# lakekeeper/lakekeeper

Apache Iceberg REST Catalog in Rust — access control, credential vending and audit for every engine and AI agent. Apache 2.0.

Repository: https://github.com/lakekeeper/lakekeeper
Canonical: https://ross.abutalabs.com/products/lakekeeper
Homepage: https://docs.lakekeeper.io
Language: Rust
License: Apache-2.0
License Family: permissive
Topics: catalog, data-lake, iceberg, lakehouse, rust, lakehouse-governance, open-lakehouse, access-control, apache-iceberg, data-governance, iceberg-rest-catalog, openfga, rbac
Last push: 2026-08-26T18:15:38+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 98, longevity 62
- inputs: {"age_days": 880, "days_push": 7, "days_rel": 16, "gap_med": 12.5, "n_releases_24m": 47}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1426, forks 156 (observed 2026-08-28T04:04:41.632737+00:00)

## What it is
Lakekeeper is an Apache Iceberg REST Catalog implementation written in Rust that provides centralized access control, credential vending, and auditing for data lakehouse engines. It lets you define permissions once in the catalog and enforce them across every compute engine (Spark, Trino, Flink, DuckDB, PyIceberg) and AI agents, powered by OpenFGA.

## Use cases
- run a self-hosted Apache Iceberg REST catalog for my data lakehouse
- centralize access control across Spark, Trino, and DuckDB instead of per-engine rules
- vend storage credentials securely to query engines and AI agents
- implement RBAC or fine-grained permissions on Iceberg tables
- audit every read and write against my data lake
- govern Lance, Delta, and Parquet tables alongside Iceberg in one catalog
- integrate lakehouse permissions with Okta or Microsoft Entra ID groups

## When to choose
- you need a fast, standards-compliant Iceberg REST catalog with centralized governance
- you want fine-grained access control (RBAC/ReBAC/ABAC) enforced at the catalog level for humans and AI agents
- you need credential vending and audit logging for a multi-engine lakehouse
- you prefer a Rust-native, self-hosted catalog deployable via Docker or Kubernetes

## When to avoid
- you only need a lightweight single-user catalog without access control requirements
- your persistence layer cannot be Postgres (currently the only supported backend)
- you need a fully managed cloud catalog service rather than self-hosted infrastructure

## Facets
- artifact type: service
- maturity: active
- function: database, auth, authorization, api-framework, http-server, search-engine, monitoring, secrets-management, self-hosted
- domain: databases, big-data, analytics, security, self-hosted, apis
- platform: rust, self-hosted
- tags: apache-iceberg, iceberg-rest-catalog, lakehouse, data-governance, credential-vending, openfga, rbac, data-lake, catalog, data-engineering, docker, kubernetes, web-server, linux, macos

## Member repositories
- lakekeeper/lakekeeper (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:41.632737+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:37:27.242239+00:00, confidence not recorded.
  - readme: https://github.com/lakekeeper/lakekeeper (fetched 2026-08-28T04:04:41.632737+00:00, sha 7db2c81c7ddb)
  - homepage: https://docs.lakekeeper.io (fetched 2026-08-29T11:49:23.729184+00:00, sha 7d00aac0bfb8)
  - site_page: https://docs.lakekeeper.io/getting-started (fetched 2026-08-29T11:49:23.738402+00:00, sha 89a2f2d070ef)
  - site_page: https://docs.lakekeeper.io/docs/nightly/concepts (fetched 2026-08-29T11:49:23.740564+00:00, sha 4580161418db)
  - site_page: https://docs.lakekeeper.io/about/subscribe (fetched 2026-08-29T11:49:23.742779+00:00, sha 83fcabd1cdbd)
  - site_page: https://docs.lakekeeper.io/about/license (fetched 2026-08-29T11:49:23.744313+00:00, sha 082bff3466aa)
  - site_page: https://docs.lakekeeper.io/docs/nightly/api-overview (fetched 2026-08-29T11:49:23.746138+00:00, sha 6f4f78eb669e)
  - site_page: https://docs.lakekeeper.io/docs/nightly/api/catalog (fetched 2026-08-29T11:49:23.747713+00:00, sha 4235a959635d)
  - site_page: https://docs.lakekeeper.io/docs/nightly/api/generic-table (fetched 2026-08-29T11:49:23.749192+00:00, sha 8c66b9ab5c2b)
  - site_page: https://docs.lakekeeper.io/docs/nightly/api/management (fetched 2026-08-29T11:49:23.751187+00:00, sha dea5d6052fcc)
- Data as of 2026-08-30T08:39:29.467469+00:00.