Convex Authz

This is a Zanzibar-inspired authorization library for Convex that gives you RBAC, ABAC, and ReBAC with O(1) permission checks through pre-computed indexes. You'd reach for it when building multi-tenant apps or anything where "can this user do this thing" needs to be fast and correct at scale. The v2 API unifies everything into a single Authz class with support for role inheritance, relationship traversal, and scoped permissions. It's opinionated about being Convex-native rather than database-agnostic, which means tighter integration but also lock-in. The type safety is solid and the tuple-based relationship model will feel familiar if you've used SpiceDB or similar systems.

skills.sh installs: 170
GitHub stars: 11
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add dbjpanda/convex-tenants --skill convex-authz --agent claude-code

Installs into .claude/skills of the current project.

Files

@djpanda/convex-authz

A comprehensive, production-ready authorization component for Convex featuring RBAC, ABAC, and ReBAC with O(1) indexed lookups, inspired by Google Zanzibar.