authzed/spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
3 releases in the last 90 days, the latest 14 days ago, with 83 contributors on GitHub.
Use Cases & Benefits
- Implements a scalable, fine-grained authorization database inspired by Google's Zanzibar system for storing and querying access control data.
- Provides global consistency and high performance at scale with multi-paradigm authorization combining ABAC and ReBAC concepts.
- Use for centralizing permission management across microservices and product suites in cloud-native environments.
- Use for building complex access control models with real-time schema validation and relationship queries in distributed systems.
- Use for integrating fine-grained authorization checks in applications requiring secure, consistent permission enforcement at scale.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
SpiceDB sets the standard for authorization that scales.
Traffic • Dev Velocity • Functionality • Geography
SpiceDB is the most mature open source project inspired by Google's internal authorization system: Zanzibar.
As of 2021, broken access control became the #1 threat to web security according to OWASP. With SpiceDB, platform and product teams can be be protected by answering this question easily: "can subject X perform action Y on resource Z?"
Similar to a relational database, developers define a schema, write data in the form of relationships, and then use SpiceDB's clients to issue permission checks in their application to determine what actions a user can take on a resource. Other queries are also possible, such as "What can
subjectdo?" or "Who can accessresource?".SpiceDB is often ran as a centralized service shared across product suites and microservice architectures.
SpiceDB is focused purely on authorization and is designed to be fully agnostic to authentication solutions/identity providers.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
439+29
Open issues
164+18
Compared with peers in Cloud
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| Asymptote-Labs/agent-beacon | 3.3K | +360 | 40 | today |
| juicedata/juicefs | 14.7K | +105 | 64 | 14 days ago |
| GoogleCloudPlatform/microservices-demo | 21.1K | — | 63 | 38 days ago |
| quarkusio/quarkus | 16.0K | — | 60 | 2 days ago |
| awslabs/mcp | 9.8K | — | 65 | 9 days ago |
| authzed/spicedb | 7.2K | — | 64 | 14 days ago |
| Category median | 14.7K | +233 | 63 | — |
Discover Repositories
Search across tracked repositories by name or description