OpenFGA website screenshot

OpenFGA

OpenFGA is a CNCF incubating high-performance authorization system implementing fine-grained access control based on the Zanzibar model. It provides a flexible relationship-based authorization engine that evaluates access decisions using a type system defined in a modeling language. OpenFGA supports authorization checks, relationship queries, and list operations through its API.

OpenFGA publishes 6 APIs on the APIs.io network, including Assertions API, Authorization Models API, AuthZenService API, and 3 more. Tagged areas include Access Control, Authorization, Cloud Native, Fine-Grained, and Incubating.

OpenFGA’s developer surface includes documentation, engineering blog, and 4 more developer resources.

🌐 Visit website 📡 Source on GitHub
34.5/100 thin ▬ flat Agent 22/100 agent aware Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
AccessFreemium
6 APIs
Access ControlAuthorizationCloud NativeFine-GrainedIncubatingZanzibar

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 34.5/100 · thin
Contract Quality 12.4 / 25
Developer Ergonomics 2.2 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 4.8 / 13
Governance 0.0 / 12
Discoverability 7.2 / 10
Agent readiness — 22/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/openfga: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

OpenFGA Assertions API

The Assertions API from OpenFGA — 1 operation(s) for assertions.

OpenFGA Authorization Models API

The Authorization Models API from OpenFGA — 2 operation(s) for authorization models.

OpenFGA AuthZenService API

The AuthZenService API from OpenFGA — 6 operation(s) for authzenservice.

OpenFGA Relationship Queries API

The Relationship Queries API from OpenFGA — 6 operation(s) for relationship queries.

OpenFGA Relationship Tuples API

The Relationship Tuples API from OpenFGA — 3 operation(s) for relationship tuples.

OpenFGA Stores API

The Stores API from OpenFGA — 2 operation(s) for stores.

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

OpenFGA

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Openfga Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Openfga Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Openfga Finops

FINOPS

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Openfga Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Openfga Agentic Access

24 operations · 17 acting

24 operations · 17 acting

AGENTIC

Resources

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 LlmsText
LlmsText

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrg
GitHubOrg

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity

Company 1

The organization behind the API

Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: openfga
name: OpenFGA
description: OpenFGA is a CNCF incubating high-performance authorization system implementing fine-grained access control based
  on the Zanzibar model. It provides a flexible relationship-based authorization engine that evaluates access decisions using
  a type system defined in a modeling language. OpenFGA supports authorization checks, relationship queries, and list operations
  through its API.
url: https://openfga.dev
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/openfga.png
tags:
- Access Control
- Authorization
- Cloud Native
- Fine-Grained
- Incubating
- Zanzibar
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.19'
type: Index
apis:
- aid: openfga:openfga-assertions-api
  name: OpenFGA Assertions API
  description: The Assertions API from OpenFGA — 1 operation(s) for assertions.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - Assertions
  properties:
  - type: OpenAPI
    url: openapi/openfga-assertions-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
- aid: openfga:openfga-authorization-models-api
  name: OpenFGA Authorization Models API
  description: The Authorization Models API from OpenFGA — 2 operation(s) for authorization models.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - Authorization Models
  properties:
  - type: OpenAPI
    url: openapi/openfga-authorization-models-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
- aid: openfga:openfga-authzenservice-api
  name: OpenFGA AuthZenService API
  description: The AuthZenService API from OpenFGA — 6 operation(s) for authzenservice.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - AuthZenService
  properties:
  - type: OpenAPI
    url: openapi/openfga-authzenservice-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
- aid: openfga:openfga-relationship-queries-api
  name: OpenFGA Relationship Queries API
  description: The Relationship Queries API from OpenFGA — 6 operation(s) for relationship queries.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - Relationship Queries
  properties:
  - type: OpenAPI
    url: openapi/openfga-relationship-queries-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
- aid: openfga:openfga-relationship-tuples-api
  name: OpenFGA Relationship Tuples API
  description: The Relationship Tuples API from OpenFGA — 3 operation(s) for relationship tuples.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - Relationship Tuples
  properties:
  - type: OpenAPI
    url: openapi/openfga-relationship-tuples-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
- aid: openfga:openfga-stores-api
  name: OpenFGA Stores API
  description: The Stores API from OpenFGA — 2 operation(s) for stores.
  humanURL: https://openfga.dev/docs/getting-started
  tags:
  - Stores
  properties:
  - type: OpenAPI
    url: openapi/openfga-stores-api-openapi.yml
  - type: Documentation
    url: https://openfga.dev/docs/getting-started
common:
- type: AgenticAccess
  url: agentic-access/openfga-agentic-access.yml
- type: DomainSecurity
  url: security/openfga-domain-security.yml
- type: Documentation
  name: OpenFGA Documentation
  description: Official OpenFGA documentation.
  url: https://openfga.dev/docs/
- type: GitHubOrg
  name: OpenFGA GitHub
  description: Source code repository.
  url: https://github.com/openfga
- type: LlmsText
  url: https://openfga.dev/llms.txt
- type: Blog
  url: https://openfga.dev/blog/rss.xml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com