{"data":{"slug":"spicedb","name":"SpiceDB","tagline":"Apache-2.0 Google Zanzibar permissions DB; AuthZed Cloud optional","category":"nextjs","categoryName":"Next.js","url":"https://authzed.com/spicedb/","github":"https://github.com/authzed/spicedb","pricing":"freemium","hook":"SpiceDB is the AuthZed Zanzibar permissions database when OpenFGA is the CNCF twin and Cerbos is YAML ABAC.","whatsGood":"Apache-2.0. Relationship-based authZ graph faithful to Google Zanzibar. Schema language, ZedTokens for consistency, Postgres/Cockroach/Spanner/MySQL stores. Self-host free; AuthZed Cloud is usage-based when you do not want to operate it.","theCatch":"Vs OpenFGA/Cerbos/Topaz: AuthZed production Zanzibar + ZedTokens/Cloud — not OpenFGA CNCF Check API twin, not Cerbos YAML PDP, not Topaz Rego+ReBAC bundle. Free path is self-host; Cloud is paid usage.","verdict":"Apache-2.0 Zanzibar permissions DB. Self-host free; AuthZed Cloud optional.","addedAt":"2026-09-04","featured":false,"domain":"Auth","subSpecialty":"AuthZ","capabilities":["authz","rebac","zanzibar"],"surfaces":["Self-host","Hosted"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Freemium","githubStars":7021},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/spicedb","html":"/gems/spicedb","markdown":"/gems/spicedb.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}