Go100Exceptionalhealth index

openfga/openfgaA high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Go★ 5,662Aug 27, 2026
Go98Exceptionalhealth index

authzed/spicedbOpen Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Go★ 6,993Aug 28, 2026
Go · crates.io · npm97Exceptionalhealth index
Go · TypeScript★ 20.9KSep 16, 2026
Go · npm96Exceptionalhealth index

Permify/permifyAn open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Go★ 5,967Oct 21, 2026
npm96Exceptionalhealth index

logto-io/logto🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
TypeScript★ 14.6K↓ 29.3K/moSep 19, 2026
Go · Maven · npm95Exceptionalhealth index

AthenZ/athenzOpen source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
Java · JavaScript★ 1,007Sep 13, 2026
npm · Maven94Exceptionalhealth index

iflytek/skillhubSelf-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
Java · TypeScript★ 4,901↓ 3,673/moAug 28, 2026
Maven93Exceptionalhealth index

erupts/eruptwhy write many code when few annotation do trick — annotation-driven Java framework, one class become full admin, now with built-in AI harness too
Java★ 2,772Sep 9, 2026
Go · npm93Exceptionalhealth index

raystack/frontierFrontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)
Go · TypeScript★ 343Sep 11, 2026
npm93Exceptionalhealth index

zenstackhq/zenstackModern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
TypeScript★ 2,942↓ 1.4M/moSep 13, 2026
Go92Excellenthealth index
Go★ 1,364Oct 19, 2026
Packagist90Excellenthealth index
PHP★ 13K↓ 8.1M/moOct 20, 2026
npm89Excellenthealth index

stalniy/caslCASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
TypeScript · JavaScript★ 7,077↓ 9.1M/moSep 15, 2026
npm88Excellenthealth index

authup/authupSelf-hosted authentication & authorization system (IAM: OAuth2 & OpenID Connect provider with realms, RBAC & ABAC policies, MFA (TOTP, passkeys, email OTP), identity federation (OIDC, LDAP) and session management.
TypeScript · Vue★ 40↓ 13.4K/moSep 13, 2026
PyPI · npm88Excellenthealth index
Python · HTML★ 4↓ 2,121/moOct 11, 2026
npm88Excellenthealth index

objectstack-ai/objectuiThe schema-driven UI engine for the AI era: agents write compact JSON; Object UI renders production React — grids, kanban, dashboards, Gantt, visual designers.
TypeScript★ 27↓ 7,529/moSep 9, 2026
npm87Excellenthealth index
TypeScript★ 83↓ 765.5K/moSep 11, 2026
PyPI87Excellenthealth index

sattyamjjain/agent-airlockA type-checker and contract layer for AI agent tool calls, deny-by-default, in-process, Pydantic-only. Strict argument validation, ghost-argument stripping, and self-healing retries for MCP servers and agent frameworks.
Python★ 15↓ 3,569/moSep 18, 2026
Go86Excellenthealth index

apache/casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Go★ 20.4KSep 23, 2026
npm86Excellenthealth index
JavaScript★ 3↓ 3,596/moOct 20, 2026
Go · npm · PyPI86Excellenthealth index
Python · Go · TypeScript★ 262Oct 20, 2026
PyPI84Excellenthealth index

10xHub/agentflow-cliFastAPI server and CLI for Agentflow. Auto-generates a REST API from your agent graph, with JWT/custom auth, RBAC authorization, rate limiting, dual-layer checkpointing, and Docker/Kubernetes-ready builds.
Python★ 5↓ 578/moOct 4, 2026
crates.io · PyPI84Excellenthealth index

lakekeeper/lakekeeperApache Iceberg REST Catalog in Rust — access control, credential vending and audit for every engine and AI agent. Apache 2.0.
Rust★ 1,453Sep 14, 2026
Packagist84Excellenthealth index
PHP★ 35↓ 89.7K/moSep 13, 2026
Packagist84Excellenthealth index
PHP★ 8↓ 4,469/moSep 13, 2026
PyPI83Excellenthealth index

apache/casbin-pycasbinAn authorization library that supports access control models like ACL, RBAC, ABAC in Python
Python★ 1,767Sep 17, 2026
Go81Excellenthealth index

pthm/melangeOpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.
Go★ 102Oct 20, 2026
crates.io81Excellenthealth index

systempromptio/systemprompt-coreAI governance infrastructure for agentic systems. Rust library behind systemprompt.io — MCP, A2A, OAuth2, audit trails, compile-time extensions. Evaluate with systemprompt-template.
Rust★ 8↓ 1,035/moSep 18, 2026
Go · npm81Excellenthealth index

voidmind-io/voidllmPrivacy-first LLM proxy and AI gateway - load balancing, multi-provider routing, API key management, usage tracking, rate limiting. Self-hosted. Zero knowledge of your prompts.
Go · TypeScript★ 134Sep 16, 2026
Go80Excellenthealth index

0hardik1/kubesplainingKubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.
Go★ 96Sep 20, 2026