authzed

Wondering what the fuss about Relationship Based Access Control is? Here's an explainer using....a MIDI Keyboard?! youtu.be/nPL3W_oHSrE?...

How is Google Zanzibar so fast? I'll give you a hint: The Leopard indexing system If things like denormalization and set theory interest you, then watch this video on the genius design of Google Leopard 👉 youtu.be/Zb_Q7_ZZSjc

You can give time-bound access to your DevOps Agent, especially when it comes to access sensitive resources like your production server. It's actually super easy with ReBAC and SpiceDB. Check it out

How do you handle fine-grained permissions for a DevOps Agent? Here's an example that uses @aaif.io 's Goose with SpiceDB to ensure that access to prod is always secure. youtu.be/hJE3s1v929Y

The New Enemy problem was first described in the Google Zanzibar paper and might be the key to keeping your app data safe. If you're interested in permissions and security, you NEED to know about this. #security #authorization

Are app permissions important to you? Then you should know about the New Enemy problem, and how to prevent it. www.youtube.com/watch?v=Luoa...

Congrats to Adora Nwodo and Sohan Maheshwar from AuthZed on being named official ambassadors for @aaif.io, joining its inaugural cohort advancing open AI infrastructure 🎉 Read more: authzed.com/blog/authzed...

In 2024, Slack's AI assistant was found summarizing messages from private channels - including ones the user had never joined. This is the blind spot in most RAG pipelines, and could lead to data leaks. We just dropped a video covering three ways to fix it with SpiceDB youtu.be/OdnPmBvBj-8?...

We spoke at @amsterdam.voxxeddays.com about a topic that may be controversial: "Don't use JWTs for authorization" What do you think? youtu.be/ucTOgQTk6wk?...

authorization 👏 must 👏 be 👏 deterministic www.0xsid.com/blog/meta-ac...

What's your favorite thing to see in a PR and why isn't it this?

We're livestreaming how to bring fine-grained, relationship-based permissions into your LangChain apps with SpiceDB Stream starting in 4 minutes! www.youtube.com/live/xp1cELZ...

We updated our 'Timeline of Model Context Protocol (MCP) Breaches' post to include the latest security breaches form this year. Read more about why it happened, what data was exposed, and what they reveal about the new threat surface LLMs bring into organizations. authzed.com/blog/timelin...

SpiceDB has an experimental Query Planner for faster permission checks. To see how this works join our Office Hours livestream starting shortly www.youtube.com/live/uzS2GBG...

Our Open Source engineer Maria is on livestream talking about building zed, the official CLI for SpiceDB. We'll explore how zed is built, the design decisions that shape it, and how it powers developer workflows for SpiceDB users. Join here in four minutes: www.youtube.com/watch?v=yBEc...

Learn how to build a production-grade Agentic RAG system on AuthZed Cloud, where authorization is hardcoded into the LangGraph pipeline—not a prompt instruction the agent can skip. Check it out:

If you're using #Postgres and needed fine-grained permissions in your app - this foreign data wrapper for SpiceDB might just be the thing for you

Here's a new way to bring real-time authorization context from SpiceDB into Postgres queries, all without duplicating data, or rewriting policies. Check out this demo by AuthZed CTO and co-founder Joey Schorr of the SpiceDB Foreign Data Wrapper youtu.be/3C72jVHIqCg?...

The @langchain.bsky.social SpiceDB integration is now live! Adding fine-grain authorization in AI Agents or RAG is not a trivial task. This library simplifies the process and gives you a Retriever for RAG. It also has tool and a LangGraph node for AI Agents. docs.langchain.com/oss/python/i...

SpiceDB Community Day kicks off in few mins with Manuel from @docker.com talking about Testcontainers & RAG Also, Mark Fogle of @clawtocracy.ai will share how he built Agentic Permissions for OpenClaw Oh and you might hear a spicy update about SpiceDB too! www.youtube.com/watch?v=Upwy...

Excited to announce the @langchain.bsky.social SpiceDB integration 🎉 This library brings SpiceDB's authorization model into LangChain & LangGraph workflows, so you can build Agentic and RAG workflows with fine-grained authorization that scales. Check it out: authzed.com/blog/langcha...

If we find permissions systems complex for humans, adding AI Agents to your organization will only compound the problem. Here are some falsehoods that people believe about AI Agent Authorization youtu.be/PTWrOCyCfaI?...

Model Context Protocol is does not secure by default. One of the big reasons is what @simonwillison.net calls the Lethal Trifecta. Watch this video to learn more about access control around MCP and how that caused some recent high-profile breaches www.youtube.com/watch?v=u0fU...

Cedar is not a good fit for AI Agent Authorization. That's because policy engines don't easily have access to what we like to term 'ambient context. See this video to learn more about why policy engines are NOT suited for AI Authorization www.youtube.com/watch?v=9HvE...

Building an AI agent is easy. Teaching it to keep a secret? 😅 At WebExpo, Sohan Maheshwar from @authzed.com scrutinises the leaks. 🤫 He architects permissions using the Google Zanzibar model to ensure your RAG system knows what to withhold. Live demo with Pinecone and SpiceDB.

Policy Engines are not a good fit for AI Agent authorization. Here's why that's the case, featuring an example that uses Cedar youtu.be/9HvE9Tm6Sss

👀 👀

AuthZed Serverless will be sunset on April 5th 2026. Here's a livestream on how to migrate to AuthZed Cloud or self-managed SpiceDB - starting in 5 minutes www.youtube.com/watch?v=xIZG...

Your RAG pipeline works… until it shows a user data they shouldn’t see. Learn how to enforce permissions, safely post-filter RAG results, and test the whole flow end-to-end with Testcontainers, while using SpiceDB, the same system OpenAI uses to secure 37B docs for 5M users: https://bit.ly/3ZwdyaB

ICYMI here's the timestamped video of Jake's predictions for 2026. Includes insights about Agentic RAG, China, Postgres, and a whole lot more! www.youtube.com/live/AHlKWyT...

Stream starting in 4 minutes!

I've posted my latest recap of the world of databases: www.cs.cmu.edu/~pavlo/blog/... All the hot topics from the last year: • More Postgres action! • MCP for everyone! • MongoDB gets litigious with FerretDB! • File formats! • Market movements! • The richest person in the history of the world!

We're hosting a 'Authorization In 2026' livestream tomorrow, featuring CEO Jake Moshenko. We'll discuss the big events in the AuthZ space that defined 2025, and what 2026 has in store for us. It's Office Hours format so bring any questions you have. youtube.com/live/AHlKWyT...

🔐 RAG Consciente de Permisos: Pruebas de Extremo a Extremo con SpiceDB Testcontainer Garantiza que tu IA solo devuelva lo que el usuario tiene permiso para ver. https://www.docker.com/blog/rag-permission-testing-testcontainers-spicedb/ #GenAI #Authorization #Testcontainers #Docker #RoxsRoss

Permission-Aware RAG: End-to-End Testing with the SpiceDB Testcontainer/#docker #container - We use GenAI in every facet of technology now – internal knowledge bases, customer support systems, and code review bots, to name just a few use cases.And in... https://tinyurl.com/2cmqyjyz

How do you know what a user is allowed to access in a RAG system? If you're building a RAG pipeline, it's important to think of access control. Here's a primer on building fine-grained authZ in a RAG using Pinecone as your vector database and the OpenAI LLM. www.pinecone.io/learn/rag-ac...

AI can't secure AI. But you can use AI to build a deterministic authorization system. Check out this tutorial on how you can use AuthZed MCP Servers to build a Permissions System in under 10 Minutes. youtu.be/OYQTHk7ie0Y

What does Stardew Valley have to do with Fine-Grained Authorization? Well, here's a post on building a RAG-enabled harvest logbook for your farm, inspired by Stardew Valley. To build out the backend for this demo we got help from our friends at Motia authzed.com/blog/buildin...

@authzed.com is at #KubeCon! We'll be doing demos at the booth of our wonderful partner, Arm. Booth 231 across from the Corner Store in Peachtree Plaza!

Dibs is headed out to trick-or-treat as a Sandworm this year. Happy Halloween!

Sohan Maheshwar and Michel Murabito takes the stages at #cndb2025 talking about authorization with SpiceDB and AI driven developer experience (respectively) #CloudNativeBergen

Solving the dual-write problem is not a trivial task. Here's a deeply technical talk by Artie Shevchenko on how Canva solves the dual-write problem when using SpiceDB Watch it if terms such as "consistency, transactional outbox, & micro syncs" appeal to you 🤓 youtu.be/HAXQN1vNmeU

Only few hours to go for the Pinecone 🤝 AuthZed webinar on 'Securing Your RAG Pipelines With Fine Grained Authorization' Learn the basics of how RAG works, authorization for RAG, & a demo with Pinecone, LangChain, OpenAI, and SpiceDB 👉 Last chance to register → pinecone-io.zoom.us/webinar/regi...

OpenAI built connectors to process and search 37 billion documents for over 5 million business, with fine-grained authorization. How did they achieve this and how can you build such scalable access control? Watch this video to learn: www.youtube.com/watch?v=QgB8...

Revisit this blogpost on ReBAC by @jimmy.zelinskie.com ✨