#3 Product of the week · Launched January 30, 2024
SpiceDB

SpiceDB

Open Source, Google Zanzibar-inspired, fine-grained permissions management. https://play.authzed.com/schema

FreeSecurityFrameworkDB22,990 impressions#3 of its week1 comment

Comments

>log in to comment
  • Victor RB· 3y ago

    Hey! 👋 I'm Victor and I am a maintainer of the SpiceDB open-source project. Like many of the members of our community, I also have been working on the in-house authorization systems of large engineering organizations for many years, and I've witnessed first-hand the pain of scaling and maintaining them as business grows. It does not have to be that way. Join the SpiceDB community (https://authzed.com/discord), we'd be happy to help you in your journey to solve authorization once and for all 🚀

SpiceDB is the most scalable and consistent Google Zanzibar-inspired database for storing and computing permissions data—use it to build global-scale fine-grained authorization services.

SpiceDB is an open-source, Google Zanzibar-inspired database for fine-grained permissions at scale.

for
Developers building authorization services for cloud-native applications.
pricing
freemium
license
Apache-2.0
authzed/spicedb 7.1k 429Goupdated 17 days ago
works withGoJavaNodeJSPythonRubyKubernetesPrometheusOpenTelemetry

Key features

8 features of SpiceDB
  • Expressive APIs — gRPC and HTTP/JSON endpoints for authorization logic.
  • Distributed Graph Engine — Parallel graph processing faithful to the Zanzibar architecture.
  • Pluggable Storage — Supports in-memory, Spanner, CockroachDB, PostgreSQL and MySQL backends.
  • Configuration Language — SpiceDB Schema lets you define relationships, permissions and caveats.
  • Deep Observability — Prometheus metrics, pprof profiles, structured logging and OpenTelemetry tracing.
  • Kubernetes Operator — Manage, scale and upgrade SpiceDB clusters with a single resource.
  • zed CLI — Command-line tool for schema validation, permission checks and context switching.
  • Official Client Libraries — Go, Java, NodeJS, Python and Ruby SDKs for easy integration.

Use cases

  • Implement fine-grained access control for multi-tenant SaaS platforms.
  • Build permission-aware AI services that need real-time authorization checks.
  • Migrate legacy ACL systems to a scalable graph-based permission model.
  • Enforce ABAC policies for large-scale advertising or content platforms.

SpiceDB vs alternatives

SpiceDBClerkCorbadoimgproxyLangfuse
Best forZanzibar-style permission databasesComprehensive user managementPasswordless loginImage processingLLM observability
PricingFreemiumFreeFreeFreeSubscription
DevHunt upvotes2761739589
LaunchedJan 2024Apr 2024Mar 2024Feb 2024Jan 2023
  • SpiceDB vs Clerk: Provides a broader user-management platform with built-in auth UI, not a low-level permission graph DB.
  • SpiceDB vs Corbado: Focuses on passkey-first authentication rather than fine-grained permission graphs.
  • SpiceDB vs imgproxy: Self-hosted image processing service, unrelated to authorization but also open source.
  • SpiceDB vs Langfuse: Observability for LLM apps, not a permissions database.

SpiceDB FAQ

Is SpiceDB a database?+

Yes, it is a database designed specifically for storing and computing permissions data.

What is the licensing model?+

SpiceDB is released under the Apache-2.0 open source license.

How does SpiceDB handle consistency?+

It offers a flexible consistency model configurable per request, addressing the New Enemy Problem.

What support options are available?+

Community support via Discord and GitHub, plus paid professional support plans for enterprise customers.

Can I run SpiceDB on Kubernetes?+

Yes, there is an official SpiceDB Operator for deploying and managing clusters on Kubernetes.

Summarized by DevHunt from authzed.com · Sep 27, 2026. Details may change; check the official site.