Apply for $700 in starter credits on AuthZed Cloud

SpiceDB / Open-source Google Zanzibar

The standard for building authz services

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.

Learn the basics

Jump toHow it worksBuild with itProductionCommunity

1
2
3
4
5
6
7
8
9

Apache-2.0

Google Zanzibar inspired

gRPC + HTTP / JSON APIs

Pluggable storage

02a / Concepts

Learn key concepts

02b / Schema

Define authorization as schema

Design tailored authorization systems by defining relationships, permissions based on those relationships, and bits of policy called Caveats.

02c / Features

Features

SpiceDB is the open-source, Google Zanzibar-inspired permissions database used to build fine-grained authorization services at scale.

Expressive APIs

Expressive gRPC and HTTP/JSON APIs for powering authorization logic in your client applications.

Distributed Graph

Distributed, parallel graph engine faithful to the architecture described in Google's Zanzibar paper.

Prevents New Enemies

A flexible consistency model configurable per-request that includes resistance to the New Enemy Problem.

Configuration Language

Intuitive authorization configuration language — SpiceDB Schema — with CI/CD integrations for validation & testing.

Pluggable Storage

Support for in-memory, Spanner, CockroachDB, PostgreSQL, and MySQL relationship storage.

Deep Observability

Deep observability with Prometheus metrics, pprof profiles, structured logging, and OpenTelemetry tracing.

03 / Build with it

The toolkit

Everything you need to deploy, manage, and integrate SpiceDB.

$ kubectl apply -f spicedb...

SpiceDB Operator

Optimize your Day 1 and Day 2 operations with our official Kubernetes SpiceDB Operator.

kubectl apply -f spicedbcluster.yaml — create, manage, and scale SpiceDB clusters with a single Kubernetes resource.
Zero-downtime datastore migrations — run painless migrations regardless of your backing datastore or SpiceDB version.
Automated update channels — configure clusters to follow release channels and automatically roll out updates.

authzed/spicedb-operatorPublic

Kubernetes controller for managing instances of SpiceDB

103

$ zed permission check ...

zed CLI

The easiest way to interact with your SpiceDB Deployments.

Context switching — securely change environments with credentials stored in your OS keychain.
Full RPC support — leverage all of SpiceDB's RPCs from your command-line.
Easy testing — validate your schema and test assertions with zed validate.

authzed/zedPublic

Official command-line tool for managing SpiceDB

161

# awesome-spicedb

Awesome SpiceDB

A thriving, open ecosystem of official and community programs and libraries used to interact with SpiceDB.

Official libraries — get started with official Go, Java, NodeJS, Python, and Ruby client libraries.
Community libraries — leverage additional libraries built and maintained by the SpiceDB community.
Integrations — browse additional integrations for examples of projects that integrate with SpiceDB.

authzed/awesome-spicedbPublic

An awesome list for the SpiceDB ecosystem 😎

...

118

→ /spicedb/ai-development