instantdb / instant
Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.
instantdb / instant
ixartz / SaaS-Boilerplate
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
deepstreamIO / deepstream.io
deepstream.io server
stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
maticzav / graphql-shield
🛡 A GraphQL tool to ease the creation of permission layer.
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
onury / accesscontrol
Role and Attribute based Access Control for Node.js
affaan-m / agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
nestjsx / nest-access-control
Role and Attribute based Access Control for Nestjs 🔐
letstri / permix
🔒 Permix is a lightweight, framework-agnostic, type-safe permissions management library for TypeScript applications on the client and server sides.
gitbot-hq / GitBot
Create reusable bots powered by Claude Code, Codex, or OpenCode. Run them locally across your repositories with persistent threads and permissions you control.
BotHarness / DeepSeekBot
Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.｜基于 DeepSeek Harness 的开源 GrokBot 平替：有长期记忆的个人 AI Bot 团队，支持多 Bot 协作、身份权限与插件生态扩展。MIT.
saltmd / salt.md
The open-source workspace for people and AI agents. Docs, databases and realtime collaboration with an MCP server in the same binary, so agents work in the same workspace on the same permissions. One Go binary, one SQLite file, self-hosted.
Bevel-Software / Hexis
Centrally manage AI-agent skills, tools, context, permissions, and identity across your entire org. Self-hosted, Git-backed and MCP-native.
personalagentproxy / proxy
Personal Agent Proxy is an open-source, self-hostable access layer that lets you connect your services once, give each AI agent granular permissions, and audit its activity; without copying the contents of your connected services into its database.
openpactprotocol / openpactprotocol
PACT is an open protocol for personal agents to interact with businesses’ agents under explicit, verifiable user permissions.
christiangrey922 / multi-agent-workflow-lab
Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
slywalker2006 / dsh-passwords
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
Anionex / dsh-computer-use
为 DeepSeek Harness 提供电脑控制插件：新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入（目前支持macos）｜Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.
hueyexe / opencode-auto-permissions
Automatic, model-driven permission review for OpenCode
jackispm / nausicaa-harness
Nausicaa treats an Agent run as a dynamic topology of Lanes rather than one fixed linear loop. The model can decide when to observe, fan out, delegate, or collaborate across Runs; the Host keeps identity, permissions, durability, and recovery as explicit facts.
madisonrickert / jev-permission-gate
A Claude Code mod that uses TypeSafe's Jev to decide auto mode tool calls. 2x faster than the built-in classifier on the calls it decides.
SinghAbhinav04 / dev-house
Give Claude Code a dev team: members you create, on the models you choose, with their own roles, skills and permissions.
zalaso / sharebox
Publish and share the small web tools your AI agents build, as easily as a Google Doc. Google sign-in, permissions, storage and gVisor sandboxing built in. Self-hosted.
minervacomputing / harness
Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.