Permit.io
Uses AIRuntime Access Control for the AI Era.
permit.io Source★ 315GPL-3.0Software Development / Auth, Payments & Billing Infrastructure
- Monthly visits
- 42.4K
- Down16.4%MoMSep 2026
- Public revenue
- Undisclosed
- No public revenue evidence yet
- Entry price
- Unknown
- Freemium model, plan pricing not identified yet
- Launched
- 4y ago
- 2022-10-06 · Est.
Traffic
Marketing moves
Launches, search & content, referrals, promotionsLaunched on Show HN (2 pts · 1 comments)Launch
Permit MCP Gateway – Fine-Grained Authorization and IGA for MCP — Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we buil…
Mar 18 · 8mo agoLaunch page
Launched on Product HuntLaunch
Drop-in MCP Security Developers Love and CISOs Trust
Mar 18 · 8mo agoLaunch page
Launched on Show HN (1 pts)Launch
Permit.io CLI: A New Era of Access Control Developer Experience
Apr 30, 2025 · 19mo agoLaunch page
Launched on Show HN (3 pts)Launch
Permit.io AI Access Control – Fine Grained Permissions for AI Apps — Hi HN, I'm Gabriel, VP of DevRel at Permit.io. We keep hearing from AI developers that there’s no simple way to enforce access control in…
Feb 25, 2025 · 21mo agoLaunch page
Launched on Product HuntLaunch
Fine-Grained Permissions for AI-Powered Applications
Feb 25, 2025 · 21mo agoLaunch page
Third-party reviews & case dossiers
Acquisition breakdowns, engineer reviews & open-source metricsHow I Developed A $100K/Year Permissions Management SaaS
- Post excerpt:
- Hi HN! Co-Founder of Permit.io here, I’ve built access-control to my products, thousands of times throughout my career - and at no point did I want to. We adopted OPA, created OPAL.ac (open-source), and Permit.io on top - so no developer would have to build permissions again. To truly solve this problem end-to-end we’re releasing Permit-Elements ( https://pe
- Post excerpt:
- Hello HN ! There’s been a lot of discussions [1,2] on how to build ReBAC [3] with Zanzibar and policy-as-code engines, but we (Permit) also think it’s important to talk about the interfaces on top of these implementations. We just launched a No-Code ReBAC interface - would love to know what you think. besides marrying the benefits of Policy as Code and Polic
- Post excerpt:
- Since our early days of helping developers add fine-grained authorization with [Permit.io]( http://permit.io/ ), we've encountered two recurring questions from users: 1. How to manage the policy configuration natively within the existing SDLC. 2. How to maintain decoupling between the control plane (policy configuration) and the data plane (application conte
- Post excerpt:
- Gabriel L. Manor, Permit's Director of DevRel here For the last three years, we have all seen a huge spike in developers implementing fine-grained authorization. Whether they choose the Google Zanzibar implementation or the OPA/Cedar policy approach, it has become a fundamental security and product requirement. While trying to provide the best developer expe
- What engineers like:
- Create complex authorization policies based on attributes and roles. SDKs for a wide variety of languages. Supports policy as code with Open Policy Agent and AWS Cedar. Can integrate at the gateway level (Kong, AWS API Gateway, Nginx, etc). Prebuilt UI components for allowing users to manage permissions.
- Trade-offs & limitations:
- Doesn’t handle authentication - you need to connect it to an auth provider. UI has no dark mode.
- Best suited for:
- Developers needing authorization as a service should consider Permit
- Post excerpt:
- Hi HN, I’m Gabriel, VP of DevRel at [Permit.io]( http://permit.io/ ). We just launched a major overhaul of our pricing, and, while working on this, I’ve encountered challenges I thought were unique to our SaaS. The more effort I put into this, the more I felt like balancing operational costs and providing customers with predictable pricing is something other
- Post excerpt:
- Hi HN, I'm Gabriel, VP of DevRel at Permit.io. We keep hearing from AI developers that there’s no simple way to enforce access control in AI workflows—so most either build permission logic for their AI implementation from scratch. To help with this, we are introducing Permit.io AI Access Control - a set of new integrations with PydanticAI, LangChain, MCP, an
- Post excerpt:
- Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated
Permit.io is a developer-focused authorization and permissions infrastructure company founded in 2020 by Or Weis.
Open Source & Agent Ecosystem
- GitHub Stars
- ★ 315
- Forks
- 52
- License
- GPL-3.0
- Primary language
- Python
Traffic sources
Traffic breakdown
Channels
- Direct43%
- Organic Search32%
- Referrals10%
- Social6%
- Other9%
Countries
- United States13%
- South Africa12%
- India6%
- Vietnam5%
- United Kingdom5%
Search
Domain authority —Domain registered 2013-04-21
| Keyword | Monthly volume |
|---|---|
| rbac | 62.1K |
| permit io but opensource | 100 |
| fastapi role based access control | 60 |
| permists permission framework | 50 |
| morl permit.io | 40 |
Traffic data: Vaneform
Pricing
Trial: None · Enterprise custom tier · Observed 2026-11-04 · Pricing page
Pages & changes
Key pages
Weekly snapshots- Homewww.permit.io/
- Pricingwww.permit.io/pricing Snapshot 2026-11-04
- Featureswww.permit.io/solutions/product-teams Snapshot 2026-11-04
Changes
Design
Gradient Glow (Dark canvas, airy density) featuring split copy & visual layout and photography / live video visuals.
First-screen preview · click to zoom
First-screen pitch & conversion flow
“Runtime Access Control for the AI Era.”
Split Copy & Visual hero structure paired with start free / sign up CTA and no explicit trust bar.
Conversion path: Split Copy & Visual + Photography / Live Video → Start Free / Sign Up
- Category Positioning Anchor
Palette · click to copy
- Typography
- 8.0
- Color & Contrast
- 8.0
- Layout & Spacing
- 8.0
- Craft & Polish
- 8.0
- Distinctiveness
- 8.0
Structure
- Fonts
- Inter
- Hero layout
- Split Copy & Visual
- Primary visual
- Photography / Live Video
- Conversion CTA
- Start Free / Sign Up
- Social proof
- No Explicit Trust Bar
- Navigation
- Full-Width Top Bar
- Theme & density
- Dark · Airy
- Corners & depth
- Large Radius · Hairline borders
Preview full AI design brief (includes :root CSS variables & layout rules)Style tokens only; never copy brand names, logos, copy, or images
# Design Brief: Gradient Glow (with Enterprise Clean)
Luminous radial glows and translucent glass panels, widely used across modern AI products.
## Design Tokens
```css
:root {
--background: #1a1230;
--surface: #3a2a55;
--foreground: #ffffff;
--muted-foreground: #d8d2e4;
--accent: #7b5cff;
--radius: 16px;
--font-heading: "Inter", ui-sans-serif, system-ui, sans-serif;
--font-body: "Inter", ui-sans-serif, system-ui, sans-serif;
}
```
Color area ratio: Background #1A1230 (~58%) · Surface #3A2A55 (~10%) · Text #FFFFFF (~14%) · Muted Text #D8D2E4 (~8%) · Accent #7B5CFF (~10%). Background and surface dominate the canvas; reserve the accent color for primary buttons and active states.
## Layout & Conversion Structure
- Hero layout: Split Copy & Visual
- Navigation: Full-Width Top Bar
- Theme & density: Dark · Airy
- Border radius & elevation: Large Radius; no drop shadows—separate layers with hairline borders and whitespace
- Primary visual medium: Photography / Live Video
- Conversion CTA: Start Free / Sign Up
- Headline hook: Category Positioning Anchor
- Spatial layout notes: Split Copy & Visual hero structure paired with start free / sign up CTA and no explicit trust bar.
- Visual summary: Gradient Glow (Dark canvas, airy density) featuring split copy & visual layout and photography / live video visuals.
## Avoid
- Muddy low-contrast text over gradients
- Overuse of full-screen rainbow backgrounds
- Cluttered dense tables in the hero
Implement the UI following the design tokens and layout specifications above: use only these color variables, and reserve the accent color strictly for primary actions and active states. Adopt only this visual style—never copy any reference product’s brand name, logo, copy, or imagery.
Questions & evidence
- How much does Permit.io cost?
- Community: Free Forever; Enterprise: Contact sales; Free for OSS Projects: for free. Observed 2026-11-04. Check the source for current billing terms, usage limits and taxes.Source
- How much website traffic does Permit.io get?
- Vaneform estimates 42.4K website visits in 2026-09. Visits can include repeat visits; this estimate measures web traffic separately from paying customers or revenue.Source
- What is Permit.io and what platforms does it support?
- Permit.io is catalogued under Auth, Payments & Billing Infrastructure: Runtime Access Control for the AI Era.. Supported platforms: CLI / SDK, API.
- Is Permit.io open source?
- Permit.io has a public repository (https://github.com/permitio/opal) under the GPL-3.0 license, recording 315 GitHub stars.Source
Related products in this category
These products share a catalog category. Compare customer tasks, features and deployment requirements before treating them as alternatives.
| Product | Entry price | Visits | Revenue |
|---|---|---|---|
| Auth0GiantConvert, protect, & personalize every journey | $35/mo | 34.1M | Undisclosed |
| TrueLayerGiantWe’re leading the Pay by Bank revolution | — | 13.2M | Undisclosed |
| SureIDSecure User Authentication API Platform | — | 4.4M | Undisclosed |
| RevenueCatData and tools for every team | — | 3.2M | $297.98 |
| DigioThe Operating System of # Trust | — | 2.5M | Undisclosed |
| ClerkEverything you need for authentication | $25/mo | 1.8M | Undisclosed |