rbac

erupts/erupt

+519

Code as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes — UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.

schemagate

+74

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

skillhub

+58

Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.

logto-io/logto

+58

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

openfga

+34

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

teleport

+30

The easiest, and most secure way to access and protect all of your infrastructure.

spicedb

+9

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

apache/casbin

+10

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

lakekeeper

+7

Apache Iceberg REST Catalog in Rust — access control, credential vending and audit for every engine and AI agent. Apache 2.0.