Join us for the Permit.io Authorization Challenge: $3,000 in Prizes and a Mechanical Keyboard for Each Winner 🤩

Permissions Redefined

Build an application of your choice and implement fine-grained authorization using Permit.io. We strongly encourage you to utilize the Permit CLI. Document your process and guide others through implementing similar solutions.

Permissions Redefined Submission Template
Your submission will be judged primarily on the quality of your documentation (DEV submission post and repository README) but we expect the core functionality of your project to work as well.

AI Access Control

Build an AI application of your choice that includes authorization controls specifically designed for AI (i.e. safeguards for AI actions that require approval workflows, fine-grained controls over what AI agents can access or modify, etc). Document your process and guide others through implementing similar solutions.

AI Access Control Submission Template
Your submission will be judged primarily on the quality of your documentation (DEV submission post and repository README) but we expect the core functionality of your project to work as well.

API-First Authorization

Build an application of your choice that elegantly implements an authorization system that embraces API-first principles and declarative rules using Permit.io.

Avoid generic, boilerplate CRUD apps — we’re looking for thoughtful implementations that demonstrate real-world access control and meaningful architecture. Treat authorization as a core part of your API design, enforced through external policies rather than hardcoded logic. Document your process and guide others through implementing similar solutions.

API-First Authorization Submission Template
Your submission will be judged primarily on the quality of your documentation (DEV submission post and repository README) but we expect the core functionality of your project to work as well.

How To Participate

In order to participate, you will need to publish a post using the submission template associated with your selected prompt.

We strongly encourage you to:

• Focus on demonstrating the benefits of externalized authorization vs. traditional approaches as part of your application and/or submission post.
• Deploy a working application

Important notes:

• Please make testing the app as straightforward as possible by providing testing instructions and/or using these admin and user credentials if applicable:
• Admin:
  • username: admin
  • password: 2025DEVChallenge
• User:
  • username: newuser
  • password: 2025DEVChallenge
• You may use AI to support your process (in fact, one of the prompts requires it!) but AI slop won't win.
• Never include sensitive information like API keys in your submission, codebase, or readme!!!
• Please review our full rules, guidelines, and FAQ page before submitting so you understand our participation guidelines and official contests rules such eligibility requirements.