Permit.io

How I Developed A $100K/Year Permissions Management SaaS

创作者原帖摘录：

Hi HN! Co-Founder of Permit.io here, I’ve built access-control to my products, thousands of times throughout my career - and at no point did I want to. We adopted OPA, created OPAL.ac (open-source), and Permit.io on top - so no developer would have to build permissions again. To truly solve this problem end-to-end we’re releasing Permit-Elements ( https://pe

创作者原帖摘录：

Hello HN ! There’s been a lot of discussions [1,2] on how to build ReBAC [3] with Zanzibar and policy-as-code engines, but we (Permit) also think it’s important to talk about the interfaces on top of these implementations. We just launched a No-Code ReBAC interface - would love to know what you think. besides marrying the benefits of Policy as Code and Polic

创作者原帖摘录：

Since our early days of helping developers add fine-grained authorization with [Permit.io]( http://permit.io/ ), we've encountered two recurring questions from users: 1. How to manage the policy configuration natively within the existing SDLC. 2. How to maintain decoupling between the control plane (policy configuration) and the data plane (application conte

创作者原帖摘录：

Gabriel L. Manor, Permit's Director of DevRel here For the last three years, we have all seen a huge spike in developers implementing fine-grained authorization. Whether they choose the Google Zanzibar implementation or the OPA/Cedar policy approach, it has become a fundamental security and product requirement. While trying to provide the best developer expe

核心亮点评测：

Create complex authorization policies based on attributes and roles. SDKs for a wide variety of languages. Supports policy as code with Open Policy Agent and AWS Cedar. Can integrate at the gateway level (Kong, AWS API Gateway, Nginx, etc). Prebuilt UI components for allowing users to manage permissions.

局限与权衡：

Doesn’t handle authentication - you need to connect it to an auth provider. UI has no dark mode.

适用人群：

Developers needing authorization as a service should consider Permit

创作者原帖摘录：

Hi HN, I’m Gabriel, VP of DevRel at [Permit.io]( http://permit.io/ ). We just launched a major overhaul of our pricing, and, while working on this, I’ve encountered challenges I thought were unique to our SaaS. The more effort I put into this, the more I felt like balancing operational costs and providing customers with predictable pricing is something other

创作者原帖摘录：

Hi HN, I'm Gabriel, VP of DevRel at Permit.io. We keep hearing from AI developers that there’s no simple way to enforce access control in AI workflows—so most either build permission logic for their AI implementation from scratch. To help with this, we are introducing Permit.io AI Access Control - a set of new integrations with PydanticAI, LangChain, MCP, an

创作者原帖摘录：

Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated

Permit.io is a developer-focused authorization and permissions infrastructure company founded in 2020 by Or Weis.