# Ory Keto

Authorization server, written in Go, that stores relationships between subjects and objects and answers permission checks based on Google's Zanzibar model.


Source: https://findsoftware.frbit.cloud/ory-keto/
Last reviewed: 2026-11-03
Listed since: 2026-11-03

## Record

### Links

- home: https://www.ory.sh/keto
- repository: https://github.com/ory/keto
- docs: https://www.ory.com/docs/oss/keto
- pricing: https://www.ory.com/pricing
- x: https://x.com/orycorp
- forum: https://github.com/ory/keto/discussions
- youtube: https://www.youtube.com/@OryCorp

### Identity

- status: active
- maintainer: Ory Corp
- maintainerType: company
- parent: unknown
- firstRelease: 2018
- hqCountry: US

### Kind

- category: auth
- hosting: binary
- language: go
- runtime: binary
- runtimeMin: unknown
- basedOn: unknown

### Content

- contentStore: not applicable
- databases: postgres, mysql
- adminUi: not applicable
- headlessApi: rest
- templating: not applicable
- i18n: not applicable

### Rendering and deploy

- runsAs: always-on
- renderingModes: not applicable
- installMethod: homebrew

### License

- licenseModel: open-core
- license: Apache-2.0

### Releases

- currentMajor: unknown
- latestReleaseDate: 2026-03-20

### Adoption

- githubStargazers: 5418
- packagistDownloads: not applicable
- npmWeeklyDownloads: not applicable
- contributors: 84
- pluginCount: unknown
- packagistMonthlyDownloads: unknown
- ecosystemsMonthlyDownloads: unknown
- httpArchiveSites: unknown
- wordpressActiveInstalls: unknown
- dependentRepos: unknown
- dependentPackages: unknown

### Sources

- name: https://github.com/ory/keto/blob/master/README.md (read 2026-11-03)
- urls: https://www.ory.sh/keto (read 2026-11-03)
- urls: https://github.com/ory/keto (read 2026-11-03)
- urls: https://www.ory.com/docs/oss/keto (read 2026-11-03)
- license: https://github.com/ory/keto (read 2026-11-03)
- language: https://github.com/ory/keto (read 2026-11-03)
- runtime: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- installMethod: https://www.ory.com/docs/oss/keto/install (read 2026-11-03)
- latestReleaseDate: https://github.com/ory/keto/releases/tag/v26.2.0 (read 2026-11-03)
- firstRelease: https://github.com/ory/keto/releases (read 2026-11-03)
- githubStargazers: https://github.com/ory/keto (read 2026-11-03)
- contributors: https://api.github.com/repos/ory/keto/contributors?per_page=1 (read 2026-11-03)
- maintainer: https://www.ory.com/legal/privacy (read 2026-11-03)
- hqCountry: https://www.ory.com/legal/privacy (read 2026-11-03)
- urls: https://www.ory.com/pricing (read 2026-11-03)
- headlessApi: https://www.ory.com/docs/keto/concepts/api-overview (read 2026-11-03)
- databases: https://www.ory.com/docs/keto/guides/production (read 2026-11-03)
- runsAs: https://www.ory.com/docs/keto/guides/production (read 2026-11-03)

## Notes

Ory Keto is an authorization server written in Go. It is an open source implementation of Google's Zanzibar model, and it answers permission checks between subjects and objects, with access control policies written in the Ory Permission Language. Applications call its REST or gRPC APIs for those checks. The [install guide](https://www.ory.com/docs/oss/keto/install) covers Homebrew, a shell install script, Scoop, Docker, Helm charts and binary downloads, and a build from source. A production deployment needs a database such as PostgreSQL, MySQL or CockroachDB. Ory Corp maintains the project, and the same server powers Ory Permissions on the Ory Network.

## Worth knowing

The Ory open source servers come without access control on their APIs, so the install guide advises putting Ory Oathkeeper or an API gateway in front of them. An Enterprise License build adds features the open source version does not have; it is distributed from a private Docker registry.

---

Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attributes are recorded, never scored; absent means unknown.
Credit, in full: FindSoftware, CC BY 4.0