Access Control Python Packages

casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

pycasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

openfga-sdk

OpenFGA SDK for Python 3

casbin-sqlalchemy-adapter

SQLAlchemy Adapter for PyCasbin

drf-access-policy

Declarative access policies/permissions modeled after AWS' IAM policies.

mlflow-oidc-auth

MLflow Access Control: authentication and access control for MLflow — SSO (OIDC, SAML), SCIM provisioning, service accounts and per-resource permissions

schemagate

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

policy

A Policy library provides support for RBAC policy enforcement.

tenuo

Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.

fastapi-authz

Use Casbin in FastAPI, Casbin is a powerful and efficient open-source access control library.

py-rbac

Python implementation of the NIST model for role based access control (RBAC).

supero

19 multi-tenant SaaS reference apps in Python. One schema file gives you a REST API, an admin panel and role-based access. No build step. All 19 run live.

flask-vouch

Bot-challenge middleware for Flask.

taper-broker

A credential broker for AI agents. The agent names a typed operation instead of holding a credential, and tokens narrow but never widen. Ed25519 capability chains, Postgres and SSH adapters, 231 red-team scenarios. Unaudited.

actra

Actra - control what runs before it runs, controls what actions are allowed before they execute. Evaluate policies across APIs, workflows and AI agents in real time.

agentlock

An adversarially benchmarked reference implementation for pre-action AI agent authorization. Provenance-based gating for LLM agent tool calls: deny-by-default permissions, parameter lineage, signed receipts, audit logging.

vakt

Attribute-based access control (ABAC) SDK for Python

redact-secret-vault

Reversible redaction for AI workflows: replace secrets with opaque tokens, then restore them only to authorized destinations. JavaScript and Python.

rowstile

Authorization for Postgres apps: access rules in a policy file, compiled to row-level security. Sharing, groups, nested folders, tenants; no second service.

warrant-python

Python SDK for Warrant

django-authorization

Per object permissions for Django, see example at: https://github.com/pycasbin/django-authorization-example

casbin-fastapi-decorator

Authorization decorator factory for FastAPI based on Casbin. No middleware, no extra dependencies in route signatures.

autocedar

Human-in-the-loop Cedar policy synthesis from natural-language requirements with symbolic verification.

tenuo-claude-code

Task-scoped authorization for Claude Code. Constrain files, commands, web access, MCP tools, and subagents, with signed evidence of what was allowed or denied.