OpenFGA
Open-source authorization server for fine-grained, relationship-based access control, configured with a modeling language and queried through APIs.
OpenFGA decides whether a user may act on an object. An application writes an authorization model in a modeling language, stores relationship tuples and asks the server for checks. The server runs an HTTP API and a gRPC API, and it keeps its data in PostgreSQL, MySQL or SQLite. The project publishes SDKs for several languages, so an application calls the server through a client library.
The project names itself an incubating project of the Cloud Native Computing Foundation, and its footer names The Linux Foundation.
Worth knowing
The Playground, a web interface for trying out models, is meant for local development only.
Identity
Rendering and deploy
Releases
Adoption
Sources
- 2026-11-03: links, Maintainer, Categories, License model
openfga.dev/ - 2026-11-03: links, Written in, License, GitHub stars, Contributors
github.com/openfga/openfga - 2026-11-03: links
openfga.dev/docs - 2026-11-03: First release, Current major version, Last release
github.com/openfga/openfga/releases - 2026-11-03: Runtime, Install with, Admin interface
github.com/openfga/openfga/blob/main/README.md - 2026-11-03: Install with
openfga.dev/docs/getting-started/setup-openfga/kubernetes - 2026-11-03: Runs as
openfga.dev/docs/getting-started/setup-openfga/docker - 2026-11-03: Databases
openfga.dev/docs/getting-started/setup-openfga/configuration