Access Control Python Packages

casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

pycasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

openfga-sdk

OpenFGA SDK for Python 3 - https://pypi.org/project/openfga-sdk/

casbin-sqlalchemy-adapter

SQLAlchemy Adapter for PyCasbin

drf-access-policy

Declarative access policies/permissions modeled after AWS' IAM policies.

fastapi-authz

Use Casbin in FastAPI, Casbin is a powerful and efficient open-source access control library.

py-rbac

Python implementation of the NIST model for role based access control (RBAC).

policystrata

Cross-layer policy regression testing for LLM data-agent stacks

arbiter-client

Arbiter: A capability firewall between AI agents and services

policy

A Policy library provides support for RBAC policy enforcement.

nautilus-rkm

Policy-first data broker for AI agents — one call plans, routes, enforces, attests, and audits every data access. Built on Fathom.

agent-sudo-mcp

Authorization, delegation, provenance, and verifiable-audit engine for AI agents. MCP adapter published.

actra

Actra - control what runs before it runs, controls what actions are allowed before they execute. Evaluate policies across APIs, workflows and AI agents in real time.

django-authorization

Per object permissions for Django, see example at: https://github.com/pycasbin/django-authorization-example

flask-vouch

Bot-challenge Python middleware issuing brief challenges, granting solvers signed access cookies.

arbiter-server

Arbiter: A capability firewall between AI agents and services

arbiter-imap

Arbiter: A capability firewall between AI agents and services

github-org-manager

Manage a GitHub organization, its members, teams, repository permissions and more

arbiter-smtp

Arbiter: A capability firewall between AI agents and services

vakt

Attribute-based access control (ABAC) SDK for Python

arbiter-suite

Arbiter: A capability firewall between AI agents and services

nucypher

Threshold Access Control (TACo) Node Runtime

authentik-user-manager

Manage users and their groups on Authentik instances by local configuration YAML files

rbacx

RBAC/ABAC/ReBAC policy engine for Python with policy sets, condition DSL, and hot reload