OpenFGA

A flexible Fine-Grained Authorization system inspired by Google's Zanzibar, designed for reliability and low latency at scale. @CloudNativeFdn Incubation proj.

[Chris Aniszczyk @cra]

#OpenFGA docs got a nice face lift! https://t.co/TYibF9pwZA

[yenkel @yenkel]

proud "dad" moment: Google's new Agent Substrate uses @OpenFGA for authz https://t.co/w45mWtD1It

amazing validation for the project we started with @jonallie 5 years ago

[Siddhant Khare @Siddhant_K_code]

OpenFGA now work better for developers and AI agents

You can ask questions in the docs, connect OpenFGA knowledge to Claude Code, Codex, Cursor or VS Code via MCP, and access clean, agent-readable docs through llms.txt.

Try it: https://t.co/DF8RRgu0sR

[OpenFGA @OpenFGA]

Want to scale OpenFGA in production? Learn how!

Join us THURSDAY 11AM ET for our Community Meeting featuring Lea Einhorn from @KeplerGrp). Her talk "From Simple to Scalable" shares 3 critical lessons that'll save you time and headaches.

Details: https://t.co/sumxizEned

[Shivay Lamba @HowDevelop]

This one is really special. ❤️

After 5 long years, I finally got the opportunity to take the stage at @NDC_Conferences Sydney.

My talk is now live!

I shared how to safeguard RAG & AI agent systems using @OpenFGA.

A huge thank you to the NDC team for the opportunity!

🎥 Watch it here: https://t.co/X19OzBTEbj

[OpenFGA @OpenFGA]

🗓️ Join the next @OpenFGA Community Meeting!
📅 Thurs June 11 @ 11AM ET

Jose Szychowski from Datum will share how they use OpenFGA to secure Milo OS, a Kubernetes-native B2B platform. Learn practical patterns for multi-tenant auth & K8s! 🔐🚀

Details https://t.co/sumxizEV3L

[OpenFGA @OpenFGA]

Join tomorrow for our May OpenFGA meeting as we dive into a major architectural shift unlocking next-level performance: Weighted Graphs. 🚀

✅ Why we’re making the shift
✅ The impact on engine internals
✅ Model Migration & compatibility

Details here https://t.co/sumxizEV3L

[OpenFGA @OpenFGA]

🇳🇱 Pre-KubeCon Amsterdam meetup!

Join the #OpenFGA community this Thursday, March 12th:

🔹 @xensimon Entra ID + OpenFGA (all in #CSharp!)
🔹 @stevehobbsdev on the brand-new #Ruby SDK 💎

See you there: https://t.co/sumxizEned

#KubeCon #CloudNative #AuthZ

[Daily AI Wire News @DailyAIWireNews]

AI Agent Security: Intent-Based Access Control Blocks Prompt Injection (Source: Ibac)

Intent-Based Access Control (IBAC) prevents prompt injection by enforcing permissions at tool invocation.

#AISecurity #PromptInjection #AccessControl #AIAgents #OpenFGA

🤔 How will intent-based security models reshape the fundamental architecture of secure AI agent interactions?

https://t.co/h2bila6w3f

[OpenFGA @OpenFGA]

It's awesome to see OpenFGA featured in the Springer journal, Data Science and Engineering!

"Traditional Role-Based Access Control (RBAC) is too static for dynamic environments like Smart Cities"

https://t.co/33aEQxp3IH

[OpenFGA @OpenFGA]

The github project is here Github: https://t.co/hQyChBv9TH

[OpenFGA @OpenFGA]

We'll start sharing all the cool projects the OpenFGA community is building!

This week, check @Siddhant_K_code's Fine-grained authorization for AI agents using OpenFGA blog and github project https://t.co/L54rVAY2Qf

[Siddhant Khare @Siddhant_K_code]

Every enterprise is racing to deploy AI agents

But here's the problem no one's talking about:

- These agents need access to production systems. Customer data. Source code. Databases. Finance data. etc.

And most companies? They're giving agents the same permissions as users.

That's not a security model. That's a breach waiting to happen.

I built fine-grained authorization for AI agents using @OpenFGA

Three levels of control:
→ Team level: Engineering gets code tools, Marketing doesn't
→ Project level: auth-service gets DB access, landing-page doesn't
→ Operation level: Only leads can delete repos

Every action verified. Every decision is audited. Blast radius contained.

Full demo: https://t.co/Mff5Fs4tyJ

[OpenFGA @OpenFGA]

Try `npx skills add openfga/agent-skills`

[Guillermo Rauch @rauchg]

We're introducing 𝚜𝚔𝚒𝚕𝚕𝚜 – the "npm" of AI skills. Excited to see an open, agent-agnostic ecosystem of skills flourish.

To get started, try:
▲ ~/ npx skills i vercel-labs/agent-skills

[Andrés Aguiar @aaguiar]

Don't build AI agents on top of flat authorization.

If your API can't handle granular delegation or scopes, an autonomous agent is just a security breach waiting to happen.

I wrote about the 4 levels of authorization you need before you're ready for AI: https://t.co/FicpSAQCNo

[Siddhant Khare @Siddhant_K_code]

Excited that @OpenFGA has been selected for a Project Lightning Talk at KubeCon Europe 2026 ⚡

One of us from the OpenFGA team will be there to talk about Fine-Grained Authorization, OpenFGA, and security at scale.

See you in Amsterdam 🇳🇱

[OpenFGA @OpenFGA]

Tomorrow, January 8th, we'll host our the first OpenFGA community meeting of 2026!

Agenda:
- Learn how caching and database throttling work in OpenFGA and ListObjects performance improvements
- Watch a live demo of using OpenFGA for MCP Authorization

https://t.co/sumxizEned

[Andrea Chiarelli @andychiare]

According to @owasp, broken access control is a top application and API security risk.
This guide explores solving it via fine-grained authorization using @auth0 FGA or @OpenFGA
https://t.co/xdWfppOGCU

[OpenFGA @OpenFGA]

Next Thursday 11th, we are wrapping up 2025 with a special presentation!

In addition of our usual agenda, @sfunkrysarah (Head of Engineering & Co-Founder of Openlane) will share their OpenFGA journey :)

⏰December 11th, 11 AM ET/4 PM UTC/8 AM PT

https://t.co/sumxizEV3L

[Siddhant Khare @Siddhant_K_code]

AI agents can now chain 12 (even more) API calls autonomously.

Most have zero authorization checks beyond initial OAuth tokens.

Wrote about why RBAC fails for agentic AI and how to build task-scoped delegation with OpenFGA 👇

https://t.co/OsljBWpZkk