SpiceDB
Apache-2.0 Google Zanzibar permissions DB; AuthZed Cloud optional
Auth / AuthZ · Freemium · 7k
What's Good
Apache-2.0. Relationship-based authZ graph faithful to Google Zanzibar. Schema language, ZedTokens for consistency, Postgres/Cockroach/Spanner/MySQL stores. Self-host free; AuthZed Cloud is usage-based when you do not want to operate it.
The Catch
Vs OpenFGA/Cerbos/Topaz: AuthZed production Zanzibar + ZedTokens/Cloud — not OpenFGA CNCF Check API twin, not Cerbos YAML PDP, not Topaz Rego+ReBAC bundle. Free path is self-host; Cloud is paid usage.
Verdict
Apache-2.0 Zanzibar permissions DB. Self-host free; AuthZed Cloud optional.
Embed
[](https://stackgems.com/gems/spicedb)