instantdb / instant

Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.

ixartz / SaaS-Boilerplate

🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing

deepstreamIO / deepstream.io

deepstream.io server

stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

maticzav / graphql-shield

🛡 A GraphQL tool to ease the creation of permission layer.

cosmicstack-labs / mercury-agent

Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.

zenstackhq / zenstack

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

apache / casbin-node-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

onury / accesscontrol

Role and Attribute based Access Control for Node.js

Gentleman-Programming / gentle-shell

Your coding agent for controlled development in the workspace you lead. A Pi-native shell with Organic Driven Development, focused subagents, risk-based native review, live changes and agent views, and permission modes that keep destructive guards.

affaan-m / agentshield

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

nestjsx / nest-access-control

Role and Attribute based Access Control for Nestjs 🔐

ConardLi / easy-agent

Production-ready open source terminal coding agent with readable, layered code: permission rules, OS sandboxing, MCP, skills, sub-agents, and Anthropic, OpenAI-compatible, Gemini, or local models.

mohak34 / opencode-notifier

OpenCode plugin for desktop notifications and sounds on permission, completion, and error events.

letstri / permix

🔒 Permix is a lightweight, framework-agnostic, type-safe permissions management library for TypeScript applications on the client and server sides.

ammaarreshi / RedAlert2-Mac-iOS-iPad

Red Alert 2 + Yuri's Revenge running natively on iPhone and iPad. EA never released RA2's source, so this builds on Chrono Divide's from-scratch TypeScript engine — proprietary, used with the author's permission, non-commercial only — wrapped in a Swift/WKWebView shell. Bring your own retail copy; no game assets included.

gitbot-hq / GitBot

Create reusable bots powered by Claude Code, Codex, or OpenCode. Run them locally across your repositories with persistent threads and permissions you control.

BotHarness / DeepSeekBot

Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.｜基于 DeepSeek Harness 的开源 GrokBot 平替：有长期记忆的个人 AI Bot 团队，支持多 Bot 协作、身份权限与插件生态扩展。MIT.

danielroe / airspace

The database you already have.

saltmd / salt.md

The open-source workspace for people and AI agents. Docs, databases and realtime collaboration with an MCP server in the same binary, so agents work in the same workspace on the same permissions. One Go binary, one SQLite file, self-hosted.

PerryLink / dsh-permission-rules

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

cryer / star-cli

An AI agent command-line interface — multi-model LLM access, streaming terminal UI, tool calling, permission control, and session persistence.

Bevel-Software / Hexis

Centrally manage AI-agent skills, tools, context, permissions, and identity across your entire org. Self-hosted, Git-backed and MCP-native.

personalagentproxy / proxy

Personal Agent Proxy is an open-source, self-hostable access layer that lets you connect your services once, give each AI agent granular permissions, and audit its activity; without copying the contents of your connected services into its database.

scasella / claude-flightdeck

A Claude Code mod that puts a live agent dashboard in your terminal: context and cost, advisor timeline, every permission check, subagent cards and swimlanes.

openpactprotocol / openpactprotocol

PACT is an open protocol for personal agents to interact with businesses’ agents under explicit, verifiable user permissions.

christiangrey922 / multi-agent-workflow-lab

Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.

slywalker2006 / dsh-passwords

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

Anionex / dsh-computer-use

为 DeepSeek Harness 提供电脑控制插件：新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入（目前支持macos）｜Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.

yz3639-gif / rebalance-review

Compare ETF allocations with a browser-based research terminal: risk attribution, historical replay, cost scenarios and permission-aware reports.

hueyexe / opencode-auto-permissions

Automatic, model-driven permission review for OpenCode

jackispm / nausicaa-harness

Nausicaa treats an Agent run as a dynamic topology of Lanes rather than one fixed linear loop. The model can decide when to observe, fan out, delegate, or collaborate across Runs; the Host keeps identity, permissions, durability, and recovery as explicit facts.

jomatsu / pi-jev-auto-mode

Jev (TypeSafe System One) backed auto mode for the Pi coding agent: semantically auto-approves bash, write, and edit tool calls and fails closed when a decision cannot be made.

madisonrickert / jev-permission-gate

A Claude Code mod that uses TypeSafe's Jev to decide auto mode tool calls. 2x faster than the built-in classifier on the calls it decides.

SinghAbhinav04 / dev-house

Give Claude Code a dev team: members you create, on the models you choose, with their own roles, skills and permissions.

zalaso / sharebox

Publish and share the small web tools your AI agents build, as easily as a Google Doc. Google sign-in, permissions, storage and gVisor sandboxing built in. Self-hosted.

minervacomputing / harness

Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.

csuftt / zcode-jetbrains-plugin

ZCode（Z.ai/GLM）AI 编程助手 JetBrains 插件：多标签对话、流式输出、模型与权限切换、任务/子代理可视化，AI 可经 browser-use 驱动内嵌 JCEF 浏览器 | ZCode (Z.ai/GLM) AI coding assistant for JetBrains IDEs: multi-tab chat, streaming output, model & permission switching, task/subagent visibility, and an embedded JCEF browser driven by the AI via browser-use