Page Inspect

ZenStack:Full-Stack Toolkit with Authorization on Prisma ORM | ZenStack

Skip to main content

ZenStack v3 Beta is released 🚀. The new version has replaced Prisma with a brand new query engine. Check it out

**ZenStack**Get StartedHandbookV3 Beta 🚀Blog

Star on Github

Discord

2.x

- 2.x
- 1.x
- 3.0 Beta

Search

# Schema-First Full‑Stack Toolkit
with Clean & Scalable Authorization

A TypeScript toolkit that enhances Prisma ORM with flexible Authorization and auto-generated, type-safe APIs/hooks, simplifying full-stack development

Get Started →

## Built Above Prismafile\_type\_light\_prisma,

More Than ORM

### Easy Access Control

Access control policies right inside your data model. No more brittle imperative authorization code. No more complex SQL Row-Level-Security rules.

### Generated API & Hooks

CRUD APIs and frontend hooks are automatically generated. With access control support, the APIs are safe to be called directly from the frontend.

### AI Friendly

Schema-first reduces code complexity, helping AI understand better with fewer hallucinations. Schema serves as a single source of truth for AI integration.

## Used and Loved by

Marblism

CodeRabbit

Veeva

Mermaid Chart

TECH LOCKDOWN

Carrot

Brainbase

## Empower Every Layer of Your Stack

Backend### ORM With Access Control

ZenStack extends Prisma ORM with a powerful access control layer. By defining policies right inside the data model, your schema becomes the single source of truth. By using a policy-enabled database client, you can enjoy the same Prisma API you already love, with ZenStack automagically enforcing access control rules. Its core is framework-agnostic and runs wherever Prisma runs.

Learn More →

API### Automatic CRUD API

Wrapping APIs around a database is tedious and error-prone. ZenStack can introspect the schema and install CRUD APIs to the framework of your choice with just a few lines of code. Thanks to the built-in access control support, the APIs are fully secure and can be directly exposed to the public. What about documentation? Turn on a plugin, and an OpenAPI specification will be generated in seconds.

- Next.js
- Nuxt
- SvelteKit
- Express
- Fastify

Learn More →

Full-stack### Frontend Query Code Generation

Data query and mutation are one of the toughest topics for frontend development. ZenStack simplifies it by generating fully-typed client-side data access code (aka hooks) targeting the data query library of your choice (SWR, TanStack Query, etc.). The hooks call into the automatically generated APIs, which are secured by the access policies.

Learn More →

## Integrated With The Tools You Love

### Server & Full-stack

### Data Query Client

### API

## Our Generous Sponsors

## Marblism

## Voice of Developers

We've launched MermaidChart's team feature using ZenStack.

Thanks for creating such a wonderful product! It was a breeze to adopt, and everyone in the team loves how easy writing the policies are.

SidMermaidChart

ZenStack is an excellent example in what we have in mind when we talk about Data DX 🎉

Søren Bramer SchmidtPrisma

👀 This project by @jiashenggo and @ymcao9 looks really interesting!

✅ Data access rules in the Prisma schema

✅ Custom attributes in the Prisma schema

✅ Fullstack with E2E type-safety

👉 zenstack.dev

Nikolas BurkPrisma

This library on top of @prisma and @trpcio seems pretty sweet.

Like REALLY nice

Maybe the future

Mike Alche ☀️

Authentication and setting policy in ORM layer???

🤯 This is really crazy.

Faruk Abdulla MunshiCodebuddy

We have a fairly complex authorization model, and I'm really impressed that ZenStack has the flexibility to support it!

LeevisCofounder Ptmind

Start Building Now →

Docs

- Get Started
- Reference

Community

- Discord
- Twitter

More

- Blog
- GitHub

FlatIcon Credits

- Endure
- Diagram by Kiranshastry
- Database by kerismaker

Copyright © 2025 ZenStack, Inc.