Permit.io

Permit.io provides authorization infrastructure for software and AI agents, covering application and API permissions, a gateway for Model Context Protocol traffic, a gateway for coding agents and AI access control. It supports role based, attribute based and relationship based models rather than committing to one.

Supporting all three models is a practical choice rather than indecision. Most systems start with roles because roles are simple, then discover a rule that roles cannot express, such as access depending on a record's attributes or on a relationship between user and resource. A platform covering all three lets a team start simple and add the harder model where it is actually needed instead of migrating tools when it hits the wall.

The Elements feature provides embeddable user facing components for permission management, which addresses a part of this problem teams routinely underestimate. Deciding permissions is one job, but giving customers a screen to manage their own users and roles is a whole interface that has to be built for every application.

The MCP gateway and coding agent gateway are recent additions responding to agents acting on systems, where the question of what an agent may do on whose behalf needs answering at the boundary. Audit logs, a policy engine and a CLI complete the platform.