# OpenFGA > OpenFGA is a CNCF open source authorization system for fine-grained, relationship-based access control. Use product documentation for current behavior and the OpenAPI specification for exact HTTP request and response shapes. ## Start Here - [Introduction to OpenFGA](https://openfga.dev/docs/fga.md) - [Getting Started](https://openfga.dev/docs/getting-started.md) - [Set Up OpenFGA](https://openfga.dev/docs/getting-started/setup-openfga/overview.md) - [Get Started with Modeling](https://openfga.dev/docs/modeling/getting-started.md) ## FAQs and Concepts - [Authorization Concepts](https://openfga.dev/docs/authorization-concepts.md) - [OpenFGA Concepts](https://openfga.dev/docs/concepts.md) - [Fine-Grained Authorization](https://openfga.dev/docs/learn/fine-grained-authorization.md) - [Relationship-Based Access Control](https://openfga.dev/docs/learn/rebac.md) - [RBAC vs. ReBAC](https://openfga.dev/docs/learn/rbac-vs-rebac.md) - [ABAC vs. ReBAC](https://openfga.dev/docs/learn/abac-vs-rebac.md) - [Policy Engines](https://openfga.dev/docs/learn/policy-engine.md) - [Zanzibar](https://openfga.dev/docs/learn/zanzibar.md) ## API - [OpenFGA API reference](https://openfga.dev/docs/api/service) - [OpenFGA API specification](https://raw.githubusercontent.com/openfga/api/refs/heads/main/docs/openapiv3/apidocs.openapi.json) - [Relationship Queries](https://openfga.dev/docs/interacting/relationship-queries.md) - [Install SDK Client](https://openfga.dev/docs/getting-started/install-sdk.md) - [OpenFGA CLI](https://openfga.dev/docs/getting-started/cli.md) ## Documentation Indexes - [Complete documentation index](https://openfga.dev/docs/llms.txt) - [Complete documentation bundle](https://openfga.dev/docs/llms-full.txt) ## Website - [OpenFGA homepage](https://openfga.dev/index.md) - [OpenFGA Project](https://openfga.dev/project.md) - [OpenFGA Community](https://openfga.dev/community.md) - [OpenFGA Blog](https://openfga.dev/blog) - [Website content bundle](https://openfga.dev/llms-full.txt) The website bundle contains Home, Project, and Community content, not a second copy of the product documentation. ## Optional - [OpenFGA source repository](https://github.com/openfga/openfga) - [OpenFGA SDK repositories](https://github.com/orgs/openfga/repositories?q=topic%3Asdk) # Full Website Content # OpenFGA Community ## Slack (CNCF Community) The OpenFGA community has a channel in the [CNCF](https://cncf.io) Slack. If you don't have access to the CNCF Slack you can request an invitation [here](https://slack.cncf.io). You can join the community in the [#openfga](https://cloud-native.slack.com/archives/C06G1NNH47N) channel. ## GitHub Discussions You can also use [GitHub discussions](https://github.com/orgs/openfga/discussions) to ask questions and submit product ideas. ## X (formerly Twitter) Follow us on X to get the latest updates on all things OpenFGA. [@OpenFGA](https://twitter.com/OpenFGA). ## YouTube Subscribe to [the OpenFGA YouTube Channel](https://www.youtube.com/@OpenFGA) to see our latest videos and recordings. ## LinkedIn Follow us on [LinkedIn](https://www.linkedin.com/company/openfga/) for the latest updates, community highlights, and insights into fine-grained authorization. ## Mastodon For the Fediverse fans among you, follow us on Mastodon at [@openfga@mastodon.social](https://mastodon.social/@openfga)! ## Monthly Community Meetings We hold a monthly community meeting on the second Thursday of every month @ [11am Eastern Time (US)](https://www.worldtimebuddy.com/?qm=1\&lid=12,100,5,6,8\&h=5\&sln=11-12\&hf=1). - [Calendar](https://zoom-lfx.platform.linuxfoundation.org/meetings/openfga) - [Agenda](https://docs.google.com/document/d/1Y6rbD0xpGLVl-7CmeMgxi56_a0ibIQ_RojvWBbT9MZk/edit#) - [Zoom Link](https://zoom-lfx.platform.linuxfoundation.org/meetings/openfga) - [Recordings of Previous Meetings](https://www.youtube.com/playlist?list=PLUR5l-oTFZqUneyHz-h4WzaJssgxBXdxB) Read more details [here](https://github.com/openfga/community/blob/main/community-meetings.md) --- # OpenFGA Project OpenFGA is an open source, [CNCF Incubating project](https://www.cncf.io/projects/openfga/) for building fine-grained authorization systems. ## Why OpenFGA exists Modern applications need permissions that can express relationships between users and resources, adapt as products evolve, and remain consistent across services. OpenFGA provides a centralized authorization system with an easy-to-read modeling language and consistent APIs, so application teams do not have to build and maintain a separate permissions system for every product. OpenFGA was inspired by [Google's Zanzibar paper](https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/). It was originally developed by Auth0/Okta, open sourced in June 2022, and donated to the Cloud Native Computing Foundation. OpenFGA joined CNCF as a Sandbox project in 2022 and moved to the Incubating maturity level on October 28, 2025. Read more about the project's history in the [Incubation announcement](https://openfga.dev/blog/incubation-announcement). ## Where project work happens | Area | Repository or resource | What you will find there | | ------------------------- | -------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | | Server | [`openfga/openfga`](https://github.com/openfga/openfga) | The OpenFGA server, release artifacts, runtime issues, and feature development. | | API | [`openfga/api`](https://github.com/openfga/api) | The API definition shared by the server, SDKs, and other tooling. | | Website and documentation | [`openfga/openfga.dev`](https://github.com/openfga/openfga.dev) | This website, guides, modeling examples, and API documentation. | | Design proposals | [`openfga/rfcs`](https://github.com/openfga/rfcs) | Requests for Comments for significant changes to OpenFGA. | | Community and governance | [`openfga/community`](https://github.com/openfga/community) | Governance, maintainers, adopters, community projects, and meeting information. | | Roadmap | [OpenFGA roadmap](https://github.com/orgs/openfga/projects/1) | Planned and in-progress project work. | | SDKs and tools | [OpenFGA repositories](https://github.com/orgs/openfga/repositories) | Official SDKs, the CLI, IDE extensions, the Terraform provider, and other integrations. | | Example models | [`openfga/sample-stores`](https://github.com/openfga/sample-stores) | Sample authorization models and a list of models used by open source projects. | ## Get OpenFGA Follow the [OpenFGA setup guide](https://openfga.dev/docs/getting-started/setup-openfga/overview) to run the server with Docker, Docker Compose, or Kubernetes. You can also download a binary from the [OpenFGA releases](https://github.com/openfga/openfga/releases) page. ## Ask questions and give feedback Use the kapa.ai-powered **Ask AI** widget in the site navigation to ask questions about OpenFGA. For AI-assisted implementation, install the [OpenFGA Best Practices Skill](https://github.com/openfga/agent-skills) or connect an MCP-compatible client to the [OpenFGA kapa.ai MCP server](https://openfga.mcp.kapa.ai). AI-generated answers may be inaccurate, so verify them against the project documentation and code. - Ask usage questions and suggest product ideas in [GitHub Discussions](https://github.com/orgs/openfga/discussions). - Join the [`#openfga` channel in CNCF Slack](https://openfga.dev/community) to talk with users and maintainers or attend a community meeting. - Report server bugs in the [`openfga/openfga` issue tracker](https://github.com/openfga/openfga/issues), and report website or documentation problems in the [`openfga/openfga.dev` issue tracker](https://github.com/openfga/openfga.dev/issues). When reporting a problem, include a minimal example or [FGA Playground](https://play.fga.dev/) link, the result you expected, the result you observed, and the steps you already tried. ## Contribute Contributions of code, documentation, issue triage, RFC feedback, examples, and community support are all welcome. 1. Read the [contribution guide](https://github.com/openfga/.github/blob/main/CONTRIBUTING.md) and [Code of Conduct](https://github.com/openfga/.github/blob/main/CODE_OF_CONDUCT.md). 2. Look for an issue in the relevant repository, including issues labeled [`good first issue`](https://github.com/search?q=org%3Aopenfga+is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22\&type=issues). 3. For a substantial design change, start a discussion with the maintainers and review the [RFC process](https://github.com/openfga/rfcs). 4. Fork the affected repository, make and test the change, and open a pull request. ## Report a security vulnerability Do not disclose security vulnerabilities in a public issue or discussion. Email and review the [OpenFGA security policy](https://github.com/openfga/.github/blob/main/SECURITY.md) for scope and reporting guidance. The project strives to reply within five business days. ## Thank you OpenFGA was created by the Auth0 FGA team with support from Auth0 Labs and Auth0's Office of the CTO, and its development continued at Okta before the project was donated to CNCF. We are grateful to the people who shaped the project there, to the CNCF community, and to every maintainer, contributor, early design partner, and adopter who has shared code and feedback. The [Incubation announcement](https://openfga.dev/blog/incubation-announcement#thank-you) recognizes many of the people and organizations that helped OpenFGA reach this milestone. The community repository maintains the broader list of [OpenFGA adopters](https://github.com/openfga/community/blob/main/ADOPTERS.md). ---