spicedb

SpiceDB is an open-source database inspired by Google's internal authorization system, Zanzibar. It is designed to scalably store and query fine-grained authorization data, answering questions like "Can subject X perform action Y on resource Z?". Developers define a schema, write relationships, and use client libraries or APIs to perform permission checks. It supports multiple datastores including Google Cloud Spanner, CockroachDB, MySQL, and PostgreSQL, and can be self-hosted or used via AuthZed Cloud. The project is written in Go and provides gRPC and HTTP APIs, a CLI tool (zed), and a playground for experimentation. It is used by companies like GitHub, Red Hat, and Netflix.