Authorizer Adds Permission Checks for AI Access to Company Documents
Summary
Authorizer combines sign-in and fine-grained access control, letting AI assistants check document permissions before retrieval. Its maintainers say the built-in MCP server is read-only and local-only.
Key points
- Authorizer is an open-source, self-hosted Go server combining authentication and authorization.
- It can provide a list of documents a user may access before vector search scores results, according to the article.
- It supports email and password, magic links, passkeys, social login, SAML and OpenID Connect single sign-on, and multifactor authentication codes.
- The server embeds OpenFGA for relationship-based permissions and includes three read-only MCP functions: profile, check_permissions, and list_permissions.
- The maintainers say the MCP server operates only over local stdio and is not network-accessible; they also say an agent receives only permissions shared with the user.
Article Details
- Event Type
- Open-source authentication and authorization platform announcement
- Impact
- Authorizer combines sign-in, access control, and AI-aware permission checks. It filters documents a user is not permitted to access before they are scored in vector search, and provides read-only permission functions for AI agents through a local MCP server. The article describes these capabilities; it does not report a security incident or confirmed impact.
Products
AuthorizerAuthorizer is an open-source sign-in and access control server that adds AI-aware permission checks so assistants can verify whether a user may access a document before retrieval.OpenFGAIt supports many login methods, multiple databases, and embeds OpenFGA plus a local MCP server to enforce fine-grained access control for teams using AI with company files.