Topaz
No liveness check has reached it yet; it is registered on GitHub and has been in the index since 14 Oct 2026. How this is checked
Topaz is an open-source, self-hosted authorization service for applications and APIs. It supports fine-grained RBAC, ABAC, and relationship-based access control, with policy-as-code, real-time decisions, embedded data storage, and OCI image deployment.
Inferred · not functionally tested
Overview
6 featuresPurpose: Implementing fine-grained, real-time authorization policies across cloud-native applications and APIs.
Inferred · not functionally tested
Audience: developers and platform security teams
Inferred · not functionally tested
Functions: Unknown
Interfaces: API: indicated (inferred, not tested) · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: Apache-2.0 · platforms: WEB · deployment: browser, self_hosted, cli, api_only
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: topaz.sh · github.com. These links do not verify the individual claims.
Topaz is an Auth & identity project. Inferred · not functionally tested: It focuses on implementing fine-grained, real-time authorization policies across cloud-native applications and APIs. Inferred · not functionally tested: It is built as an open-source project for developers and platform security teams. Basis unknown · not verified: Topaz is open source under the Apache-2.0 license. Basis unknown · not verified: It runs on the web, the command line, and API, and it can be self-hosted.
Aserto builds and maintains Topaz, and it first shipped in 2022. The project is developed in the open on GitHub with 1.4k stars and 21 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include fine-grained access control, policy as code, and RBAC policies. Inferred · not functionally tested: Catalogued interfaces include a public API.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- Fine-grained access control
- Policy as code
- RBAC policies
- ABAC policies
- Relationship-based access
- Real-time decisions
Topics: Inferred · not functionally tested
Built with & integrations
- Claude Code
- CLAUDE.md
- GitHub Copilot
- commit 03d9713bbc98 · since Jun 2026
- Netlify
- x-nf-request-id header
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about Topaz
- What does Topaz do?
- Inferred · not functionally tested: Topaz focuses on implementing fine-grained, real-time authorization policies across cloud-native applications and APIs. It is catalogued under Auth & identity on PulseGate.
- Who should use Topaz?
- Inferred · not functionally tested: Topaz is an open-source project built for developers and platform security teams.
- Does Topaz have a free plan?
- Basis unknown · not verified: Yes — Topaz is open source under the Apache-2.0 license and free to use.
- What platforms does Topaz run on?
- Basis unknown · not verified: Topaz runs on the web, the command line, and API. It can also be self-hosted.
- Is Topaz still active?
- The GitHub repository shows 21 commits in the last 90 days.
- What are alternatives to Topaz?
- Similar projects tracked by PulseGate include Sym, OTP.dev, and Innskráning.SymOTP.devInnskráning
- Who makes Topaz?
- Topaz is developed by Aserto.
- How long has Topaz been around?
- Topaz first shipped in 2022.
Also in Auth & identity
Same category — not a similarity match