Cerbos Has a Free API: Add Authorization to Any App in 5 Minutes Without Writing Policy Logic
You just shipped a multi-tenant SaaS app. Everything works great — until your biggest customer asks: "Can junior editors view but not delete published posts?" You spend three days tangling role che...

Source: DEV Community
You just shipped a multi-tenant SaaS app. Everything works great — until your biggest customer asks: "Can junior editors view but not delete published posts?" You spend three days tangling role checks across 40 endpoints. There has to be a better way. That better way is Cerbos — and yes, it has a free API you can hit right now. What Cerbos Actually Does Cerbos is an open-source authorization engine that decouples your access control logic from your application code. Instead of scattering if (user.role === 'admin') checks everywhere, you write human-readable policies in YAML, and Cerbos evaluates them at runtime. The core idea: your app asks Cerbos "Can user X do action Y on resource Z?" and Cerbos answers yes or no — instantly, based on the policies you defined. You get auditable, testable, version-controlled authorization logic that lives outside your codebase. Cerbos works as a sidecar, a standalone service, or via their hosted Cerbos Hub. The self-hosted version is completely free a