# openfga を Homebrew, Nix, scoop でインストール

openfga のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:openfga
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install openfga
```

  証拠: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#openfga
```

  証拠: nixpkgs package indexes: pkgs/by-name/op/openfga/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- Scoop (92%):

```sh
scoop install main/openfga
```

  証拠: Scoop official bucket manifest trees: bucket/openfga.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:openfga
- **パッケージマネージャ:** Homebrew
- **バージョン:** 1.18.1
- **ソース概要:** High performance and flexible authorization/permission engine
- **ホームページ:** <https://openfga.dev/>
- **リポジトリ:** <https://github.com/openfga/openfga>
- **最終更新:** 2026-07-27T23:46:51+02:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- openfga (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 1.18.1
## プロジェクトの歴史と使われ方

OpenFGA is an open-source, Zanzibar-inspired fine-grained authorization service for modeling and checking relationships between users, objects, and permissions. It packages relationship-based access control behind HTTP APIs, SDKs, a CLI, a playground, and deployable server artifacts, giving application teams a shared authorization engine instead of embedding access-control rules separately in each service.

### プロジェクトの歴史

Auth0 announced OpenFGA on June 17, 2022 as the open-source engine powering Auth0 Fine Grained Authorization. The project was designed, built, and sponsored by Okta/Auth0, and its model follows the ideas in Google's Zanzibar paper while exposing a developer-facing modeling language and APIs for authorization checks.

The project moved quickly from initial release to a cloud-native operational shape. OpenFGA v1.0 was announced on April 14, 2023 for launch at KubeCon + CloudNativeCon Europe, with improvements such as a more readable authorization model language, ListObjects, OpenTelemetry tracing, Prometheus metrics, profiling, Helm-chart deployment, a PostgreSQL storage-adapter performance push, and expanded SDK support.

OpenFGA entered CNCF Sandbox status in September 2022 and was accepted as a CNCF Incubating project in November 2025. The CNCF incubation announcement describes the project as the foundation for Auth0 FGA and notes growing maintainer participation from companies beyond Okta/Auth0.

### 採用の歴史

OpenFGA's adoption story is tied to the cloud-native search for externalized authorization. Its own site lists adopters including Auth0, Canonical, Docker, Grafana, Headspace, OpenObserve, Read AI, Sourcegraph, and Zuplo, while the CNCF incubation announcement reports public production acknowledgements from 37 companies and broader use by hundreds of companies.

The ecosystem expanded beyond the server itself through SDKs, storage adapters, tooling, and integrations. By the v1.0 announcement, community work included a MySQL storage adapter, SDKs for additional languages, and integrations with projects such as Open Policy Agent, Keycloak, Kratos, and SCIM; the later CNCF announcement also highlights SQLite, Terraform, VS Code, and IntelliJ ecosystem work.

### 使われ方

Developers use OpenFGA by writing an authorization model and then storing relationship tuples that bind users, relations, objects, and optional conditions. The Check API answers whether a user has a relation to an object, while ListObjects and related APIs help ask reverse questions such as which resources a user may access.

The modeling language can be authored as JSON or as a DSL that compiles to JSON before reaching the API. This makes the same authorization graph usable through direct API calls, SDKs, the CLI, the playground, and IDE extensions, while keeping the stored model close to Zanzibar's tuple-to-userset concepts.

### パッケージ好きにとっての重要性

For package nerds, OpenFGA is notable because it turns a research lineage from Google's Zanzibar into a package-manager-installable service with operational batteries: binaries, containers, Helm charts, SDKs, adapters, and migration-managed storage backends.

Its metadata also captures a broader trend: authorization is moving from application libraries toward standalone infrastructure, sitting near identity providers, service meshes, policy engines, and databases in the developer toolbox.

### タイムライン

- June 2022: Auth0 announced OpenFGA as the open-source engine behind Auth0 Fine Grained Authorization.
- September 2022: OpenFGA was accepted as a CNCF Sandbox project.
- April 2023: OpenFGA v1.0 was announced for launch at KubeCon + CloudNativeCon Europe.
- November 2025: CNCF accepted OpenFGA as an Incubating project.

### Related projects

- OpenFGA is directly related to Google's Zanzibar paper and to the commercial Auth0 FGA service. In the wider authorization ecosystem it sits near Open Policy Agent, Keycloak, Kratos, SCIM integrations, and other ReBAC/RBAC/ABAC tooling.

### ソース

- <https://auth0.com/blog/auth0s-openfga-open-source-fine-grained-authorization-system/>
- <https://auth0.com/blog/openfga-v10-a-new-milestone-in-cloud-native-authorization-systems/>
- <https://github.com/openfga/openfga>
- <https://openfga.dev/>
- <https://openfga.dev/docs/concepts>
- <https://openfga.dev/docs/configuration-language>
- <https://raw.githubusercontent.com/openfga/openfga/main/RELEASES.md>
- <https://www.cncf.io/blog/2025/11/11/openfga-becomes-a-cncf-incubating-project/>


## セキュリティノート

openfga に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/openfga/config.yaml, ~/.openfga/config.yaml, ./config.yaml
## 他のパッケージマネージャ記録

- Nix - openfga: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/openfga/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - main/openfga: normalized package name match | Scoop official bucket manifest trees: bucket/openfga.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/openfga.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openfga.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph