SpiceDB is an open source database for storing and querying fine-grained authorization data, inspired by Google's Zanzibar system.
SpiceDB addresses the problem of managing complex authorization at scale by providing a dedicated system for storing relationships and permissions rather than embedding authorization logic throughout an application. It uses a graph-based model where authorization decisions are computed by traversing relationships between entities, allowing it to handle attribute-based access control, role-based access control, and relationship-based access control patterns. The system is designed to scale across traffic, development velocity, functionality, and geographic distribution.
Organizations building systems that require sophisticated permission models should consider SpiceDB when authorization logic has become complex enough to warrant a dedicated service. It suits projects where authorization decisions need to be fast, consistent, and queryable across many entities and relationship types. The tool is particularly valuable for multi-tenant platforms, content management systems, and applications where permissions change frequently or need to be audited.
The project maintains active engagement with its user base, with nearly all open issues originating from external adopters rather than the core team, demonstrating substantial real-world adoption. Maintainers respond to new issues and pull requests within a few days. Work in the issue tracker centers on SpiceDB-specific improvements, feature proposals, and bug fixes.
