authzen

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

Keycloak integration with OpenFGA and Apache APISIX for multi-tenancy authentication and authorization at Scale

Authorization and access control tools, frameworks, standards, and resources.

Skills for coding agents

Frank!Gateway is an API gateway built for the specific needs of Dutch municipalities

This repository contains an extended version of OPA (OPA-AuthZEN) that implements the OpenID AuthZEN Authorization API 1.0.

AuthZEN NL Gov is een standaard voor autorisatie. Het beschrijft de wijze waarop toegangsvragen en -beslissingen uitgewisseld worden tussen applicaties/API's en autorisatiesoftware

SPIFFE-compatible workload identity + OpenID AuthZEN 1.0 authorization in a single Apache-2.0 binary. Cedar PDP, SPIFFE federation, tamper-evident audit log, Kubernetes operator.

Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.

De publieke website van het project Federatieve Toegangsverlening (FTV). FTV stelt standaarden voor in het kader van autorisatie, in het bijzonder in federatieve datastelsels.

Agent Trust — open profile + reference implementation for proving what an autonomous AI agent is authorized to do: identity, delegation with attenuation, proof-of-possession, attestations, tamper-evident provenance. Built on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A.

A token procedure plugin enabling callout to an AuthZEN compliant authorizations service (PDP)

OpenID AuthZEN Authorization API for Policy Decision and Enforcement

Verifiable delegation for AI agents — signed chains rooted in a human sponsor, attenuating at every hop, revocable per link, and evaluated across whole action sequences.

A proxy that converts from AuthZEN into XACML requests and back

Pointer to kanywst/opa-authzen-plugin — the OPA plugin implementing the OpenID AuthZEN Authorization API 1.0.

Open interoperability and conformance kit for progressive autonomy across evidence, PAA and AuthZEN

Reference implementation of policy-embedded credential authorization for AI agents (arXiv:2605.11487). Issue signed credentials with machine-evaluable constraints, verify at runtime, produce signed audit decisions.

Go implementation of the OpenID AuthZEN Authorization API 1.0 — PEP and PDP wire protocol

Het logboek toegangsbeslissingen (authorization decision log) is een standaard voor het vastleggen van genomen toegangsbeslissingen. Het logboek is bedoeld voor verantwoording achteraf (audit)