Oso Authorization for SQLAlchemy

In plain words

Oso Authorization for SQLAlchemy is a drop-in integration that adds a central authorization layer to applications using SQLAlchemy as their ORM. It is designed for developers building web applications, RAG pipelines, and agentic systems who need consistent access control across their codebase. The integration simplifies maintaining authorization rules in one place rather than scattering them throughout the application.

written from the facts on this page · September 2026

From the sources

For folks using FastAPI / FastMCP along with SQLAlchemy for RAG pipelines, MCP servers and agentic workflows, this integration provides fine grained access control on the ORM layer itself.

Ship secure, permissions-aware RAG apps with Oso. Define access rules once, apply them to SQLAlchemy queries, and filter embeddings in pgvector automatically.

We’ve spoken with nearly 100 engineering teams about their AI projects since the start of the year. Most have shipped something …to satisfy their CEOs, if nothing else. But they’re really just dipping their toes in the water, starting with low-risk areas like internal tools, autofill features, or Q&A over public knowledge bases. The world wants to ship more with LLMs, but most people who work in real companies are afraid of doing something wrong, especially leaking private data. So, today we’re launching the Oso SQLAlchemy integration . Python is the dominant language for building AI pipelines, and SQLAlchemy remains the most widely used ORM in that ecosystem. Integrating with SQLAlchemy…from osohq.com

• OO
  oso – Open-Source Policy Engine for Authorization2020 · osohq.com · ▲44

  Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.

• 
  Oxyde – Pydantic-native async ORM with a Rust coreMar 2026 · github.com · ▲155

  Hi HN! I built Oxyde because I was tired of duplicating my models. If you use FastAPI, you know the drill. You define Pydantic models for your API, then define separate ORM models for your database, then write converters between them. SQLModel tries to fix this but it's still SQLAlchemy underneath. Tortoise gives you a nice Django-style API but its own model system. Django ORM is great but welded to the framework. I wanted something simple: your Pydantic model IS your database model. One class, full validation on input and output, native type hints, zero duplication. The query API is…

• 
  Advanced-Alchemy – A framework agnostic library for SQLAlchemy2025 · github.com · ▲38

  Hello HN! Advanced Alchemy is an optimized companion library for SQLAlchemy, designed to supercharge your database models with powerful tooling for migrations, asynchronous support, lifecycle hook and more. You can find the repository and documentation here: - GitHub Repository: https://github.com/litestar-org/advanced-alchemy - Official Documentation : https://docs.advanced-alchemy.litestar.dev/latest/ Advanced-Alchemy extends SQLAlchemy with productivity-enhancing features, while keeping full compatibility with the ecosystem you already know. At its…

• 
  Authorizer2021 · authorizer.dev · ▲296

  Open source authentication and authorization solution

• 
  Topaz: open-source authorization combining the best of OPA and Zanzibar2022 · github.com · ▲132

  Cloud-native authorization for modern applications and APIs - aserto-dev/topaz

• 
  Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar2023 · aserto.com · ▲35

  Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 17d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 19d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 29d ago · world.pixverse.video

• 
  Hemory▲381

  Keep listening. Searchable memory for your AI agents.

  AI · 29d ago · hemory.com

• 
  Clueso▲1,300

  Create stunning product videos in minutes with AI

  AI · 2025 · clueso.io

• 
  Trickle - Magic Canvas ▲1,064

  Hey HN! Introducing Trickle Magic Canvas: the world’s first Agentic Canvas, where you can visually co-create apps and websites with AI, from idea to production. Why is a canvas better? Most AI tools today rely on linear chats or text prompts. We believe that limits creativity and clarity. Canvas changes the game. 1. Every version & page at a glance. Each page and sub-page lives on a timeline. You can quickly browse, edit, and preview progress like a living, visual document — no more digging through chat logs or scattered states. 2. The canvas is the context. Unlike linear chats, you can…

  AI · 2025 · trickle.so

• TB
  Tinder but it's only pictures of my wife and I can only swipe right▲1,030

  Life & fun · 2025 · trytender.app

• 
  Ten years of running every day, visualized▲958

  Today marks ten years, 3653 consecutive days, of running at least one mile every day under the USRSA rules [1]. To celebrate, I built an interactive dashboard that turns a decade of GPX files into charts you can explore. Running has truly changed my life: I've made lifelong friends, explored beautiful places, and more importantly invested into my own health and fitness, which I'm starting to see the positive benefits as I get older. The stack is pretty simple: a NextJS app, with a Postgres database to keep all my running data, and all the stats are pre-computed and cached in Redis, so I…

  Dev tools · 2025 · nodaysoff.run

• 
  Draw a fish and watch it swim with the others▲935

  Made this website as an exercise in vibe-coding and GCP. It was posted about a few times around the internet, on sites like Morning Brew (https://www.morningbrew.com/issues/business-buzzkill), MetaFilter (https://www.metafilter.com/209703/Draw-A-Fish), boingboing.net, etc. I think it's cute! I built a basic CNN trained against penises and swastikas, and then anything that doesn't hit the 63% confidence score gets sent to a mod queue, a vibe-coded fish-tinder…

  AI · 2025 · drawafish.com

• 
  Use Their ID – Use your local UK MP’s ID for the Online Safety Act▲862

  Hi HN - I made a site that takes a UK postcode, grabs the local MP's information and generates an AI mockup of what their ID might look like. It's a small, silly protest at the stupidity of the Online Safety Act that just came into force. edit - My open AI credits got hugged to death, please use a known postcode (like one from Kier Starmer's constituency, WC2B6NH) in the meantime.

  AI · 2025 · use-their-id.com