Skip to content
Vinkius

OpenFGA (Fine-Grained Auth) Connector for AI agents.

16 live capabilities

Manage complex ReBAC permissions and authorization models with natural language.

Live agent request OpenFGA (Fine-Grained Auth) / Connector

Waiting for input…

AI Agent

Why people use OpenFGA (Fine-Grained Auth)

OpenFGA ReBAC Authorization Management for AI Agents

With this Connector, you can handle your OpenFGA instance through natural conversation. You can ask your agent to build out new authorization models, create isolated stores for different environments, or audit the relationship tuples that govern your security. It handles the heavy lifting of the Zanzibar-inspired logic so you can focus on the actual security policy.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • Visual Studio Code
  • Windsurf

What Vinkius changes

You get to manage complex ReBAC permissions through a chat interface instead of manual API calls.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

  1. Real-world use case 01

    Auditing user access

    A security engineer asks the agent to list every object a specific user can access to ensure they don't have over-privileged permissions.

  2. Real-world use case 02

    Testing new roles

    A developer wants to see if a new 'editor' role works.

  3. Real-world use case 03

    Environment setup

    A DevOps engineer needs to spin up a new lab environment and asks the agent to create a new store for the test cluster.

Complete set · 16capabilities

The complete OpenFGA (Fine-Grained Auth) capability set.

These are the exact actions your AI can choose when you ask it to work with OpenFGA (Fine-Grained Auth).

Capability set01 / 04

01—04

4 capabilities in this set.

Part of 16 available through OpenFGA (Fine-Grained Auth).

  1. 01 Capability

    List authorization models

    List authorization models. Use this to see all the security models you have defined.

  2. 02 Capability

    List users

    List all users who have a relation to an object. This helps you identify everyone with access to a resource.

  3. 03 Capability

    Read changes

    Read changes to relationship tuples. Use this to track updates to your security rules.

  4. 04 Capability

    Read tuples

    Query stored relationship tuples. This lets you see the raw data of your permission links.

Capability set02 / 04

05—08

4 capabilities in this set.

Part of 16 available through OpenFGA (Fine-Grained Auth).

  1. 05 Capability

    Write authorization model

    Write a new authorization model. Use this to define new types and relations for your system.

  2. 06 Capability

    Write tuples

    Add or delete relationship tuples. This is how you grant or revoke specific permissions.

  3. 07 Capability

    Check relation

    Check if a user has a relation to an object. This lets you verify specific permissions instantly.

  4. 08 Capability

    Create store

    Create a new OpenFGA store. Use this to set up isolated environments for different applications.

Capability set03 / 04

09—12

4 capabilities in this set.

Part of 16 available through OpenFGA (Fine-Grained Auth).

  1. 09 Capability

    Delete store

    Delete an OpenFGA store. This helps you clean up old environments or test new setups.

  2. 10 Capability

    Expand relation

    Expand a relation into a tree. Use this to visualize the hierarchy of nested permissions.

  3. 11 Capability

    Get authorization model

    Get a specific authorization model. This lets you see the structure of your security logic.

  4. 12 Capability

    Get store

    Get OpenFGA store details. Use this to check the configuration of a specific environment.

Capability set04 / 04

13—16

4 capabilities in this set.

Part of 16 available through OpenFGA (Fine-Grained Auth).

  1. 13 Capability

    Health check

    Check OpenFGA instance health. This helps you ensure your authorization system is running correctly.

  2. 14 Capability

    List objects

    List all objects a user can access. This is great for auditing what a specific user can see.

  3. 15 Capability

    List stores

    List all OpenFGA stores. Use this to see all your managed environments at once.

  4. 16 Capability

    Batch check relations

    Perform multiple checks in one request. Use this to verify many permissions at the same time.

Set up in minutes

One URL. Then ask OpenFGA (Fine-Grained Auth) to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use OpenFGA (Fine-Grained Auth) from the conversation.

Choose your client

Live preview
Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP
https://edge.vinkius.com/vk_preview_VDWoQMoj6eTPYg6n6XBuedyNPsCIKIje0Bwlugcp/mcp
  1. Step 01

    Open Connectors

    In Claude Web or Claude Desktop, open Settings and choose Connectors.

  2. Step 02

    Add the URL

    Choose Add custom connector, name it OpenFGA (Fine-Grained Auth), and paste the URL above.

  3. Step 03

    Turn it on in chat

    Select +, open Connectors, and enable OpenFGA (Fine-Grained Auth) for the conversation.

Where the request belongs

Work OpenFGA can move forward.

Built around the request

This is for security engineers and backend developers who are tired of manual permission auditing and want to manage complex relationships without writing boilerplate code.

01

Security Engineer

Audits relationship tuples and verifies authorization models to ensure security policies are correctly enforced.

02

Backend Developer

Tests and iterates on authorization models during development to ensure new features have the correct access controls.

03

DevOps Engineer

Monitors the health of the authorization instance and manages environment-specific stores across clusters.

Build the capability set

Add more capabilities.

Each Connector adds new actions and data without changing how you work.

Browse Connectors
Cerbos (Access Control) logo
01 19 capabilities

Cerbos (Access Control)

Decouple authorization from your code. Manage policies, check permissions, and audit access control directly through your AI agent.

View Connector
Permit.io logo
02 18 capabilities

Permit.io

Orchestrate full-stack authorization, manage RBAC/ReBAC policies, and evaluate permissions in real-time via Permit.io.

View Connector
Permify logo
03 21 capabilities

Permify

Manage fine-grained authorization and access control via Permify. write schemas, manage relation tuples, and perform real-time permission checks.

View Connector
Cerbos logo
04 6 capabilities

Cerbos

Decouple authorization logic from your application. Evaluate permissions, generate query plans, and manage access control via AI.

View Connector
Authing logo
05 10 capabilities

Authing

Cloud-native identity and access management platform. manage users, roles, and security logs via AI.

View Connector
Aserto logo
06 7 capabilities

Aserto

Manage authorization policies and evaluate access control decisions via Aserto. run Rego queries, check user permissions, and audit decision logs.

View Connector

Bring your own AI

Change the model, client or framework. Keep OpenFGA connected.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • VS Code
  • Windsurf
  • ZCode
  • Cline
  • Zed
  • Continue
  • Kiro
  • Roo Code
  • Zencoder
  • Goose
  • Void
  • Augment Code
  • Amp
  • Qodo
  • Tabnine
  • Pieces
  • Sourcegraph Cody
  • JetBrains
  • Warp
  • Amazon Q
  • Antigravity
  • BoltAI
  • Raycast
  • Jan
  • LM Studio
  • AnythingLLM
  • Open WebUI
  • Msty
  • Cherry Studio
  • LibreChat
  • TypingMind
  • Chorus
  • 5ire
  • n8n
  • LangChain
  • LlamaIndex
  • CrewAI
  • Vercel AI SDK

Before you connect

Questions about OpenFGA.

The practical details behind the request, access and result.

How does OpenFGA help with my application permissions?

It allows you to manage complex permissions based on relationships. Instead of just checking roles, it checks how users and objects are connected, which is ideal for systems with complex sharing rules.

Can I use OpenFGA for different environments?

Yes, you can create isolated stores for different environments like staging, production, and development. This keeps your security logic separate and organized.

How do I check if a user has access to a specific resource?

You can simply ask your agent to check the relation for you. It will query the system and tell you immediately if the user is allowed to see or modify that specific object.

What is a relationship tuple in OpenFGA?

A relationship tuple is a way to define a link between two entities, like a user and a document. It tells the system that a specific connection exists, which the system then uses to calculate permissions.

Is OpenFGA good for scaling large systems?

Yes, it's inspired by Google's Zanzibar, which was built to handle permissions at massive scale. It's designed specifically for high-performance, fine-grained authorization.

Can I manage multiple stores at once?

Yes, you can list all your stores and switch between them easily using natural language commands. This makes managing multi-tenant or multi-environment setups much faster.

How can I check if a specific user has access to a resource?

You can use the check_relation capability. Provide the store ID and the relationship details (user, relation, and object) to get an immediate boolean response on whether the access is permitted.

Can I see the history of changes made to relationship tuples?

Yes, the read_changes capability allows you to retrieve the changelog of relationship tuples for a specific store, optionally filtered by object type.

How do I define a new authorization model?

Use the write_authorization_model capability. You will need to provide the store ID, the schema version, and a JSON array of type definitions that describe your relations.

One connection away

Give your agent a direct line to OpenFGA.

Connect OpenFGA once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available