Permit.io

API

Authorization service for RBAC, ABAC and ReBAC permission checks

Price: Free tier, then paid
Access: Environment API key

About

Hosted policy control plane with a no-code editor and policy as code (OPA Rego or AWS Cedar), plus a decision point you run next to your app or use in Permit's cloud. It handles authorization only, so you keep your existing identity provider for login.

What you can do with it

Check whether a user may perform an action on a resource with permit.check()
Model roles, attributes and relationships in a no-code policy editor or in Git
Embed user management and access request screens in your app with Elements

Get started

Create roles, resources and actions in the Permit dashboard
Copy your environment API key
Install the SDK with npm install permitio

Example

import { Permit } from "permitio";

const permit = new Permit({
  token: process.env.PERMIT_API_KEY,
  pdp: "https://cloudpdp.api.permit.io",
});

const permitted = await permit.check("user-123", "read", "document");
console.log(permitted ? "PERMITTED" : "NOT PERMITTED");

Details

Hosting: Hosted service, Self-hosted
Available in: Worldwide
Official SDKs: JavaScript/TypeScript, Python, Go, Java, C#, Ruby
MCP server: Local