YunaiV / ruoyi-vue-pro
🔥 官方推荐 🔥 RuoYi-Vue 全新 Pro 版本，优化重构所有功能。基于 Spring Boot + MyBatis Plus + Vue & Element 实现的后台管理系统 + 微信小程序，支持 RBAC 动态权限、数据权限、SaaS 多租户、Flowable 工作流、三方登录、支付、短信、商城、CRM、ERP、MES、IM、AI 大模型、IoT 物联网等功能。你的 ⭐️ Star ⭐️，是作者生发的动力！
YunaiV / ruoyi-vue-pro
razorback16 / cc-intelligent-ui
Claude's answers, rendered: Markdown, math, charts and diagrams drawn in the Claude Code terminal. Independent project, not affiliated with Anthropic.
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
YunaiV / yudao-cloud
ruoyi-vue-pro 全新 Cloud 版本，优化重构所有功能。基于 Spring Cloud Alibaba + MyBatis Plus + Vue & Element 实现的后台管理系统 + 用户小程序，支持 RBAC 动态权限、多租户、数据权限、工作流、三方登录、支付、短信、商城、CRM、ERP、MES、IM、AI 大模型、IoT 物联网等功能。你的 ⭐️ Star ⭐️，是作者生发的动力！
logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
go-admin-team / go-admin
go-admin is a Gin + Vue starter kit for admin applications, supporting Element UI, Arco Design, and Ant Design. Features include multi-tenancy, user management, JWT authentication, RBAC, code generation, a form builder, and scheduled tasks. Build your own admin app in just 3 minutes.
loft-sh / vcluster
vCluster creates tenant clusters: fully isolated environments delivered as managed Kubernetes, or as the foundation for Slurm, Ray, Run:ai and inference clusters. Each gets its own API server, CRDs and RBAC, and runs on an existing cluster or standalone on bare metal. CNCF Certified Kubernetes.
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
hexclave / hexclave
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
pig-mesh / pig
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
iflytek / skillhub
Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
dpgaspar / Flask-AppBuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
yudaocode / yudao-ui-admin-vue3
芋道管理后台，基于 Vue3 + Element Plus 实现，支持 RBAC 动态权限、数据权限、SaaS 多租户、Flowable 工作流、三方登录、支付、短信、商城、CRM、ERP、MES、IM、AI 大模型、IoT 物联网等功能。
erupts / erupt
Code as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes — UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.
zenstackhq / zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
apache / casbin-jcasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Java
onury / accesscontrol
Role and Attribute based Access Control for Node.js
dromara / MaxKey
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。
open-mercato / open-mercato
The AI-Engineering Foundation Framework for business apps: open-source TypeScript, with multi-tenancy, RBAC, events and domain modules already decided as conventions and specs, so Cursor, Claude Code and Codex build features instead of re-deciding architecture. Start with 80% done.
apache / casbin-pycasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Python
mateaix / matecloud
🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件
FairwindsOps / rbac-manager
A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.
izhaorui / Zr.Admin.NET
🎉 ZR.Admin.NET —— 基于 .NET 8 + SqlSugar + Vue3 的前后端分离通用权限管理框架（RBAC），跨平台、开箱即用。内置 SaaS 多租户（一租户一库）、可视化工作流引擎、一键代码生成、Quartz.NET 任务调度、Redis 缓存、SignalR 实时通知、接口限流、全局异常处理、数据权限过滤与动态国际化，并集成 AI 助手与 AI 治理能力。代码简洁易懂、易扩展。
lakekeeper / lakekeeper
Apache Iceberg REST Catalog in Rust — access control, credential vending and audit for every engine and AI agent. Apache 2.0.
aserto-dev / topaz
Cloud-native authorization for modern applications and APIs
apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
php-casbin / php-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .
apache / casbin-rs
An authorization library that supports access control models like ACL, RBAC, ABAC in Rust
jeremykenedy / laravel-roles
Role-Based Access Control (RBAC) for Laravel. Roles, permissions and role levels. Supports Laravel 5.3 through 13.
AthenZ / athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
openrundev / openrun
Deployment platform for teams to deploy internal tools. Deploy web apps declaratively, on a single-node or on Kubernetes, with OIDC/SAML auth and RBAC.
FairwindsOps / rbac-lookup
Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
uroni / urbackup_backend
UrBackup - Client/Server Open Source Network Backup for Windows, MacOS and Linux
Allen7D / mini-shop-server
基于 Flask 框架开发的微信小程序后端项目，用于构建小程序商城后台 （电商相关；rbac权限管理；附带自动生成Swagger 风格的API 文档；可作「Python 项目毕设」）
ThinkWatchProject / ThinkWatch
Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII redaction and tool-call guards, rate limits, budgets, cost accounting and audit logs.
risa-labs-inc / BossConsole
Open-source, multi-platform harness for AI agents - a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 200+ MCP tools. Built for enterprises, science & research.
szluyu99 / gin-vue-blog
Golang 全栈博客：Go + Gin + GORM + Redis 后端，Vue3 + Vite + UnoCSS 前台与后台管理。JWT 鉴权 + RBAC 动态菜单，Docker Compose 一键部署，CI 跑 lint/单测/构建/compose 端到端。前后端均有单元测试，内置 mock 模式可脱离后端运行（GitHub Pages 在线演示），注释与 Swagger 文档齐全。
HelpCode-ai / anythingmcp
MCP gateway for AI agents: turn any REST/OpenAPI, GraphQL, SOAP or SQL API into MCP tools. 517 ready-made connectors (SAP, ERP, e-commerce) with RBAC, SSO, audit logs and a knowledge graph.
appvia / krane
Kubernetes RBAC static analysis & visualisation tool
razorback16 / openjev
Open, Jev-compatible System One decision server on DiffusionGemma
andrechristikan / ack-nestjs-boilerplate
NestJS 12 boilerplate with JWT, OAuth (Google & Apple), TOTP/2FA, RBAC, and multi-workspace tenancy. Prisma on MongoDB, modular repository layer, native ESM. Production-ready.
kube-rbac-proxy / kube-rbac-proxy
Kubernetes RBAC authorizing HTTP proxy for a single upstream.
kubeguard / guard
🔑 Kubernetes Authentication & Authorization WebHook Server
ivan-borovets / fastapi-clean-example
Practical Clean Architecture backend example built with FastAPI. No stateful globals (DI), low coupling (DIP), tactical DDD, CQRS, proper UoW usage. REST API, per-route error handling, session-based auth, contextual RBAC. Bundled with extensive docs and modern tooling
tx7do / go-wind-admin
Enterprise admin platform in Go on go-kratos (Ent): Protobuf as the single API contract with full-stack codegen (Go APIs + TypeScript clients, one-click CRUD scaffolds), multi-tenant RBAC (Casbin / OPA / Zanzibar), TOTP MFA, 180-day audit logging aligned with China MLPS 2.0 (等保) — with Vue3 (Vben / Element Plus) and React 19 (Antd) frontends.
wbr664393425-lgtm / scaffold-master
Spring Boot + Vue 通用后台管理脚手架，提供认证、RBAC 与数据权限、组织管理、日志和代码生成骨架。
halofyai / halofy
Halofy is the open access and governance layer for AI agents across your organization. Identity, policy, provenance, audit, and signed erasure.
KevinLiss / ApeAdmin
Apeadmin 面向现代AI应用打造的Python后台管理框架，基于 FastAPI+Vue3 设计100%开源，内置 RBAC 权限管控、审计日志等企业级基础能力。框架集成 MCP‑SSE 网关，具备强大插件生态完整，帮助开发者快速搭建兼具业务管理与 AI 工具输出能力的应用。
mkbhardwas12 / purposemesh
Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.
crane-in-clear-sky / WorkWit-AI-Agent
WorkWit: a self-hosted, open-source (MIT) enterprise AI Agent platform for office automation — built-in contract review & resume screening, 40+ skills, MCP connectors, multi-tenant RBAC. Deploy with one Docker Compose.
ashishsinha1602 / schemagate
Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.
azrtydxb / Fastllm-proxy
The lowest-overhead LLM router. Production-ready, highly available, one OpenAI-compatible endpoint in front of 80 providers and your own vLLM/SGLang — 0.76 µs per request, no I/O on the request path, cache-affinity routing, RBAC, budgets and a 13-screen UI in the binary.
madong-code / madong-single
Standard admin frontend skeleton for madong-admin backend, built with Vue3 + Vben, matches PHP Webman single-tenant backend, includes RBAC UI, CRUD page and workflow panel.
madong-code / madong-mono
Monorepo frontend skeleton for madong-admin-saas multi-tenant SaaS platform, built with Vue3 + Vben, includes tenant management, platform admin UI, RBAC and CRUD pages.