terraform-google-modules / terraform-google-cloud-storage
Creates one or more Cloud Storage buckets and assigns basic permissions on them to arbitrary users
terraform-google-modules / terraform-google-cloud-storage
spatie / laravel-permission
Associate users with roles and permissions
instantdb / instant
Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams โ everything you need to ship apps your users will love.
ixartz / SaaS-Boilerplate
๐๐๐ SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. โก๏ธ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
deepstreamIO / deepstream.io
deepstream.io server
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. โ Permify is now part of FusionAuth ๐
ai-boost / awesome-harness-engineering
Awesome list for AI agent harness engineering: tools, patterns, evals, memory, MCP, permissions, observability, and orchestration.
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
zoontek / react-native-permissions
An unified permissions API for React Native on iOS, Android and Windows.
iamr0s / Dhizuku
A tool that can share DeviceOwner permissions to other application.
django-guardian / django-guardian
Per object permissions for Django
maticzav / graphql-shield
๐ก A GraphQL tool to ease the creation of permission layer.
robinrodricks / FluentFTP
An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#.
jeremykenedy / laravel-auth
A complete Laravel 13 application foundation: email verification, social sign in, roles and permissions, user profiles, and admin user management.
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
bezhanSalleh / filament-shield
The easiest and most intuitive way to add access management to your Filament Panel; Resources, Pages & Widgets through `spatie/laravel-permission`
onury / accesscontrol
Role and Attribute based Access Control for Node.js
LuckPerms / LuckPerms
A permissions plugin for Minecraft servers.
Baseflow / flutter-permission-handler
Permission plugin for Flutter. This plugin provides a cross-platform (iOS, Android) API to request and check permissions.
tchx84 / Flatseal
Manage Flatpak permissions
MohamedRejeb / Calf
Calf is a library that allows you to easily create adaptive UIs and access platform specific APIs with Compose Multiplatform (Adaptive UI, File Picker, WebView, Permissions...).
affaan-m / agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. ๐ก๏ธ
mokshablr / gander
Take a gander at any file. Offline, zero-permission Android viewer for PDF, Word, Excel, PowerPoint, ODT, RTF, ZIP, STL, photos, video, audio, Markdown and code.
nestjsx / nest-access-control
Role and Attribute based Access Control for Nestjs ๐
Ryder-Sun / Meldwork
Local-first AI agent workspace for multi-agent collaboration, agent orchestration, scoped permissions, evidence-aware runs, and human-in-the-loop decisions.
jeremykenedy / laravel-roles
Role-Based Access Control (RBAC) for Laravel. Roles, permissions and role levels. Supports Laravel 5.3 through 13.
GrapheneOS / PdfViewer
Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. CSP is used to enforce that the JavaScript and styling properties within the WebView are entirely static.
TechNomadCode / AI-Product-Development-Toolkit
Plan, build and launch products with AI: guided planning prompts, an AI App Starter for Next.js, Supabase and Vercel, and agent configurations.
microsoft / wassette
Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
JamesWoolfenden / pike
Pike is a tool for determining the permissions or policy required for IAC code
mirfatif / PermissionManagerX
eXtended Permission Manager for Android - view, set, watch Manifest Permissions and AppOps
peass-ng / CloudPEASS
Red Team scripts to find the permissions assigned to a compromised principal in AWS, GCP, Azure and Kubernetes.
chainguard-dev / malcontent
#supply #chain #attack #detection
apache / casbin-gateway
See what every AI coding agent on your machine is doing, and whether the API behind it is the one you paid for. Claude Code, Codex, Cursor, Gemini CLI and more: one endpoint for 44 model vendors, AโF API authenticity grading, per-agent permissions, usage and prompt records.
letstri / permix
๐ Permix is a lightweight, framework-agnostic, type-safe permissions management library for TypeScript applications on the client and server sides.
YasserNull / shappky
A simple app to boost performance by stopping background apps, relying on Root/Shizuku permissions.
mpartel / bindfs
Mount a directory elsewhere with changed permissions.
akalikbergenov / cyclop
The MacBook notch as a working tool โ media controls, file shelf, clipboard history, snippets, calendar, offline translation and a teleprompter. Native SwiftUI, zero dependencies, no permissions. Free and open source.
gitbot-hq / GitBot
Create reusable bots powered by Claude Code, Codex, or OpenCode. Run them locally across your repositories with persistent threads and permissions you control.
BotHarness / DeepSeekBot
Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.๏ฝๅบไบ DeepSeek Harness ็ๅผๆบ GrokBot ๅนณๆฟ๏ผๆ้ฟๆ่ฎฐๅฟ็ไธชไบบ AI Bot ๅข้๏ผๆฏๆๅค Bot ๅไฝใ่บซไปฝๆ้ไธๆไปถ็ๆๆฉๅฑใMIT.
saltmd / salt.md
The open-source workspace for people and AI agents. Docs, databases and realtime collaboration with an MCP server in the same binary, so agents work in the same workspace on the same permissions. One Go binary, one SQLite file, self-hosted.
r1c7 / CluxMate
AI coding agent with one Python core and three front-ends โ headless CLI, Textual TUI, and an Electron desktop. Works with any OpenAI-compatible API, with risk-tiered permissions, event-sourced replayable sessions, and a fail-closed OS-level sandbox.
Bevel-Software / Hexis
Centrally manage AI-agent skills, tools, context, permissions, and identity across your entire org. Self-hosted, Git-backed and MCP-native.
personalagentproxy / proxy
Personal Agent Proxy is an open-source, self-hostable access layer that lets you connect your services once, give each AI agent granular permissions, and audit its activity; without copying the contents of your connected services into its database.
openpactprotocol / openpactprotocol
PACT is an open protocol for personal agents to interact with businessesโ agents under explicit, verifiable user permissions.
christiangrey922 / multi-agent-workflow-lab
Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
ustayready / Thunderstorm
A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
brandynfisher / ToolReplay
Audit AI agent tool-call transcripts: hash-chain sealing, deterministic replay, and scope overreach checks. Dependency-free Python CLI.
slywalker2006 / dsh-passwords
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
luckg9937-sketch / role-lens
Best Frappe ERPNext Permission Visualizer Tool 2026: Debug User Roles and Access
Anionex / dsh-computer-use
ไธบ DeepSeek Harness ๆไพ็ต่ๆงๅถๆไปถ๏ผๆฐ้ฒ Accessibility ่งๆตใ่ฟๆ็ถๆๆ็ปใไฝ็จๅๆ้ไธๅฎๅ จ่พๅ ฅ๏ผ็ฎๅๆฏๆmacos๏ผ๏ฝAccessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.
shipfastlabs / grant
Grant provides minimal, enum-first roles and permissions for Laravel
wangyuxun6699 / learn_claude_code_langchain
Rebuild Claude Code's agent harness step by step with LangChain and LangGraph โ from agent loops and tools to permissions, subagents, context compaction, memory, and recovery.
RAZOUKI18 / PF-vMenu-Forge
PF-vMenu Successor: Custom Server Sided Admin Menu With Permissions 2026
Cmm210 / vMenu-Permissions-Forge
vMenu 2026 Alternative: Ultimate Server-Side Permission-Based Trainer Menu for FiveM
sylvesterkaczmarek / agent-boundary-check
Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.
hueyexe / opencode-auto-permissions
Automatic, model-driven permission review for OpenCode