT": "your-value",
        "OPCUA_CLIENT_KEY": "your-value",
        "OPCUA_APPLICATION_URI": "your-value",
        "OPCUA_SERVER_CERT": "your-value",
        "OPCUA_SERVER_TRUST_STORE": "your-value",
        "OPCUA_SERVER_APPLICATION_URI": "your-value",
        "OPCUA_USERNAME": "your-value",
        "OPCUA_PASSWORD": "your-value",
        "OPCUA_USER_CERT": "your-value",
        "OPCUA_USER_KEY": "your-value",
        "OPCUA_PROFILE": "your-value",
        "OPCUA_POLICY_FILE": "your-value",
        "OPCUA_ALLOWED_TOOLS": "your-value",
        "OPCUA_ALLOWED_WRITE_NODES": "your-value",
        "OPCUA_ALLOWED_METHODS": "your-value",
        "OPCUA_ALLOW_ACKNOWLEDGE_ALARMS": "your-value",
        "OPCUA_ALLOW_INSECURE_CONTROL": "your-value",
        "OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL": "your-value",
        "OPCUA_ALLOW_OUT_OF_RANGE_WRITES": "your-value",
        "OPCUA_AUDIT_FILE": "your-value",
        "OPCUA_AUDIT_FSYNC": "your-value",
        "OPCUA_AUDIT_CHAIN": "your-value",
        "OPCUA_AUDIT_CHAIN_KEY_FILE": "your-value",
        "OPCUA_OPERATOR_ID": "your-value",
        "OPCUA_RECONNECT_INITIAL_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_RETRY": "your-value",
        "OPCUA_SESSION_TIMEOUT_MS": "your-value"
      }
    }
  }
}

claude mcp add opcua --env OPCUA_SERVER_URL=your-value --env OPCUA_PYTHON_BACKEND=your-value --env OPCUA_SECURITY_POLICY=your-value --env OPCUA_SECURITY_MODE=your-value --env OPCUA_CLIENT_CERT=your-value --env OPCUA_CLIENT_KEY=your-value --env OPCUA_APPLICATION_URI=your-value --env OPCUA_SERVER_CERT=your-value --env OPCUA_SERVER_TRUST_STORE=your-value --env OPCUA_SERVER_APPLICATION_URI=your-value --env OPCUA_USERNAME=your-value --env OPCUA_PASSWORD=your-value --env OPCUA_USER_CERT=your-value --env OPCUA_USER_KEY=your-value --env OPCUA_PROFILE=your-value --env OPCUA_POLICY_FILE=your-value --env OPCUA_ALLOWED_TOOLS=your-value --env OPCUA_ALLOWED_WRITE_NODES=your-value --env OPCUA_ALLOWED_METHODS=your-value --env OPCUA_ALLOW_ACKNOWLEDGE_ALARMS=your-value --env OPCUA_ALLOW_INSECURE_CONTROL=your-value --env OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL=your-value --env OPCUA_ALLOW_OUT_OF_RANGE_WRITES=your-value --env OPCUA_AUDIT_FILE=your-value --env OPCUA_AUDIT_FSYNC=your-value --env OPCUA_AUDIT_CHAIN=your-value --env OPCUA_AUDIT_CHAIN_KEY_FILE=your-value --env OPCUA_OPERATOR_ID=your-value --env OPCUA_RECONNECT_INITIAL_DELAY_MS=your-value --env OPCUA_RECONNECT_MAX_DELAY_MS=your-value --env OPCUA_RECONNECT_MAX_RETRY=your-value --env OPCUA_SESSION_TIMEOUT_MS=your-value -- npx -y opcua-mcp-server

{
  "mcpServers": {
    "opcua": {
      "command": "npx",
      "args": [
        "-y",
        "opcua-mcp-server"
      ],
      "env": {
        "OPCUA_SERVER_URL": "your-value",
        "OPCUA_PYTHON_BACKEND": "your-value",
        "OPCUA_SECURITY_POLICY": "your-value",
        "OPCUA_SECURITY_MODE": "your-value",
        "OPCUA_CLIENT_CERT": "your-value",
        "OPCUA_CLIENT_KEY": "your-value",
        "OPCUA_APPLICATION_URI": "your-value",
        "OPCUA_SERVER_CERT": "your-value",
        "OPCUA_SERVER_TRUST_STORE": "your-value",
        "OPCUA_SERVER_APPLICATION_URI": "your-value",
        "OPCUA_USERNAME": "your-value",
        "OPCUA_PASSWORD": "your-value",
        "OPCUA_USER_CERT": "your-value",
        "OPCUA_USER_KEY": "your-value",
        "OPCUA_PROFILE": "your-value",
        "OPCUA_POLICY_FILE": "your-value",
        "OPCUA_ALLOWED_TOOLS": "your-value",
        "OPCUA_ALLOWED_WRITE_NODES": "your-value",
        "OPCUA_ALLOWED_METHODS": "your-value",
        "OPCUA_ALLOW_ACKNOWLEDGE_ALARMS": "your-value",
        "OPCUA_ALLOW_INSECURE_CONTROL": "your-value",
        "OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL": "your-value",
        "OPCUA_ALLOW_OUT_OF_RANGE_WRITES": "your-value",
        "OPCUA_AUDIT_FILE": "your-value",
        "OPCUA_AUDIT_FSYNC": "your-value",
        "OPCUA_AUDIT_CHAIN": "your-value",
        "OPCUA_AUDIT_CHAIN_KEY_FILE": "your-value",
        "OPCUA_OPERATOR_ID": "your-value",
        "OPCUA_RECONNECT_INITIAL_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_RETRY": "your-value",
        "OPCUA_SESSION_TIMEOUT_MS": "your-value"
      }
    }
  }
}

{
  "servers": {
    "opcua": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "opcua-mcp-server"
      ],
      "env": {
        "OPCUA_SERVER_URL": "your-value",
        "OPCUA_PYTHON_BACKEND": "your-value",
        "OPCUA_SECURITY_POLICY": "your-value",
        "OPCUA_SECURITY_MODE": "your-value",
        "OPCUA_CLIENT_CERT": "your-value",
        "OPCUA_CLIENT_KEY": "your-value",
        "OPCUA_APPLICATION_URI": "your-value",
        "OPCUA_SERVER_CERT": "your-value",
        "OPCUA_SERVER_TRUST_STORE": "your-value",
        "OPCUA_SERVER_APPLICATION_URI": "your-value",
        "OPCUA_USERNAME": "your-value",
        "OPCUA_PASSWORD": "your-value",
        "OPCUA_USER_CERT": "your-value",
        "OPCUA_USER_KEY": "your-value",
        "OPCUA_PROFILE": "your-value",
        "OPCUA_POLICY_FILE": "your-value",
        "OPCUA_ALLOWED_TOOLS": "your-value",
        "OPCUA_ALLOWED_WRITE_NODES": "your-value",
        "OPCUA_ALLOWED_METHODS": "your-value",
        "OPCUA_ALLOW_ACKNOWLEDGE_ALARMS": "your-value",
        "OPCUA_ALLOW_INSECURE_CONTROL": "your-value",
        "OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL": "your-value",
        "OPCUA_ALLOW_OUT_OF_RANGE_WRITES": "your-value",
        "OPCUA_AUDIT_FILE": "your-value",
        "OPCUA_AUDIT_FSYNC": "your-value",
        "OPCUA_AUDIT_CHAIN": "your-value",
        "OPCUA_AUDIT_CHAIN_KEY_FILE": "your-value",
        "OPCUA_OPERATOR_ID": "your-value",
        "OPCUA_RECONNECT_INITIAL_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_DELAY_MS": "your-value",
        "OPCUA_RECONNECT_MAX_RETRY": "your-value",
        "OPCUA_SESSION_TIMEOUT_MS": "your-value"
      }
    }
  }
}

Deine Auswahl bleibt in einem Cookie auf diesem Gerät; kein Konto nötig.

Werte, die du selbst einträgst

• OPCUA_SERVER_URL erforderlich env
  URL of the OPC UA server to connect to, including any path the server expects. Read once at startup: one process serves one endpoint. Verify who answers with an exact server certificate pin or a conf…
• OPCUA_PYTHON_BACKEND env
  Select the Python client implementation. The maintained asyncua client is the default; legacy provides the one-release rollback path for uncovered vendor incompatibilities. This setting affects the P…
• OPCUA_SECURITY_POLICY env
  Encryption suite to negotiate for the secure channel. Anything other than None needs a client certificate and key. The two AES suites are Node-only: the Python runtime refuses them at startup rather…
• OPCUA_SECURITY_MODE env
  Message security mode for the secure channel. Sign authenticates messages without encrypting them. A policy with mode None, or a mode without a policy, stops the server at startup; leaving it blank n…
• OPCUA_CLIENT_CERT env
  Path to the certificate (PEM or DER) this client presents as its application identity. Required by any security policy other than None. A path that does not exist stops the server at startup.
• OPCUA_CLIENT_KEY geheim env
  Path to the private key matching the client certificate. A path, never key material. Whoever can read the file can impersonate this client: keep it readable only by the account running the server. A…
• OPCUA_APPLICATION_URI env
  Application URI announced to the server. Set it only for a certificate that carries no URI of its own. A configured URI that conflicts with the certificate is refused before connecting. Leave blank f…
• OPCUA_SERVER_CERT env
  Path to the OPC UA server's own certificate (PEM or DER), pinned: a server presenting any other certificate cannot complete the handshake. Control tools (writes, method calls, alarm actions) require…
• OPCUA_SERVER_TRUST_STORE env
  Directory with trusted/certs root CAs, issuers/certs intermediate CAs, and trusted/crl plus issuers/crl signed current revocation lists. Authenticate the OPC UA peer by its validated chain and expect…
• OPCUA_SERVER_APPLICATION_URI env
  ApplicationUri of the intended OPC UA server. Must match the peer certificate URI SAN and advertised application identity. Required with OPCUA_SERVER_TRUST_STORE.
• OPCUA_USERNAME env
  OPC UA username. The session is anonymous when unset. Cannot be combined with a user certificate. Requires a password; either one alone stops the server at startup.
• OPCUA_PASSWORD geheim env
  Password for the username. Without a security policy it crosses the network in clear text. Supply it through the client's secret storage, never on a command line.
• OPCUA_USER_CERT env
  Path to the certificate identifying the user, for X.509 user authentication: a different key pair from the client certificate, which secures the channel. Requires the user key and a security policy o…
• OPCUA_USER_KEY geheim env
  Path to the private key for the user certificate. It signs the server's challenge and is never sent. Whoever can read the file can log in as this user: keep it readable only by the account running th…
• OPCUA_PROFILE erforderlich env
  Which tools are offered. observe reads, browses, reads history and monitors; operator adds explicitly allowlisted writes, method calls and alarm actions; full exposes every tool and is meant only for…
• OPCUA_POLICY_FILE env
  Path to a version-1 JSON policy file, the only place per-node value bounds, writable_subtrees, preconditions, the alarm scope and deny_read can be set. Every policy variable that is set overrides wha…
• OPCUA_ALLOWED_TOOLS env
  Comma-separated tool allowlist. It can only narrow the selected profile, never widen it. An unknown tool name stops the server at startup.
• OPCUA_ALLOWED_WRITE_NODES env
  Comma-separated exact node IDs the operator profile may write, as ns=2;i=5 or, stable across a server restart, nsu= ;i=5 or a browse path from the Root folder such as /Objects/Line1/Setpoint. Setting…
• OPCUA_ALLOWED_METHODS env
  Comma-separated object_node_id|method_node_id pairs the operator profile may call. Either half may be a browse path from the Root folder. Empty fails closed: operator can call nothing. An entry witho…
• OPCUA_ALLOW_ACKNOWLEDGE_ALARMS env
  Let the operator profile act on alarms: acknowledge_alarm and every act_on_alarm action.
• OPCUA_ALLOW_INSECURE_CONTROL env
  Permit control tools on an OPC UA channel with no security policy (None). Does not cover a secured channel to an unverified server; that is OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL. Fail-open override:…
• OPCUA_ALLOW_UNVERIFIED_SERVER_CONTROL env
  Permit control tools on a secured OPC UA channel whose server is not authenticated: neither pinned with OPCUA_SERVER_CERT nor validated by OPCUA_SERVER_TRUST_STORE. Does not cover a channel with no s…
• OPCUA_ALLOW_OUT_OF_RANGE_WRITES env
  Allow a write outside the EURange the OPC UA server itself published for the node. A published InstrumentRange still applies. Fail-open override: it discards the only value bound a deployment with no…
• OPCUA_AUDIT_FILE env
  Path to an append-only file for the control audit trail, one JSON object per line, written beside stderr. Created owner-only (0600) if it does not exist; reopened when rotated away. A file that canno…
• OPCUA_AUDIT_FSYNC env
  When an audit-file record counts as written. always fsyncs each record before the control call proceeds, so it survives a power loss; none leaves it to the operating system, so it survives only a cra…
• OPCUA_AUDIT_CHAIN env
  Adds seq, prev_hash and hash to every audit record so edits, deletions and reordering can be detected with --verify-audit. sha256 catches accidental or naive edits; hmac-sha256 also resists anyone wi…
• OPCUA_AUDIT_CHAIN_KEY_FILE geheim env
  Path to the HMAC key for the hmac-sha256 audit chain: at least 32 bytes, for example from openssl rand -hex 32. Surrounding whitespace is ignored. Whoever can read the key can forge the chain: a key…
• OPCUA_OPERATOR_ID env
  Label stamped on every audit record as operator_label, so a shipped log says which deployment a control call came from. Configured, never verified: it is not an identity, and mcp_principal stays null.
• OPCUA_RECONNECT_INITIAL_DELAY_MS env
  Wait before the first attempt to repair a dropped or refused connection, in milliseconds. It doubles with each further attempt.
• OPCUA_RECONNECT_MAX_DELAY_MS env
  Ceiling for the doubling retry delay, in milliseconds.
• OPCUA_RECONNECT_MAX_RETRY env
  Retries after the first attempt, per connection round, before a tool call gives up: a whole number from -1 to 1000. 0 never retries; -1 never stops trying, in bounded rounds of four retries so no sin…
• OPCUA_SESSION_TIMEOUT_MS env
  Session lifetime asked of the OPC UA server, in milliseconds. It also sets the keep-alive period, so it decides how quickly an idle connection notices the server has gone.

Diese Einstellungen werden aus dem Registry-Eintrag des Entwicklers erzeugt. Wenn in der README etwas anderes steht, folge der README.

Was er kann

Läuft auf deinem Computer; die Tool-Liste erscheint nach der Installation in deiner KI-App.

Basischecksi

Wir prüfen Informationen, die jeder sehen kann; den Code haben wir nicht gelesen. Checks, die nicht zutreffen, werden nicht mitgezählt. · Geprüft am 7. Nov. 2026

• ! Vorsicht

  Entwickler passt zum Repo

  Der Herausgeber (midhunxavier) ist nicht der Repo-Inhaber (IndustriAgents); vielleicht hat jemand anderes ihn eingetragen

• … Noch nicht geprüft

  Wird noch gepflegt

  Dieses Repo haben wir noch nicht von GitHub gelesen

• … Noch nicht geprüft

  Hat eine Lizenz

  Dieses Repo haben wir noch nicht von GitHub gelesen

• – Nicht zutreffend

  Endpunkt antwortet

  Dieser Server läuft auf deinem Computer; es gibt keinen Endpunkt im Internet

• – Nicht zutreffend

  Anmeldung mit OAuth

  Läuft auf deinem Computer und nutzt stattdessen lokale Einstellungen

• … Noch nicht geprüft

  Keine versteckten Anweisungen in Tool-Beschreibungen

  Läuft auf deinem Computer; Tool-Listen können wir nur von Endpunkten im Internet lesen

Im Vergleich mit anderen in Sonstigesi

• Mehr Sterne als 0 % der anderen 32684 Server in dieser Kategorie
• Neuer in der Registry veröffentlicht als 94 % der anderen 32684 Server in dieser Kategorie
• Basischecks gleich gut wie oder besser als bei 29 % der anderen 32684 Server in dieser Kategorie

Verglichen mit allen aktiven Servern dieser Kategorie in der Registry. Sterne zählen nur, wenn dem Herausgeber das Repo gehört.

Alternativen

Server derselben Kategorie von anderen Entwicklern, sortiert nach Sternen.

So liest du eine Karte:★ GitHub-SterneiDrei Säulen: Bewertungen · Checks · NutzungiAktualisiert = neueste Version in der Registry veröffentlichti

README vom Entwickler

flowchart LR

# Node

git clone https://github.com/IndustriAgents/OPCUA-MCP.git

npm install -g opcua-mcp-server      # or: uv tool install opcua-mcp-server

claude mcp add opcua -e OPCUA_SERVER_URL=opc.tcp://localhost:4840/freeopcua/server/ -- npx -y opcua-mcp-server

codex mcp add opcua --env OPCUA_SERVER_URL=opc.tcp://localhost:4840/freeopcua/server/ -- npx -y opcua-mcp-server

[mcp_servers.opcua]

{

{

{