Topaz
Apache-2.0 authZ: OPA Rego + embedded Zanzibar in one container
Auth / AuthZ · Apache-2.0 · 1.4k
Reviewed 2026-09-04 · last push 2026-10-14 · repo checked 2026-10-21
What's Good
Apache-2.0. OPA Rego policies plus an embedded Zanzibar-style directory in a single binary/container. ABAC and ReBAC without stitching Cerbos to OpenFGA yourself. Self-host is the free path.
The Catch
One container = OPA Rego + embedded Zanzibar directory (ABAC+ReBAC) — not Cerbos YAML-only PDP and not OpenFGA ReBAC-only Check API. Distinct from Cerbos and OpenFGA.
Verdict
Apache-2.0 combined authZ. Self-host free; not a single-model PDP.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/topaz)
HTML
<a href="https://stackgems.com/gems/topaz"><img src="https://stackgems.com/badge/topaz.svg" alt="Topaz reviewed on Stack Gems" height="20"></a>