BotHarness / DeepSeekBot
Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.｜基于 DeepSeek Harness 的开源 GrokBot 平替：有长期记忆的个人 AI Bot 团队，支持多 Bot 协作、身份权限与插件生态扩展。MIT.
ai-boost / awesome-harness-engineering
Awesome list for AI agent harness engineering: tools, patterns, evals, memory, MCP, permissions, observability, and orchestration.
mokshablr / gander
Take a gander at any file. Offline, zero-permission Android viewer for PDF, Word, Excel, PowerPoint, ODT, RTF, ZIP, STL, photos, video, audio, Markdown and code.
Ryder-Sun / Meldwork
Local-first AI agent workspace for multi-agent collaboration, agent orchestration, scoped permissions, evidence-aware runs, and human-in-the-loop decisions.
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
affaan-m / agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
iamr0s / Dhizuku
A tool that can share DeviceOwner permissions to other application.
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
gitbot-hq / GitBot
Create reusable bots powered by Claude Code, Codex, or OpenCode. Run them locally across your repositories with persistent threads and permissions you control.
Mic92 / sops-nix
Atomic secret provisioning for NixOS based on sops
GrapheneOS / PdfViewer
Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. CSP is used to enforce that the JavaScript and styling properties within the WebView are entirely static.
ixartz / SaaS-Boilerplate
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
personalagentproxy / proxy
Personal Agent Proxy is an open-source, self-hostable access layer that lets you connect your services once, give each AI agent granular permissions, and audit its activity; without copying the contents of your connected services into its database.
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
MohamedRejeb / Calf
Calf is a library that allows you to easily create adaptive UIs and access platform specific APIs with Compose Multiplatform (Adaptive UI, File Picker, WebView, Permissions...).
Bevel-Software / Hexis
Centrally manage AI-agent skills, tools, context, permissions, and identity across your entire org. Self-hosted, Git-backed and MCP-native.
spatie / laravel-permission
Associate users with roles and permissions
instantdb / instant
Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.
robinrodricks / FluentFTP
An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#.
TechNomadCode / AI-Product-Development-Toolkit
Plan, build and launch products with AI: guided planning prompts, an AI App Starter for Next.js, Supabase and Vercel, and agent configurations.
mirfatif / PermissionManagerX
eXtended Permission Manager for Android - view, set, watch Manifest Permissions and AppOps
peass-ng / CloudPEASS
Red Team scripts to find the permissions assigned to a compromised principal in AWS, GCP, Azure and Kubernetes.
letstri / permix
🔒 Permix is a lightweight, framework-agnostic, type-safe permissions management library for TypeScript applications on the client and server sides.
slywalker2006 / dsh-passwords
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
Anionex / dsh-computer-use
为 DeepSeek Harness 提供电脑控制插件：新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入（目前支持macos）｜Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.
zalaso / sharebox
Publish and share the small web tools your AI agents build, as easily as a Google Doc. Google sign-in, permissions, storage and gVisor sandboxing built in. Self-hosted.
evoke-build / evoke
Software, by reflex. An open runtime that turns human intent into inspectable plans across small, composable programs, with explicit permissions and human approval before irreversible actions.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
django-guardian / django-guardian
Per object permissions for Django
microsoft / wassette
Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
JamesWoolfenden / pike
Pike is a tool for determining the permissions or policy required for IAC code
chainguard-dev / malcontent
#supply #chain #attack #detection
openpactprotocol / openpactprotocol
PACT is an open protocol for personal agents to interact with businesses’ agents under explicit, verifiable user permissions.
hueyexe / opencode-auto-permissions
Automatic, model-driven permission review for OpenCode
minervacomputing / harness
Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.
adrianhajdin / atelier-store
A luxury e-commerce platform built in Next.js 16 to master agentic engineering with persistent project context, plan mode, permissions, skills, filesystem permissions, and context-isolated subagents.
zoontek / react-native-permissions
An unified permissions API for React Native on iOS, Android and Windows.
maticzav / graphql-shield
🛡 A GraphQL tool to ease the creation of permission layer.
jeremykenedy / laravel-auth
A complete Laravel 13 application foundation: email verification, social sign in, roles and permissions, user profiles, and admin user management.
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
onury / accesscontrol
Role and Attribute based Access Control for Node.js
santigarcor / laratrust
Handle roles and permissions in your Laravel application
Baseflow / flutter-permission-handler
Permission plugin for Flutter. This plugin provides a cross-platform (iOS, Android) API to request and check permissions.
tchx84 / Flatseal
Manage Flatpak permissions
chromium / permission.site
A site to test the interaction of web APIs and browser permissions.
nestjsx / nest-access-control
Role and Attribute based Access Control for Nestjs 🔐
jeremykenedy / laravel-roles
Role-Based Access Control (RBAC) for Laravel. Roles, permissions and role levels. Supports Laravel 5.3 through 13.
apache / casbin-gateway
See what every AI coding agent on your machine is doing, and whether the API behind it is the one you paid for. Claude Code, Codex, Cursor, Gemini CLI and more: one endpoint for 44 model vendors, A–F API authenticity grading, per-agent permissions, usage and prompt records.
YasserNull / shappky
A simple app to boost performance by stopping background apps, relying on Root/Shizuku permissions.
mpartel / bindfs
Mount a directory elsewhere with changed permissions.
terraform-google-modules / terraform-google-cloud-storage
Creates one or more Cloud Storage buckets and assigns basic permissions on them to arbitrary users
saltmd / salt.md
The open-source workspace for people and AI agents. Docs, databases and realtime collaboration with an MCP server in the same binary, so agents work in the same workspace on the same permissions. One Go binary, one SQLite file, self-hosted.
christiangrey922 / multi-agent-workflow-lab
Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
ustayready / Thunderstorm
A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
luckg9937-sketch / role-lens
Best Frappe ERPNext Permission Visualizer Tool 2026: Debug User Roles and Access
shipfastlabs / grant
Grant provides minimal, enum-first roles and permissions for Laravel
RAZOUKI18 / PF-vMenu-Forge
PF-vMenu Successor: Custom Server Sided Admin Menu With Permissions 2026
Cmm210 / vMenu-Permissions-Forge
vMenu 2026 Alternative: Ultimate Server-Side Permission-Based Trainer Menu for FiveM
sylvesterkaczmarek / agent-boundary-check
Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.
jackispm / nausicaa-harness
Nausicaa treats an Agent run as a dynamic topology of Lanes rather than one fixed linear loop. The model can decide when to observe, fan out, delegate, or collaborate across Runs; the Host keeps identity, permissions, durability, and recovery as explicit facts.