{"slug": "openfga", "name": "OpenFGA", "category": "other", "category_name": "Other software", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.612, "rising": -0.98, "first": "2026-01-26", "latest": "2026-07-07", "why": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code.", "icon": false, "domain": "openfga.dev", "github_repo": null, "official_url": "https://openfga.dev", "pricing": "", "aliases": ["OpenFGA"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 781126256, "item_id": 48820391, "url": "https://news.ycombinator.com/item?id=48820391", "by": "vaishnavsm", "date": "2026-07-07", "stance": "recommend", "quote": "I've found OpenFGA^ to be really nice.", "excerpt": "If you're willing to take the pain of setting up an actual authz model, I've found OpenFGA^ to be really nice. We used it to set up some pretty complex authz involving cross-agent/user/org creation and sharing of data. It's not _simple_, but it is effective. It's Apache 2.0 and a CNCF incubating project. [^] https://openfga.dev/", "context": "built complex cross-agent/user/org authz", "use_case": "authorization modeling", "switched_from": "", "story": "Better Auth is joining Vercel"}, {"id": 750396960, "item_id": 46899810, "url": "https://news.ycombinator.com/item?id=46899810", "by": "jcmartinezdev", "date": "2026-02-05", "stance": "recommend", "quote": "systems like openfga can help make that easier by centralizing the authorization policies", "excerpt": "I've seen solutions implementing authorization in multiple ways, some still rely on the underlying services that map to the tools, guaranteeing the AT sent to those services is acting on behalf of the user. Other's do checks at the tool level, systems like openfga can help make that easier by centralizing the authorization policies.", "context": "", "use_case": "authorization for AI agent tools", "switched_from": "", "story": "Ask HN: How are you enforcing permissions for AI agent tool calls in production?"}, {"id": 748361296, "item_id": 46772581, "url": "https://news.ycombinator.com/item?id=46772581", "by": "yehia2amer", "date": "2026-01-26", "stance": "recommend", "quote": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code.", "excerpt": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code. But it always had this issue with Admin management, It is hard for Admins to understand and maintain. That\u2019s why I created an Admin UI for OpenFGA, The main goal is that the UI is Dynamic and it changes as per your OpenFGA Model, Then you can Easily Add users I built this because my team was ", "context": "", "use_case": "authorization", "switched_from": "", "story": "Taming P99s in OpenFGA: How we built a self-tuning strategy planner"}]}], "caveats": [], "who": [{"by": "vaishnavsm", "context": "built complex cross-agent/user/org authz", "url": "https://news.ycombinator.com/item?id=48820391", "date": "2026-07-07"}], "tags": [], "use_cases": ["authorization modeling", "authorization for ai agent tools", "authorization"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48819512", "title": "Better Auth is joining Vercel", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46740645", "title": "Ask HN: How are you enforcing permissions for AI agent tool calls in production?", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46724542", "title": "Taming P99s in OpenFGA: How we built a self-tuning strategy planner", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"recommend": 1}, "2026-02": {"recommend": 1}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 781126256, "item_id": 48820391, "url": "https://news.ycombinator.com/item?id=48820391", "by": "vaishnavsm", "date": "2026-07-07", "stance": "recommend", "quote": "I've found OpenFGA^ to be really nice.", "excerpt": "If you're willing to take the pain of setting up an actual authz model, I've found OpenFGA^ to be really nice. We used it to set up some pretty complex authz involving cross-agent/user/org creation and sharing of data. It's not _simple_, but it is effective. It's Apache 2.0 and a CNCF incubating project. [^] https://openfga.dev/", "context": "built complex cross-agent/user/org authz", "use_case": "authorization modeling", "switched_from": "", "story": "Better Auth is joining Vercel"}, {"id": 750396960, "item_id": 46899810, "url": "https://news.ycombinator.com/item?id=46899810", "by": "jcmartinezdev", "date": "2026-02-05", "stance": "recommend", "quote": "systems like openfga can help make that easier by centralizing the authorization policies", "excerpt": "I've seen solutions implementing authorization in multiple ways, some still rely on the underlying services that map to the tools, guaranteeing the AT sent to those services is acting on behalf of the user. Other's do checks at the tool level, systems like openfga can help make that easier by centralizing the authorization policies.", "context": "", "use_case": "authorization for AI agent tools", "switched_from": "", "story": "Ask HN: How are you enforcing permissions for AI agent tool calls in production?"}, {"id": 748361296, "item_id": 46772581, "url": "https://news.ycombinator.com/item?id=46772581", "by": "yehia2amer", "date": "2026-01-26", "stance": "recommend", "quote": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code.", "excerpt": "I really respect OpenFGA & team behind it, I used it in multiple projects and it completely eliminate the AuthZ from our code. But it always had this issue with Admin management, It is hard for Admins to understand and maintain. That\u2019s why I created an Admin UI for OpenFGA, The main goal is that the UI is Dynamic and it changes as per your OpenFGA Model, Then you can Easily Add users I built this because my team was ", "context": "", "use_case": "authorization", "switched_from": "", "story": "Taming P99s in OpenFGA: How we built a self-tuning strategy planner"}]}