Awesome SpiceDB

An awesome list for the SpiceDB ecosystem.

Have questions? Join our Discord.

Looking to contribute? See CONTRIBUTING.md.

Contents

• Awesome SpiceDB
  • Contents
  • Blog Posts
    • English
    • 日本語
    • 中文
  • Clients
    • Official Libraries
    • Third-party Libraries
  • Communities
  • Developer Tools
    • Official Tools
    • Third-party Tools
  • Examples
  • Integrations
    • Official Integrations
    • Third-party Integrations
  • Services
  • Testing

Blog Posts

Posts written about SpiceDB usage and development

English

• Authzed's Official Blog
• ABAC on SpiceDB: Enabling Netflix’s Complex Identity Types
• Abhishek Koserwal's SpiceDB Setup Guide: Part 1, Part 2
• Modeling Google Drive in SpiceDB
• KPMG: Getting Started with SpiceDB in .NET
• Spicing up the Authorization Layer at Quizizz

日本語

• SpiceDBで認可制御するLambda Authorizerを作ってみた
• 分散モノリスを解消して、モジュラモノリスとして扱うために

中文

• [源码]spicedb: 源码阅读之第一篇(热点缓存)
• [源码]spicedb: 源码阅读之第二篇(k8s 部署和运行)
• Chen Tian, SVP TubiTV China, presents SpiceDB

Clients

Clients for interacting with SpiceDB

Official Libraries

• authzed-go - Official client library for Go
• authzed-java - Official client library for JVM languages in Java
• authzed-node - Official client library for NodeJS in JavaScript/TypeScript
• authzed-py - Official client library for Python
• authzed-rb - Official client library for Ruby
• authzed-dotnet - Official client library for Dotnet/CSharp

Third-party Libraries

• .NET
  • jalexsocial/spicedb - gRPC client library in C#
• BEAM
  • goodhamgupta/authzed-ex - gRPC client library in Elixir
• JavaScript
  • quizizz/spicedb-wrapper - Lightweight client wrapper of authzed-node
• JVM
  • quarkiverse/quarkus-authzed-client - gRPC client integration for Quarkus
  • oviva-ag/spicegen - type-safe client generator from a schema
• PHP
  • alsbury/chiphpotle-rest - HTTP client library in PHP
  • linkorb/spicedb-php - HTTP client library in PHP
  • linkorb/spicedb-bundle - SpiceDB client Symfony Bundle
• Rust
  • bitskico/authzed-rs - gRPC client library in Rust
  • structionsite/spicedb-client-rust - gRPC client library in Rust

Communities

Online forums for discussing SpiceDB and meeting other users

• SpiceDB Discord - Discord community for SpiceDB
• Authzed Linen - Searchable archive for the SpiceDB Discord
• StackOverflow - StackOverflow questions tagged with SpiceDB
• Twitter - Official Authzed Twitter account

Developer Tools

Tools that help enhance the experience of using SpiceDB

Official Tools

• Playground - Official SpiceDB schema development environment
• SpiceDB Operator - Official Kubernetes Operator for running SpiceDB
• Thumper (proprietary) - Official load generation tool for SpiceDB
• VS Code extension - Official SpiceDB Visual Studio Code Extension
• zed - Official command-line tool for managing SpiceDB

Third-party Tools

• spicedb-operator-libsonnet - Jsonnet library for the SpiceDB Operator
• bushelpowered/spicedb-operator-chart - Helm chart to install the SpiceDB Operator
• mleonidas/tree-sitter-authzed - Neovim tree-sitter grammar and syntax for SpiceDB schemas
• nhedger/vscode-spicedb - Third-party VSCode extension
• chiperific/vscode_authzed_syntax - Third-party VSCode syntax highlighting
• dguhr/keycloak-spicedb-eventlistener - Syncs changes to Keycloak users and groups to SpiceDB
• thomasdarimont/custom-opa-spicedb - Third-party build of Open Policy Agent with a plugin to query SpiceDB
• umbrellaassociates/opa-spicedb - Third-party build of Open Policy Agent with a plugin to query SpiceDB

Examples

Example usage of SpiceDB and the tools in its ecosystem

• authzed/examples - Official examples repository
• SpiceDB Helm Chart - Helm Chart for an example 3-node deployment

Integrations

Projects that integrate with SpiceDB

Official Integrations

• authzed/connector-postgres - Deprecated synchronization between PostgreSQL and SpiceDB
• authzed/prom-authzed-proxy - Prometheus proxy that performs SpiceDB permission checks based on labels

Third-party Integrations

• guicassolato/authorino-spicedb - Implementation of Envoy external authz that can be driven by SpiceDB
• gitpod-io/gitpod - GitPod's support for fine-grained authorization leverages SpiceDB
• infratographer/permissions-api - The default authorization strategy for Infratographer leverages SpiceDB
• raystack/frontier - Cloud-native, role-based user management system and authorization server for your applications and API endpoints
• wolfi-dev/os - Container build toolchain that packages SpiceDB
• koralium/flowtide - Data streaming engine, can read/write data into SpiceDB and can also denormalize SpiceDB permissions when integrating with other databases/systems.
• Redpanda connector - spicedb_watch - Consumes messages from the Watch API of a SpiceDB instance. This input is useful if you have downstream applications that need to react to real-time changes in data managed by SpiceDB.

Services

Managed services that operate SpiceDB for you

• SpiceDB Dedicated - Private, isolated clusters operated by the experts at Authzed
• SpiceDB Serverless - Self-service shared clusters operated by Authzed

Testing

Tools and libraries used to test or validate usage of SpiceDB

• authzed/action-spicedb-validate - GitHub Action for validating your SpiceDB schema
• authzed/action-spicedb - GitHub Action for integration testing your application with SpiceDB
• northone-inc/local-spicedb - Node library for running SpiceDB ephermally for testing