Open source authorization projects

Every project in the registry tagged authorization, ranked by real GitHub adoption.

projects 9 combined stars ★ 102K refresh nightly
01 Authentik ★ 26K

Take control of your identity with a secure, flexible solution

last push4 hours ago languagePython license
02 Zitadel ★ 15K

Secure, customizable identity infrastructure for developers

last push5 hours ago languageGo licenseAGPL-3.0
03 Logto ★ 15K

Secure, seamless authentication for modern applications

last push9 hours ago languageTypeScript licenseMPL-2.0
04 opa ★ 12K

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

last push3 hours ago languageGo licenseApache-2.0
05 fastapi_mcp ★ 12K

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

last push10 months ago languagePython licenseMIT
06 Hexclave ★ 6.9K

Modular auth, payments, emails, and analytics for your product

last push5 hours ago languageTypeScript license
07 Permify ★ 6.0K

Build scalable authorization in minutes, not months

last push18 hours ago languageGo licenseAGPL-3.0
08 UnKey ★ 5.4K

Secure, scalable API key management for developers

last push4 hours ago languageGo license
09 Cerbos ★ 4.6K

Secure, policy-based access control for modern applications

last push7 hours ago languageGo licenseApache-2.0

Related tags

← all tags

Frequently asked questions

How many open source authorization projects are there?

This registry tracks 9 projects tagged authorization, with 102,312 GitHub stars between them. The most-adopted is Authentik at 25,600 stars.

Are these authorization projects free to use?

Yes — 6 of the 9 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which authorization project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these authorization projects still maintained?

8 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.