A flexible Fine-Grained Authorization system inspired by Google's Zanzibar, designed for reliability and low latency at scale. @CloudNativeFdn Incubation proj.
Joined May 2022
- Tweets366
- Following115
- Followers1.1K
- Likes646
OpenFGA retweeted
proud "dad" moment: Google's new Agent Substrate uses @OpenFGA for authz github.com/agent-substrate/s…
amazing validation for the project we started with @jonallie 5 years ago
🥳 This week we announced Agent Substrate. It's the compute runtime (that can work on Kubernetes) that enables everything you've seen from me. We can suspend and resume so fast that you can do it per tool call.
👉 github.com/agent-substrate/s…
👉 github.com/agent-substrate/e…
OpenFGA retweeted
OpenFGA now work better for developers and AI agents
You can ask questions in the docs, connect OpenFGA knowledge to Claude Code, Codex, Cursor or VS Code via MCP, and access clean, agent-readable docs through llms.txt.
Try it: openfga.dev
Want to scale OpenFGA in production? Learn how!
Join us THURSDAY 11AM ET for our Community Meeting featuring Lea Einhorn from @KeplerGrp). Her talk "From Simple to Scalable" shares 3 critical lessons that'll save you time and headaches.
Details: github.com/openfga/community…
OpenFGA retweeted
This one is really special. ❤️
After 5 long years, I finally got the opportunity to take the stage at @NDC_Conferences Sydney.
My talk is now live!
I shared how to safeguard RAG & AI agent systems using @OpenFGA.
A huge thank you to the NDC team for the opportunity!
🎥 Watch it here: youtube.com/watch?v=OK5xPUuc…
🗓️ Join the next @OpenFGA Community Meeting!
📅 Thurs June 11 @ 11AM ET
Jose Szychowski from Datum will share how they use OpenFGA to secure Milo OS, a Kubernetes-native B2B platform. Learn practical patterns for multi-tenant auth & K8s! 🔐🚀
Details github.com/openfga/community…
Join tomorrow for our May OpenFGA meeting as we dive into a major architectural shift unlocking next-level performance: Weighted Graphs. 🚀
✅ Why we’re making the shift
✅ The impact on engine internals
✅ Model Migration & compatibility
Details here github.com/openfga/community…
🇳🇱 Pre-KubeCon Amsterdam meetup!
Join the #OpenFGA community this Thursday, March 12th:
🔹 @xensimon Entra ID + OpenFGA (all in #CSharp!)
🔹 @stevehobbsdev on the brand-new #Ruby SDK 💎
See you there: github.com/openfga/community…
#KubeCon #CloudNative #AuthZ
OpenFGA retweeted
AI Agent Security: Intent-Based Access Control Blocks Prompt Injection (Source: Ibac)
Intent-Based Access Control (IBAC) prevents prompt injection by enforcing permissions at tool invocation.
#AISecurity #PromptInjection #AccessControl #AIAgents #OpenFGA
🤔 How will intent-based security models reshape the fundamental architecture of secure AI agent interactions?
dailyaiwire.news/article/ai-…
It's awesome to see OpenFGA featured in the Springer journal, Data Science and Engineering!
"Traditional Role-Based Access Control (RBAC) is too static for dynamic environments like Smart Cities"
link.springer.com/article/10…
We'll start sharing all the cool projects the OpenFGA community is building!
This week, check @Siddhant_K_code's Fine-grained authorization for AI agents using OpenFGA blog and github project dev.to/siddhantkcode/securin…
OpenFGA retweeted
Every enterprise is racing to deploy AI agents
But here's the problem no one's talking about:
- These agents need access to production systems. Customer data. Source code. Databases. Finance data. etc.
And most companies? They're giving agents the same permissions as users.
That's not a security model. That's a breach waiting to happen.
I built fine-grained authorization for AI agents using @OpenFGA
Three levels of control:
→ Team level: Engineering gets code tools, Marketing doesn't
→ Project level: auth-service gets DB access, landing-page doesn't
→ Operation level: Only leads can delete repos
Every action verified. Every decision is audited. Blast radius contained.
Full demo: youtu.be/m1_l13bC2O8
OpenFGA retweeted
Don't build AI agents on top of flat authorization.
If your API can't handle granular delegation or scopes, an autonomous agent is just a security breach waiting to happen.
I wrote about the 4 levels of authorization you need before you're ready for AI: auth0.com/blog/api-authoriza…
OpenFGA retweeted
Excited that @OpenFGA has been selected for a Project Lightning Talk at KubeCon Europe 2026 ⚡
One of us from the OpenFGA team will be there to talk about Fine-Grained Authorization, OpenFGA, and security at scale.
See you in Amsterdam 🇳🇱
Tomorrow, January 8th, we'll host our the first OpenFGA community meeting of 2026!
Agenda:
- Learn how caching and database throttling work in OpenFGA and ListObjects performance improvements
- Watch a live demo of using OpenFGA for MCP Authorization
github.com/openfga/community…
OpenFGA retweeted
According to @owasp, broken access control is a top application and API security risk.
This guide explores solving it via fine-grained authorization using @auth0 FGA or @OpenFGA
auth0.com/blog/how-fine-grai…
Next Thursday 11th, we are wrapping up 2025 with a special presentation!
In addition of our usual agenda, @sfunkrysarah (Head of Engineering & Co-Founder of Openlane) will share their OpenFGA journey :)
⏰December 11th, 11 AM ET/4 PM UTC/8 AM PT
github.com/openfga/community…
OpenFGA retweeted
AI agents can now chain 12 (even more) API calls autonomously.
Most have zero authorization checks beyond initial OAuth tokens.
Wrote about why RBAC fails for agentic AI and how to build task-scoped delegation with OpenFGA 👇
dev.to/siddhantkcode/securin…