A flexible Fine-Grained Authorization system inspired by Google's Zanzibar, designed for reliability and low latency at scale. @CloudNativeFdn Incubation proj.
Joined May 2022
- Tweets366
- Following115
- Followers1.1K
- Likes646
OpenFGA retweeted
proud "dad" moment: Google's new Agent Substrate uses @OpenFGA for authz github.com/agent-substrate/s…
amazing validation for the project we started with @jonallie 5 years ago
🥳 This week we announced Agent Substrate. It's the compute runtime (that can work on Kubernetes) that enables everything you've seen from me. We can suspend and resume so fast that you can do it per tool call.
👉 github.com/agent-substrate/s…
👉 github.com/agent-substrate/e…
OpenFGA retweeted
OpenFGA now work better for developers and AI agents
You can ask questions in the docs, connect OpenFGA knowledge to Claude Code, Codex, Cursor or VS Code via MCP, and access clean, agent-readable docs through llms.txt.
Try it: openfga.dev
OpenFGA retweeted
This one is really special. ❤️
After 5 long years, I finally got the opportunity to take the stage at @NDC_Conferences Sydney.
My talk is now live!
I shared how to safeguard RAG & AI agent systems using @OpenFGA.
A huge thank you to the NDC team for the opportunity!
🎥 Watch it here: youtube.com/watch?v=OK5xPUuc…
OpenFGA retweeted
AI Agent Security: Intent-Based Access Control Blocks Prompt Injection (Source: Ibac)
Intent-Based Access Control (IBAC) prevents prompt injection by enforcing permissions at tool invocation.
#AISecurity #PromptInjection #AccessControl #AIAgents #OpenFGA
🤔 How will intent-based security models reshape the fundamental architecture of secure AI agent interactions?
dailyaiwire.news/article/ai-…
OpenFGA retweeted
Every enterprise is racing to deploy AI agents
But here's the problem no one's talking about:
- These agents need access to production systems. Customer data. Source code. Databases. Finance data. etc.
And most companies? They're giving agents the same permissions as users.
That's not a security model. That's a breach waiting to happen.
I built fine-grained authorization for AI agents using @OpenFGA
Three levels of control:
→ Team level: Engineering gets code tools, Marketing doesn't
→ Project level: auth-service gets DB access, landing-page doesn't
→ Operation level: Only leads can delete repos
Every action verified. Every decision is audited. Blast radius contained.
Full demo: youtu.be/m1_l13bC2O8
OpenFGA retweeted
Don't build AI agents on top of flat authorization.
If your API can't handle granular delegation or scopes, an autonomous agent is just a security breach waiting to happen.
I wrote about the 4 levels of authorization you need before you're ready for AI: auth0.com/blog/api-authoriza…
OpenFGA retweeted
Excited that @OpenFGA has been selected for a Project Lightning Talk at KubeCon Europe 2026 ⚡
One of us from the OpenFGA team will be there to talk about Fine-Grained Authorization, OpenFGA, and security at scale.
See you in Amsterdam 🇳🇱
OpenFGA retweeted
According to @owasp, broken access control is a top application and API security risk.
This guide explores solving it via fine-grained authorization using @auth0 FGA or @OpenFGA
auth0.com/blog/how-fine-grai…
OpenFGA retweeted
AI agents can now chain 12 (even more) API calls autonomously.
Most have zero authorization checks beyond initial OAuth tokens.
Wrote about why RBAC fails for agentic AI and how to build task-scoped delegation with OpenFGA 👇
dev.to/siddhantkcode/securin…
OpenFGA retweeted
🗣️ @chira001, Chief Architect @ @Akamai, discusses three emerging Kubernetes tools: KCP for scaling control planes, OpenTelemetry for observability challenges, and advanced access control systems like OpenFGA and Cedar
Watch the full interview: ku.bz/jHLJL8H6t
OpenFGA retweeted
Today at KubeCon: Design Patterns for Consistent Centralized Authorization
Catch @jpadilla_ (@auth0) & @alicejgibbons (Diagrid) today at 2:30pm. as they show how to keep OpenFGA’s authorization data in sync without relying on a brittle shared database.
Using Dapr’s pub/sub and state management building blocks, they’ll walk through an event-driven architecture that coordinates consistent dual writes across microservices—cleanly, reliably, and at scale.
buff.ly/qjEY57I
OpenFGA retweeted
Esta semana vuelve @madridrb!!
El jueves 30, a las 19:30, @CarlaStabile nos hablará de su experiencia escribiendo la gem para OpenFGA.
Nos vemos en la nueva sede de Lingokids, en Madrid.
Regśitrate en madridrb.com/events/octubre-…
OpenFGA retweeted
good summary of @openfga vs cedar
I published this repository with a hopefully balanced comparison between Cedar and OpenFGA's approach to application authorization, I'll love to hear your thoughts github.com/openfga/openfga-c…
OpenFGA retweeted
Just released @OpenFGA Python SDK v0.9.7 with some DX improvements and bug fixes for working with custom headers. Give it a try and let us know what you think! github.com/openfga/python-sd…
OpenFGA retweeted
WTH is openFGA and implementing Role-Based Access Control in GO servers. #golang #dormosheio #architecture #opensource #security dormoshe.io/trending-news/wt…
OpenFGA retweeted
Learn how to manage dynamic authorization for resources and users with @auth0 FGA/@OpenFGA in an ASPNET Core minimal API
auth0.com/blog/fine-grained-…
#authorization #fga #dotnet #auth0
OpenFGA retweeted
We are still running the annual OpenFGA community survey, please take a few minutes to help us learn how you're using OpenFGA. Thank you!
surveymonkey.com/r/openfga20…
OpenFGA retweeted
Will be giving a lightning talk on OpenFGA at #KubeConNA 2025!
"Google Zanzibar style authorization made developer-friendly"
OpenFGA brings fine-grained, relationship-based access control to your applications.
<3
OpenFGA retweeted
Master Role-Based Access Control Authorization with OpenFGA & Node.js with @OpenFGA and @auth0
Checkout video at youtu.be/L4jTM58pg_U
OpenFGA is a powerful and elegant solution for building scalable and flexible authorization systems.