Lib.rs

fs-err

A drop-in replacement for std::fs with more helpful error messages

aws-sdk-ecr

AWS SDK for Amazon Elastic Container Registry

fs-mistrust

Ensure that files can only be read or written by trusted users

librespot-metadata

The metadata logic for librespot

aws-sdk-dataexchange

AWS SDK for AWS Data Exchange

aws-sdk-accessanalyzer

AWS SDK for Access Analyzer

mycelium-api

Provide API ports to the mycelium project

aws-sdk-braket

AWS SDK for Braket

mycelium-base

package with useful dependencies for Rust packages

actix-web-grants

Authorization extension actix-web to protect your endpoints

gtc

Greentic - The digital workers operating system

gtc-dev

Greentic - The digital workers operating system

mycelium-memory-db

Provide memory database adapters to the mycelium project

mycelium-cli

Provide CLI ports to the mycelium project

aws-sdk-workdocs

AWS SDK for Amazon WorkDocs

cerbos

Rust SDK for working with Cerbos: an open core, language-agnostic, scalable authorization solution

revolt-database

Revolt Backend: Database Implementation

aws-sdk-workmail

AWS SDK for Amazon WorkMail

neimar

TUI app for managing multiple AI bot sessions in a terminal

aws-sdk-marketplaceagreement

AWS SDK for AWS Marketplace Agreement Service

aws-sdk-directoryservicedata

AWS SDK for AWS Directory Service Data

elaborate

Wrappers for standard library functions and types to produce more elaborate error messages

mycelium-diesel

Provide diesel adapters to the mycelium project

ravelact

Static analysis CLI for GitHub Actions workflow estates

simple-zanzibar

A simplified Rust implementation of Google's Zanzibar authorization system with DSL support

tauri-plugin-notifications

A Tauri v2 plugin for sending notifications on desktop and mobile platforms with support for system notifications and push delivery via FCM and APNs

mycelium-openapi

Provide OpenAPI related elements to the mycelium project

tirea-extension-permission

Tool-level permission policies and user-approval gating for tirea agents

revolt-models

Revolt Backend: API Models

warg-protocol

operator and package log protocols for Warg registries

aws-sdk-marketplacereporting

AWS SDK for AWS Marketplace Reporting Service

mycelium-adapters-shared-lib

Shared library for the mycelium adapters layer

mycelium-config

Provide config manager features of the Mycelium project as and use-cases

mycelium-notifier

Provide message adapters to the mycelium project

revolt-presence

Revolt Backend: User Presence

cap_access

Provide basic capability-based access control to objects

whyno-core

Permission check pipeline, fix engine, and state types

aws-sdk-appfabric

AWS SDK for AppFabric

aws-sdk-qapps

AWS SDK for QApps

aws-sdk-observabilityadmin

AWS SDK for CloudWatch Observability Admin Service

poem-grants

Authorization extension for poem to protect your endpoints

mycelium-key-value

Provide key-value adapters to the mycelium project

role-system

A flexible and powerful role-based access control (RBAC) library for Rust applications

turbo-clicker

GUI based auto-clicker for Linux (X11/Wayland) that simulates virtual input via enigo

mycelium-service

Provide smtp adapters to the mycelium project

myc-core

Provide base features of the Mycelium project as s and Use-cases

gkill

chmod-bpf

Managing BPF device permissions on macOS

zad

Typed Rust library for connecting AI agents to external services (Discord, Slack, Google Calendar, Spotify, Telegram, YouTube Music, 1Password) via scoped service configurations. Use zad-cli for the binary.

v_authorization

authorization lib

mycelium-http-tools

Provide HTTP related elements to the mycelium project

gha-github-service-proof

GitHub Actions service/API compatibility checker for offline CI: GITHUB_TOKEN permissions, REST/GraphQL/gh CLI calls, OIDC, checks/statuses, releases, and issues

ory-keto-client

OpenAPI API client for Ory Keto, Ory's open source 'Zanzibar - Google's Consistent, Global Authorization System' implementation

astrid-capabilities

Capability token system for Astrid secure agent runtime

warg-cli

The warg registry command line interface

claude-rust

Interactive CLI for Claude AI

agentkit-tools-core

Tool traits, registry, execution, permissions, approvals, and auth for agentkit

rustbasic-permission

Role and Permission management package for the RustBasic Framework

deno_permissions

deno permissions implementation

commy

A hierarchical, multi-tenant shared memory coordination system for Windows enabling secure, efficient data sharing between multiple processes via WebSocket and direct memory-mapping

agentkit-loop

Runtime-agnostic loop driver, interrupts, and model session traits for agentkit

opencode-agency

CLI tool to manage OpenCode agent permissions via template+override system

quickpeach-plugin-host

QuickPeach's typed plugin host runtime and import model

filebyte

A powerful CLI tool for analyzing files and directories with detailed metadata, permissions, and size information

deno_net

Networking for Deno

cedar-agent

HTTP server designed to efficiently manage a policy store and a data store. It provides a seamless integration with Cedar, a language for defining permissions as policies.

obliterate

Force-remove Files and Directories on Linux Including Paths with 000 Permissions

rocket-grants

Authorization extension for rocket to protect your endpoints

rs-tenant

Multi-tenant RBAC authorization engine for Rust

philharmonic-policy

Policy and tenancy for Philharmonic: Tenant, Principal, RoleDefinition, RoleMembership, MintingAuthority, AuditEvent entity kinds with permission evaluation

hookwise

Intelligent permission gating for AI coding assistants

allowthem-server

HTTP server and middleware for allowthem

allowthem-saas

SaaS multi-tenancy layer for allowthem

dabin

yes. — classify a bash command as approve/defer/deny under explicit policies

umask

deal with unix access mode

sideko_rest_api

Rust API Client

cp_r

Copy files and directories recursively, preserving mtime and permissions

whyno-cli

Linux permission debugger

cueward-adapter-macos

macOS adapter for Cueward with Safari, Notes, Messages, Reminders, Calendar, Screenshot, Clipboard, and OCR integrations

apiari-claude-sdk

Rust SDK for the Claude CLI — spawn, stream, and manage Claude agent sessions

warg-protobuf

Protobuf definitions for the Warg protocol

spotifai

CLI for managing your Spotify library and playlists via natural-language queries, powered by zag (agent) and zad (Spotify integration)

wraith-plugins

Plugin system for the WRAITH AI coding agent

bitbottle

a modern archive file format

tauri-plugin-shellx

Unlocked Tauri Shell Plugin

write_atomic

Write to files atomically

inferadb

Official Rust SDK for InferaDB

ax-cap-access

Provide basic capability-based access control to objects

permission-flow

macOS permission onboarding UI for Rust apps

rootcx-types

RootCX shared types

soft-fido2

A pure Rust implementation of FIDO2/WebAuthn CTAP 2.0/2.1 protocol

wsdg-app-manifest

WASMA Manifest and Permission Source Parser

service-install

Easily provide users an install method on Linux systems

whyno-gather

Linux OS state gathering — stat, ACL, mount, fsflags, and capabilities

filemode

Type-safe, zero-cost conversions between Unix mode_t and Go os.FileMode formats

objectstore-types

Shared types for the Objectstore client and server

revolt-permissions

Revolt Backend: Permission Logic

axum-casbin

Casbin axum access control middleware

rootcx-platform

RootCX platform utilities

evolve-core

Core engine for Evolve: genome trait, operators, generation cycle

toolcap

specifying tool use permissions in agentic applications

mycelium-api-test-svc

Mycelium API Test Service

piko-permissions

Permission and access control for PikoClaw

opencode-orchestrator-mcp

MCP server for orchestrator-style agents to spawn and manage OpenCode sessions

sendinblue-v3

SendinBlue provide a RESTFul API that can be used with any languages. With this API, you will be able to : - Manage your campaigns and get the statistics - Manage your contacts…

tauri-plugin-nostrnative

Nostr native capabilities for Tauri

alhalo

Linux system audit library and CLI for home users and sysadmins

finit

defining sets of data, and then performing set operations on them. It is designed to be used for permission systems, but can be used for any kind of data that can be represented as a set.

zerodds-security-permissions

DDS-Security 1.1 Permissions/Governance-XML-Parser + Access-Control-Plugin (S/MIME-CMS-Signatur via rustls-webpki, Topic-Wildcard-Match, Delegation-Chain)

deputy

experimental terminal-based AI coding assistant that integrates directly with your filesystem and shell. Deputy leverages agentic LLM systems to read code, manipulate files, execute shell commands…

tapis-actors

Abaco (Actor Based Containers) is an API and distributed computing platform funded by the National Science Foundation to provide Functions-as-a-service to the research computing community…

polar-core

Polar core library for oso, an open source policy engine for authorization that’s embedded in your application

zad-cli

Command-line interface for zad — connects AI agents to external services (Discord, Slack, Google Calendar, Spotify, Telegram, YouTube Music, 1Password) via scoped service configurations

tauri-plugin-android-mediastore

A Tauri plugin for accessing Android MediaStore API

blackwall-core

Core policy engine for the Blackwall Protocol — a deterministic execution firewall for AI agents

reinhardt-admin

Admin panel functionality for Reinhardt framework

waycast

A self-hostable observability and analytics platform for LLM applications

evolve-mutators

Mutation operators that vary AgentConfig to produce challengers

aws-sdk-uxc

AWS SDK for AWS User Experience Customization

verdant-highlight

Stripped-down and slightly modified fork of tree-sitter-highlight for use by verdant

stec_tenet

User and Tenant management for Saas applications

brainwires-permissions

Permission policies, audit logging, and trust profiles for the Brainwires Agent Framework

dab-cli

Android package manager CLI tool

actix-casbin-auth

Casbin actix-web access control middleware

nats-io-jwt

Generate JWTs signed using NKEYs for use with https://nats.io

alpe-auth

JWT authentication, password hashing, and RBAC policy for the Alpe platform

tapis-apps

The Tapis Applications API provides for management of Tapis applications including permissions

holodeck-core

Standalone MUD engine — room graph, agents, gauges, scoped comms

pro-plugin

Plugin SDK for Pro Python package manager

ninmu-runtime

Conversation runtime and config for the Ninmu Code ecosystem

laye

A framework-agnostic role and permission based access control library

hh-cli

A terminal-based coding agent runtime

kernex-skills

Skills.sh-compatible skill loader and trigger matcher for Kernex

claude-rust-types

Shared domain types for messages, providers, tools, and permissions

alien-permissions

Deploy software into your customers' cloud accounts and keep it fully managed

safe-chains

Auto-allow safe bash commands in agentic coding tools

ant-registers

Register logic for Autonomi

car-permissions

Cross-platform permission preflight for Common Agent Runtime

adabraka_util

A collection of utility structs and functions for Adabraka GPUI (originally from Zed - github.com/zed-industries/zed)

prism_lib_rs

Rust SDK for integrating the Prism OAuth 2.0 / OpenID Connect identity platform

portcullis

A quotient lattice for AI agent permissions that prevents the 'uninhabitable state'

clash

Command Line Agent Safety Harness — permission policies for coding agents

permissions

query for file permissions (read, write, execute, removal and creation)

amp-sdk

Rust SDK for Amp, an agentic coding assistant

buffr-permissions

SQLite-backed per-origin permissions store for buffr

pib-service-api-permissions-inventory

pib-service edit API permission enforcement system - inventory-based backend

gitctx

MCP server for GitHub repository exploration

skylet-permissions

User-Level Permissions and Context plugin implementing RFC-0023

n5i-apps

Utils for working with n5i apps

soft-fido2-ctap

CTAP 2.0/2.1 protocol implementation for the soft-fido2 FIDO2/WebAuthn authenticator

protect-axum

Authorization extension for axum to protect your endpoints

freshblu-core

Core types and permission model for the FreshBlu IoT messaging platform

pib-service-api-permissions

pib-service edit API permission enforcement system

fslint

Linter for filesystem consistency: names, metadata, permissions and sizes

rok-acl

Database-backed ACL — roles, permissions, and route guards for rok/Axum apps

permission-translation

translating hexadecimal permission values into human-readable capability sets

chandler

GNU tar normalizer

guts-auth

Authorization and governance for Guts: Permissions, Organizations, Teams, Webhooks

spicedb-rs-client

Rust client for the SpiceDB/Authzed gRPC API

llm-orchestrator-auth

Authentication and authorization for LLM Orchestrator

mogh_secret_file

reading and writing secret files

opendev-tools-core

Tool framework foundation for OpenDev: traits, registry, policies, and sanitization

permitheus

Fast hierarchical permission system with inheritance, delegation, and conflict resolution

oxur-pretty

Pretty-printer for S-expression formatted data

windows-permissions

Safe Rust bindings to Windows permissions APIs

claude-insight-types

Local observability and audit tooling for Claude Code sessions

passworth

Protocol shared datatypes for Passworth

claude-rust-permission

Interactive terminal permission checker

basileus

All-in-one library for user management, authorization, sessions and permission management

diaryx_extism

Extism-based third-party plugin runtime for Diaryx

sen-plugin-api

WIT-generated API types for sen-rs plugin system

tauri-plugin-shizuku

A tauri plugin for Shizuku, providing various permissions and functionalities to interact with the Android system

qm-role

Role management

host-client-ipc

Shared local IPC session and permission types for host-sdk desktop and embedded hosts

actionable

An enum-based async framework for building permission-driven APIs

tauri-plugin-permission-flow

Tauri bindings for the permission-flow macOS permission UI

onechatsocial-permissions

Revolt Backend: Permission Logic

ccperm

A TUI viewer/editor for Claude Code permission settings

nostrnative

Nostr native capabilities for Tauri

arcan-fleet

Vertical agent fleet — coding, data processing, and support agents for the Life marketplace

device-register

A no_std library to describe the registers permissions of a device to ease driver development

ohos-accesstoken-sys

Raw bindings to the AbilityAccessControl (AccessToken) NDK of OpenHarmony

plato-kernel-constraints

Constraint engine extracted from plato-kernel — first-person permission filtering with assertive markdown constraints

claude-insight-storage

Local observability and audit tooling for Claude Code sessions

syntastica-highlight

Stripped-down and slightly modified fork of tree-sitter-highlight for use by syntastica

waterkit-permission

Unified permission management (Camera, Mike, Location)

authbeam

Authentication manager

friperms

framework for creating typed permission models for whatever system you could phatom

agentkit-tool-shell

Shell execution tool and shell-oriented safety hooks for agentkit

k2rbac-core

Core normalization and derivation helpers for the standalone k2rbac/auth Rust service

jsdet-chrome-ext

Chrome Extension API bridges for jsdet — chrome.tabs, chrome.cookies, chrome.webRequest, etc

cruxi-authz

Core relationship-based authorization traits and types for the Cruxi framework

oxify-authz

ReBAC (Relationship-Based Access Control) authorization engine - Google Zanzibar implementation

hb-auth

Identity and permissions for Cloudflare Workers

clap-permission-flag

Drop permissions of a CLI using clap

auths-policy

Policy expression engine for Auths - composable authorization logic

ag_file_system_scanner

A nifty command line tool to scan and search through the filesystem and get the sizes of directories

beep-authz

Authorization library for Beep services

wikidata

working with Wikidata in Rust

aquila_server

Aquila server

puniyu_command_types

puniyu 命令类型库，统一命令参数、参数值、权限与执行动作模型

generate_from_path

Generate a Rust project from a local Liquid template. A stripped-down version of cargo-generate.

rew-permissions

Rew Permissions

claude-insight-tui

Local observability and audit tooling for Claude Code sessions

actix-permissions

Permission and input validation extension for Actix Web. Alternative to actix guard, with access to HttpRequest and Payload.

permission-flow-iced

Iced-friendly permission flow helpers for macOS apps

llm-optimizer-api-rest

Production-ready REST API with OpenAPI documentation

timezynk-bridge-models

API for synchronizing and mapping data from and to Timezynk. Oauth2 authentication, require permission level manager or api-client with scope write:company. Info about authentication [https://developer…

claude_settings

reading and writing Claude Code settings on Unix-like systems

exo-resource-tree

WeftOS exo-resource-tree: hierarchical resource namespace with Merkle integrity

ggen-cli-validation

IO validation and security for ggen CLI operations

turboclaudeagent

Interactive Agent SDK for TurboClaude - Use Claude agents in your Rust applications

rem-borrower

Permission repairer for Rusty Extraction Maestro

event_sync

that can be used to synchronize events to only occur between fixed gaps of time

decide-core

A fast, lightweight permission engine for Rust and TypeScript with condition support

kalamarnica

GitHub CLI context switcher — manage multiple GitHub accounts

ohos-fileshare-binding

OpenHarmony's fileshare binding for rust

permission_check

A relatively flexible permission checking library written in rust which checks for permission is scope (like: org.1028.user.*.write), with macro for compile time type checking and code generation

filigree-cli

Scaffolding utility for the Filigree web application framework

turboclaude-protocol

Shared protocol types and definitions for TurboClaude REST and Agent SDKs

filigree

web application framework

ohos-fileshare-sys

OpenHarmony's fileshare sys for rust

windows-file-info

gathering useful infos about Windows entities(archives, directories or reparse point/symlinks) with developer friendly way

ghctl

A GitHub command line utility

rbac-rs

A pluggable RBAC system for Rust using SQLx

protect-salvo

Authorization extension salvo to protect your endpoints

co-core-names

CO Name Service Core. Stores metadata about records.

stack-profile

Centralised ~/.cipherstash profile file management

casbin-rust-cli

command-line tool based on Casbin (Rust language), enabling you to use all of Casbin APIs in the shell

spicedb-rs-proto

Generated Rust protobuf and gRPC bindings for SpiceDB/Authzed APIs

linux-file-info

gathering useful infos about linux entities(files, folders or symlinks) with developer friendly way

mtree

iterating through the entries of an mtree record file

pallet-proxy

FRAME proxying pallet

llm-config-rbac

Role-Based Access Control (RBAC) system with fine-grained permissions, namespace isolation, and policy enforcement

bctx-nexus

— MCP/Nexus gateway with permission enforcement and tool registry

android-permissions

Android permissions

path-permission

Rust Path trait to get the permission

permsearch

search for finding mistakes in filesystem owner and permission settings

sqlweld

Create SQL files from templates and partials

diskplan

A command line tool and configuration system for constructing directory trees from a set of schemas

zfs-cmd-api

Interact with zfs via the supported cmd line tools

lrau

authentication and permission management system