{"data":{"slug":"openfga","name":"OpenFGA","tagline":"Apache-2.0 Zanzibar-style ReBAC with a Check API","category":"nextjs","categoryName":"Next.js","url":"https://openfga.dev","github":"https://github.com/openfga/openfga","pricing":"open-source","hook":"OpenFGA is Google Zanzibar-shaped authorization when YAML ABAC is the wrong model.","whatsGood":"Apache-2.0. Relationship-based access control, Check API, modeling language. Self-host the authorization service. CNCF-flavored ReBAC without inventing your own graph.","theCatch":"Zanzibar-style ReBAC + Check API — not Cerbos YAML ABAC. Vs SpiceDB: CNCF/Okta OpenFGA modeling + Check API lane; SpiceDB is AuthZed production Zanzibar + ZedTokens/Cloud. Distinct from Cerbos.","verdict":"Apache-2.0 ReBAC. Self-host free. Not Cerbos YAML.","addedAt":"2026-09-04","featured":false,"domain":"Auth","subSpecialty":"AuthZ","capabilities":["authz","rebac","api"],"surfaces":["API","Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":5701},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/openfga","html":"/gems/openfga","markdown":"/gems/openfga.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}