Authorization GitHub Repositories (2026) · Open Source Tools

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

Open-source gateway that puts authorization in front of every action your AI agents, workflows and pipelines take, before it commits: payments, trades, price changes, deployments and API calls run once on a single-use grant, wait for a person, or are refused, as Decionis decides, with chained evidence. Homebrew, Linux, Docker, Helm.

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

open-source ontology platform for operational digital twins

ThunderID, an LF Decentralized Trust project, is a high-performance, open-source identity stack designed for developers to secure and manage access for humans, AI agents, and machines through fully composable identity flows.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

CasOS: a cloud operating system built on Kubernetes, Live Demo: https://demo.casos.net

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

Access, a centralized portal for employees to transparently discover, request, and manage their access for all internal systems needed to do their jobs

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

🗝️🐝✨ Rust workspace for Keyhive and related crates

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

GrantForge (formerly AuthX) is an open-source (MIT) unified permission platform. It answers two questions in one place: who can do what (functional authorization) and who can see which data (data and field authorization).

Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

ZITADEL - Identity infrastructure, simplified for you.

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.