warrant-dev/warrant

Health v2 · maintenance only

Adoption not part of the score

1336 stars · 53 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Warrant is a highly scalable, centralized fine-grained authorization service inspired by Google Zanzibar, written in Go. It lets applications define, enforce, query, and audit access control rules supporting RBAC, ABAC, and ReBAC paradigms via HTTP APIs and SDKs.

Use cases

• add role-based access control to a SaaS application
• check if a user is an editor of a document at runtime
• implement fine-grained permissions with tenants and pricing tiers
• self-service role and permission management for customers
• audit application access rules and entitlements
• integrate authorization with Auth0 or Firebase identity providers

When to choose

• you need centralized, low-latency authorization checks across multiple applications
• you want Zanzibar-style relationship-based access control without building it yourself
• you need to support RBAC, ABAC, and ReBAC in one service

When to avoid

• you only need simple authentication (authn), not authorization
• you want a fully managed service and prefer WorkOS FGA, its successor
• your stack cannot run a separate Go service or supported database

Facets

service · maturity active

authorization api-framework http-server security backend web-development developer-tools self-hosted windows go zanzibar rebac rbac abac fine-grained-authorization access-control entitlements iam docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="warrant-dev/warrant")