Ory Permissions Onboarding
Agent-tool auth: observe → enforce, default-allow + deny
Ory · Apache-2.0
When
Onboard native agent-tool authorization — connect plugin, review allowed/blocked tools, write blocks in Console, promote observe to enforce.
The Catch
Network Developer Free $0 = PoC only (2 development envs, 0 prod/staging, 1 member). Production Network from ~$770/yr. Uncapped $0 = OSS self-host Apache-2.0 (incl. Keto). Skills Apache-2.0. Distinct from Descope (MAU-capped cloud free tier).
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/skills/ory-permissions-onboarding)