Permify
by Permify · Open-source, Zanzibar-inspired fine-grained authorisation service
46.5 — BenchRank score out of 100
Screenshots of Permify
Homepage
Overview
Permify is an open-source authorisation service that keeps access control out of application code. Permissions are modelled in its own schema language, which supports RBAC, ABAC and ReBAC, with authorisation data stored as relationships in a central permission database modelled on Google Zanzibar. A Check API performs access checks from anywhere in the stack.
- Best for
- Engineering teams that want centralised fine-grained authorisation instead of permissions in app code
- Pricing
- No pricing is shown on the captured page.
- Runs on
- Self-hosted
Strengths and trade-offs
Strengths
- One schema language covering RBAC, ABAC and ReBAC
- Central permission database modelled on Google Zanzibar
- Check API runs access checks from anywhere in the stack
- Open source, with public docs, playground and Discord
Trade-offs
- Acquired by FusionAuth; the site says nothing about future direction
- No pricing, plans or licence terms shown anywhere on the page
- Adds a separate service to run and keep in sync with your data
- Claims of fast response times come with no published figures
How this score is made up
Each dimension is scored out of 100 and combined into the headline score using fixed weights.
- MCP support
- 0 out of 100
- API quality
- 30 out of 100
- Documentation
- 75 out of 100
- Agent friendliness
- 50 out of 100
- Pricing transparency
- 75 out of 100
- Changelog
- 100 out of 100
- Marketing site structure
- 60 out of 100
- Operational trust
- 0 out of 100
Measured, but not part of the score
Useful to know, but not a mark for or against the product — so these do not affect the ranking.
- Openness
- 65 out of 100
- Maintenance
- 100 out of 100
This doesn’t look right — report a problem with Permify’s score
Alternatives in Identity & Access Management
Ranked 1
75.9 — BenchRank score out of 100Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
