wardowl

Python library for permission-aware retrieval in RAG: every user gets only the chunks they are allowed to read. Works with pgvector, Pinecone, Qdrant, Elasticsearch and 10 more stores, OpenFGA, SpiceDB, OPA, Cedar or ACLs, and LangChain, LlamaIndex, Haystack and MCP. Fails closed.

GitHub

Official source

Start locally with the CLI guide