Zanzibar-grade relationship-based access control as an API. Define permission schemas, write relationship tuples, query the engine — get answers in under 10ms.
Everything you need for production-grade permissions
Permission checks at the edge, globally distributed. 100K+ checks/sec per node.
Define your permission model in YAML. Version it. Test it. Review in PRs.
Temporal grants, delegation chains, budgets, and human-in-the-loop gates for AI agents.
Hierarchical permissions — folders contain documents, teams contain members. Access cascades.
Every check, grant, and revoke is logged. Full delegation chains. Compliance-ready.
CLI, MCP server for AI assistants, GitHub Copilot extension, and client SDKs.
From zero to production permissions in minutes
type document:
relations:
owner:
types: [user]
editor:
types: [user, team#member]
actions:
write:
requires:
anyOf: [owner, editor]authgraph grant user:alice owner document:readme authgraph grant team:eng#member editor document:readme
const allowed = await authgraph.check({
subject: "user:alice",
action: "write",
resource: "document:readme"
});
// → true (2ms)| Authgraph | DIY / RBAC | Competitors | |
|---|---|---|---|
| Latency | <10ms P99 | Varies (50-500ms) | 20-50ms |
| Agent permissions | First-class | Build yourself | None |
| Per-resource permissions | Native | Expensive queries | Yes |
| Hierarchical access | Graph traversal | Recursive queries | Yes |
| AI tooling | MCP + Copilot | None | None |
Free tier includes 10,000 checks/month. No credit card required.