Topics / #rbac

Rbac projects on GitHub

Role-based access control enforcement in identity and infrastructure platforms.

As of , the most-starred Rbac projects on GitHub are open-webui (155.9K stars), paperclip (103.3K stars) and LocalAI (49.6K stars). GitHub.Locker tracks 78 Rbac repositories with 1.3M stars combined. The fastest-growing on October 16 was paperclip, with +425 stars in a day.

78Projects
1.3MStars in total
+1.2KStars in a day
Browse in the catalog →github.com/topics/rbac ↗

Hot right now

Most stars gained in a day · Oct 16

+425

paperclip

paperclipai/paperclip · ★ 103.3K

Paperclip is an open-source Node.js server and React UI for orchestrating a whole team of AI agents to run a business — assigning goals, tracking work, and managing costs from one dashboard instead of babysitting individual agent sessions.

+169

WeKnora

Tencent/WeKnora · ★ 34.4K

WeKnora is an open-source, self-hosted knowledge platform that turns raw documents into a queryable RAG knowledge base, an autonomous ReAct agent, and a self-maintaining Wiki with an interactive knowledge graph.

+108

open-webui

open-webui/open-webui · ★ 155.9K

Open WebUI is a self-hosted AI platform that gives you a chat-style web interface for Ollama and any OpenAI-compatible API, built to run entirely offline if you want.

+39

OpenLore

aakarim/OpenLore · ★ 1.3K

OpenLore is a self-hosted, agent-native knowledge server: point it at a folder of Markdown and every agent on the team (Claude Code, Codex, Cursor, CI jobs) reads the same files over SSH and MCP, with control over who can see and change what.

The all-time top

78 projects · by stars

  1. #1 · open-webui/open-webui

    open-webui

    Open WebUI is a self-hosted AI platform that gives you a chat-style web interface for Ollama and any OpenAI-compatible API, built to run entirely offline if you want.

    155.9K
  2. #2 · paperclipai/paperclip

    paperclip

    Paperclip is an open-source Node.js server and React UI for orchestrating a whole team of AI agents to run a business — assigning goals, tracking work, and managing costs from one dashboard instead of babysitting individual agent sessions.

    103.3K
  3. #3 · mudler/LocalAI

    LocalAI

    LocalAI is an open-source, self-hosted AI engine that lets you run LLMs, vision, voice, image and video models on your own hardware, including CPU-only setups, through an OpenAI/Anthropic/ElevenLabs-compatible API.

    49.6K
  1. 4

    JeecgBoot

    48.2Kjeecgboot/JeecgBoot · Java

    JeecgBoot is an enterprise AI low-code platform: you describe what you need in natural language and it generates the front-end, back-end CRUD code, database tables and menu permissions, while also bundling a Dify-like AI app module with chat, RAG knowledge bases, flow orchestration and MCP plugins.

  2. 5

    agno

    42.8Kagno-agi/agno · Python

    Agno is a framework and runtime for building, running, and managing agent platforms: build agents with the SDK, serve them via the AgentOS runtime, and manage everything from a web UI.

  3. 6

    ToolJet

    41.1KToolJet/ToolJet · HTML

    ToolJet is an open-source platform for building internal tools, admin panels, dashboards, and business apps on top of your existing databases, APIs, and SaaS systems. You can build apps visually, from a text prompt, or via coding agents (Claude Code, Codex, Cursor) through its MCP server.

  4. 7

    ruoyi-vue-pro

    39.9KYunaiV/ruoyi-vue-pro · Java

    RuoYi-Vue-Pro is an open-source enterprise admin management system backend built with Spring Boot, MyBatis Plus and Vue/Element, bundled with a WeChat mini-program and optional business modules like Mall, CRM, ERP, OA, MES and IM.

  5. 8

    keycloak

    37.4Kkeycloak/keycloak · Java

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

  6. 9

    WeKnora

    34.4KTencent/WeKnora · Go

    WeKnora is an open-source, self-hosted knowledge platform that turns raw documents into a queryable RAG knowledge base, an autonomous ReAct agent, and a self-maintaining Wiki with an interactive knowledge graph.

  7. 10

    onyx

    32.5Konyx-dot-app/onyx · Python

    Onyx is an open source AI platform that gives you a full-featured chat interface on top of any LLM, with built-in RAG, web search, agents, and more.

  8. 11

    TradingAgents-CN

    32.3Khsliuping/TradingAgents-CN · Python

    TradingAgents-CN is a Chinese-enhanced learning and research platform built on a multi-agent LLM trading framework, helping Chinese-speaking users systematically study stock analysis using multiple AI agents for A-share, Hong Kong, and US markets. It explicitly does not issue real trading orders and is positioned for education and research only.

  9. 12

    infisical

    29.8KInfisical/infisical · TypeScript

    Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.

  10. 13

    vhr

    28Klenve/vhr · Java

    This is Vhr (微人事), a human resources management system with a separated front-end and back-end, built with Spring Boot on the backend and Vue on the frontend.

  11. 14

    kuboard-press

    25.3Keip-work/kuboard-press · Shell

    Kuboard is a free management interface built for Kubernetes (compatible with K8s 1.13+) that turns cluster management into a visual web dashboard. This repo holds the source of its v4 documentation site.

  12. 15

    pangolin

    23.1Kfosrl/pangolin · TypeScript

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

  13. 16

    eladmin

    21.9Kelunez/eladmin · Java

    ELADMIN is an open-source, front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis and Vue — a base system that handles users, roles, menus and permissions for your own business apps.

  14. 17

    netbox

    21.7Knetbox-community/netbox · Python

    NetBox is the open-source source of truth for network infrastructure: it models and documents everything networked — racks, cables, IP addresses — and serves that data to your automation tools.

  15. 18

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

  16. 19

    casbin

    20.5Kapache/casbin · Go

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

  17. 20

    suna

    20.3Kkortix-ai/suna · TypeScript

    Kortix (Suna) is an open-source AI Management System — an alternative to Claude Cowork and ChatGPT Work — where your agents, their shared skills, company memory and connectors all live in one git repo that your whole company owns and can audit.

  18. 21

    yudao-cloud

    19.6KYunaiV/yudao-cloud · Java

    It's an open-source enterprise admin platform: a Spring Cloud Alibaba microservices backend plus a web admin console and a user mini-program, with RBAC permissions, multi-tenancy, workflow, payment, mall, CRM, ERP, IM, AI and IoT modules built in.

  19. 22

    vue-admin-better

    18.9Kzxwk1998/vue-admin-better · Vue

    vue-admin-better is an open-source Vue admin dashboard template: a ready-made admin panel skeleton with 40+ polished pages, RBAC + JWT permission control and dynamic backend-driven routing, already used in 100,000+ real projects.

  20. 23

    DocsGPT

    18.3Karc53/DocsGPT · Python

    DocsGPT is a private, self-hosted AI platform for building agents, assistants, and enterprise search tools, with a built-in Agent Builder, document analysis, deep research mode, and support for multiple LLM providers.

  21. 24

    kubesphere

    17.1Kkubesphere/kubesphere · Go

    KubeSphere is a container platform built on Kubernetes for managing cloud-native apps across multi-cloud, datacenter, and edge environments. It adds a developer-friendly web console, multi-tenancy, DevOps workflows, and a plug-and-play extension ecosystem on top of your clusters.

  22. 25

    edict

    17Kcft0808/edict · Python

    Edict is a multi-agent orchestration system for OpenClaw: 12 AI agents (11 business roles plus one compatibility agent) work as an ancient Chinese imperial bureaucracy — planning, review, dispatch and parallel execution — with a real-time dashboard and full audit trails.

  23. 26

    saas-starter

    16.2Knextjs/saas-starter · TypeScript

    A free, open-source starter template for building a SaaS web app on Next.js, maintained under the official Next.js org: authentication, Stripe payments, and a dashboard for logged-in users come already wired up.

  24. 27

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  25. 28

    stalwart

    15.1Kstalwartlabs/stalwart · Rust

    Stalwart is an all-in-one, open-source mail and collaboration server written in Rust that supports email (JMAP, IMAP4, POP3, SMTP), calendaring (CalDAV), contacts (CardDAV) and file storage/sharing (WebDAV) in a single binary.

  26. 29

    cloud-mail

    14.7Kmaillab/cloud-mail · JavaScript

    Cloud Mail is a minimalist email service built on Cloudflare: with just one domain you can create multiple mailboxes, like the big mail platforms but running on your own Cloudflare Workers at low cost.

  27. 30

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  28. 31

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  29. 32

    bytebase

    14.6Kbytebase/bytebase · Go

    Bytebase is an open-source database governance platform that acts as a control plane between users (humans and AI agents) and databases, governing change management, access control, and compliance so every change and query is reviewed, controlled, and recorded.

  30. 33

    unleash

    13.9KUnleash/unleash · TypeScript

    Unleash is an open-source feature management platform that lets teams turn features on or off, roll them out gradually, and run A/B tests without redeploying code.

  31. 34

    emdash

    13.7Kemdash-cms/emdash · TypeScript

    EmDash is a full-stack TypeScript CMS built on Astro and Cloudflare, meant as a modern, type-safe successor to WordPress with a sandboxed plugin system.

  32. 35

    nightingale

    13.4Kccfos/nightingale · Go

    Nightingale is an open-source monitoring and alerting platform that focuses on generating, processing and distributing alarms, connecting to existing metrics/log data sources rather than collecting data itself.

  33. 36

    laravel-permission

    13Kspatie/laravel-permission · PHP

    A Laravel package that lets you manage user permissions and roles through your database, and checks them via Laravel's built-in Gate system.

  34. 37

    go-admin

    12.8Kgo-admin-team/go-admin · Go

    go-admin is a full-stack scaffold for building admin/back-office management systems: a Gin-based Go REST API paired with a Vue frontend (Element UI, Arco Design, or Ant Design). It comes with RBAC permission control, multi-tenant support, JWT auth, a code generator, and a drag-and-drop form builder so you can bootstrap a management panel quickly.

  35. 38

    nebula

    12.4Kvesoft-inc/nebula · C++

    NebulaGraph is an open-source distributed graph database built to handle large volumes of highly connected data with millisecond latency and quick horizontal scaling.

  36. 39

    kafka-ui

    12.3Kprovectus/kafka-ui · Java

    A free, open-source web UI for monitoring and managing Apache Kafka clusters — a lightweight dashboard that makes your data flows observable and helps find and troubleshoot issues faster. Built by developers, for developers.

  37. 40

    aureuserp

    12.1Kaureuserp/aureuserp · PHP

    AureusERP is a free, open-source Enterprise Resource Planning (ERP) platform for running business operations like accounting, inventory, HR, sales, purchasing, and manufacturing from one system.

  38. 41

    bisheng

    12.1Kdataelement/bisheng · Python

    BISHENG is an open-source LLM application devops platform built for enterprise AI, covering GenAI workflow building, RAG, agents, model management, evaluation, SFT, dataset management and observability.

  39. 42

    aspnetboilerplate

    12Kaspnetboilerplate/aspnetboilerplate · C#

    ASP.NET Boilerplate (ABP) is a general-purpose application framework for building modern ASP.NET web apps, implementing best practices like layered architecture and Domain Driven Design out of the box so you can focus on business code.

  40. 43

    walle-web

    12Kmeolu/walle-web · Python

    Walle (瓦力) is an open-source, web-based code deployment platform that lets you publish and roll back code written in PHP, Java, Python, Go and more through a browser instead of relying solely on Jenkins.

  41. 44

    vcluster

    11.4Kloft-sh/vcluster · Go

    vCluster creates Tenant Clusters: fully isolated virtual Kubernetes clusters, each with its own API server, CRDs, and RBAC, running on top of an existing Kubernetes cluster or standalone on bare metal.

  42. 45

    spug

    11.1Kopenspug/spug · JavaScript

    Spug is a lightweight, agent-free ops platform built for small and medium-sized businesses that bundles host management, batch command execution, an online SSH terminal, file transfer, build/deploy pipelines, task scheduling, a configuration center, and monitoring/alerting into one web app.

  43. 46

    certified-kubernetes-administrator-course

    10.9Kkodekloudhub/certified-kubernetes-administrator-course · Shell

    This is a collection of notes and resources from the Certified Kubernetes Administrator (CKA) course hosted on KodeKloud, covering every exam topic from core concepts to networking and troubleshooting.

  44. 47

    filebrowser

    8.8Kgtsteffaniak/filebrowser · Go

    FileBrowser Quantum is a self-hosted web app that lets you browse, manage, preview, and edit your files through a browser, with a modern responsive UI.

  45. 48

    dockhand

    6.8KFinsys/dockhand · TypeScript

    Dockhand is a self-hosted web UI for managing Docker environments - containers, Compose stacks, images, and volumes - across local and remote hosts, with live monitoring, logs, and a built-in terminal.

  46. 49

    scanopy

    5.9Kscanopy/scanopy · Rust

    Scanopy is a self-hosted tool that automatically scans your network and keeps network diagrams and documentation continuously up to date instead of you drawing them manually.

  47. 50

    skillhub

    5.2Kiflytek/skillhub · Java

    SkillHub is a self-hosted, open-source agent skill registry that lets enterprises publish, version, and govern reusable agent skill packages behind their own firewall.

  48. 51

    fleetbase

    4.4Kfleetbase/fleetbase · JavaScript

    Fleetbase is an open-source, modular operating system for logistics and supply chain operations. It covers dispatch, fleet management, live tracking, commerce, warehousing, and finance in one platform, with a REST API, webhooks, and an extension system.

  49. 52

    Clawith

    4.2Kdataelement/Clawith · Python

    Clawith is an open-source multi-agent collaboration platform where every AI agent gets a persistent identity, long-term memory, and its own workspace, and agents work together as a crew alongside humans.

  50. 53

    WechatOnCloud

    3.9KGloridust/WechatOnCloud · TypeScript

    WechatOnCloud (云微) is a self-hosted panel that runs 'server-side WeChat' in a Docker container on your own NAS or server, so multiple browsers/devices can share the exact same logged-in session.

  51. 54

    goclaw

    3.7Knextlevelbuilder/goclaw · Go

    GoClaw is a multi-tenant AI agent gateway/platform written in Go that connects 20+ LLM providers to 7 messaging channels, letting you deploy and orchestrate teams of AI agents at scale with production-grade security.

  52. 55

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

  53. 56

    agor

    1.5Kpreset-io/agor · TypeScript

    Agor is a web workspace that brings teams and AI coding agents together on live spatial boards, letting people run agents like Claude Code, Codex, and Gemini on isolated git branches while sharing memory, skills, and dev environments.

  54. 57

    OpenLore

    1.3Kaakarim/OpenLore · Go

    OpenLore is a self-hosted, agent-native knowledge server: point it at a folder of Markdown and every agent on the team (Claude Code, Codex, Cursor, CI jobs) reads the same files over SSH and MCP, with control over who can see and change what.

  55. 58

    os

    821iblai/os · TypeScript

    ibl.ai/os is an open-source AI agent platform for building, deploying, and managing intelligent conversational agents, from prototype to production, with support for any LLM provider.

  56. 59

    anythingmcp

    753HelpCode-ai/anythingmcp · TypeScript

    AnythingMCP is a self-hosted MCP gateway that turns REST/OpenAPI, SOAP, GraphQL, OData or SQL APIs into MCP tools usable by Claude, ChatGPT and Copilot, shipping with hundreds of ready-made connectors for systems like SAP, ERPs and e-commerce platforms.

  57. 60

    evenfire

    729evenfire-ai/evenfire · TypeScript

    Evenfire is a self-hosted platform for running LLM agents that take real actions on your own infrastructure, with a Kubernetes backend, an admin Control UI, and a native Electron desktop client, so your team and AI agents can work together without losing control.

  58. 61

    bisibility

    605CorgiCorner/bisibility · TypeScript

    bisibility is an open-source SEO platform for researching keywords, inspecting backlinks, and tracking Google search rankings, with all the data stored in a PostgreSQL database you control.

  59. 62

    run-ai

    428dsx-ai-factory/run-ai · Go

    NVIDIA Run:ai is an open-source AI workload and GPU orchestration platform for managing shared AI infrastructure on Kubernetes, handling GPU scheduling, resource quotas, and governance across teams.

  60. 63

    openclaw-enterprise

    415openclaw/openclaw-enterprise · JavaScript

    OpenClaw Enterprise (OCE) is an open-source, vendor-neutral control plane for deploying and managing AI agents, described by its authors as being like 'Kubernetes for agents'.

  61. 64

    vphone-web

    37434306/vphone-web · HTML

    It is a self-hosted web platform for running multiple virtual iPhones in the browser at once, with user accounts, RBAC, live screen streaming, touch input, IPA install, a root shell and a file browser, built on top of the vphone-cli engine using Apple's Virtualization.framework.

  62. 65

    codflow

    368bighadj22/codflow · TypeScript

    CodFlow is an open-source, Cash-on-Delivery (COD) e-commerce and delivery platform built specifically for Algeria, deployable on your own Cloudflare account with zero transaction fees.

  63. 66

    Trenova

    330emoss08/Trenova · Go

    Trenova is an open-source (Fair Source) Transportation Management System for small and mid-sized US trucking carriers, covering the full order-to-cash cycle: shipment entry, dispatch, rating, billing, accounting, EDI, and FMCSA compliance.

  64. 67

    halofy

    319halofyai/halofy · TypeScript

    Halofy is an access and governance layer that sits between an organization's knowledge and the AI agents that use it, handling identity, policy, provenance, audit, and signed erasure.

  65. 68

    ApeAdmin

    289KevinLiss/ApeAdmin · Python

    ApeAdmin is an open-source Python admin backend framework built on FastAPI and Vue3, aimed at modern AI applications. It bundles RBAC permission control and audit logging with a plugin ecosystem and an MCP-SSE gateway that exposes system and plugin capabilities as tools AI agents can call.

  66. 69

    k8scout

    258k8scout/k8scout · Go

    k8scout is a single-binary tool you drop into a compromised Kubernetes pod to automatically map every realistic attack path from that foothold to cluster-admin, node escape, secret theft, or cloud IAM takeover.

  67. 70

    labtether

    249labtether/labtether · Go

    LabTether is a self-hosted control plane that unifies monitoring and control of your homelab (Proxmox, TrueNAS, Docker, Home Assistant, etc.) into one dashboard with remote terminal, remote desktop, alerts, and an AI-operable interface.

  68. 71

    cynative

    223cynative/cynative · Go

    Cynative is an open-source AI agent framework that gives LLMs live, read-only access to your AWS, Azure, GCP, Kubernetes, GitHub and GitLab infrastructure so you can ask security questions and run cloud security posture and detection checks.

  69. 72

    zilan

    200lxcshine/zilan · Go

    Zilan is an LLM-powered knowledge management and Q&A platform that unifies RAG quick Q&A, ReAct agent reasoning, and auto-generated Wiki knowledge distillation into one minimalist knowledge hub.

  70. 73

    cohort-harbor

    198lantingzhang1119/cohort-harbor · TypeScript

    CohortHarbor is a self-hosted platform that combines employee accounts, onboarding materials, versioned company policies, online learning, exams, automated welcome emails, and private file protection into a single full-stack app, meant for internal deployment and further customization.

  71. 74

    financial_intelligence_system_web

    197zhangzf1119/financial_intelligence_system_web · Vue

    FinSight Enterprise Frontend is the Vue 3 + TypeScript frontend for FinSight, an enterprise intelligence management platform offering an admin dashboard, AI model chat, a RAG knowledge base, a file center, workflow approvals, system monitoring, log auditing and in-app messaging.

  72. 75

    financial-intelligence-system

    171zhangzf1119/financial-intelligence-system · Java

    FinSight Enterprise Backend is a Spring Boot 3 backend for an enterprise intelligent management platform, covering RBAC, logging, monitoring, a file center, workflow approvals, in-app instant messaging, AI model chat and a RAG knowledge base.

  73. 76

    clevis

    169nazarli-shabnam/clevis · JavaScript

    Clevis is a self-hosted dashboard that turns the GitHub API into security and analytics insight for your repositories and organizations — it computes a security score from six automated checks (MFA enforcement, branch protection, secret scanning, Dependabot alerts, code scanning alerts, default-branch force-push protection) and lets admins run privileged maintenance jobs like clearing GitHub Actions caches.

  74. 77

    StarLive

    168SMNETSTUDIO/StarLive · TypeScript

    StarLive is a self-hosted live-streaming and interaction platform: it handles the video stream, real-time danmaku/gifts/red-packets/lottery, moderation, and a built-in StarCoin virtual-currency economy. It's a rewrite of the legacy LDLive, moving from serverless HTTP polling to a standalone NestJS backend with persistent Socket.IO connections.

  75. 78

    NodePilot

    110Sev7eNup/NodePilot · C#

    NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.

Often tagged together