Skip to content

Community

KeyRack is an open-source project. The core engine is community-driven; commercial extensions fund ongoing development.

KeyRack’s core (keyrack-oss) is licensed under the GNU Affero General Public License v3.0 or later (AGPL-3.0-or-later).

Using KeyRack’s engine inside a larger work that you distribute or operate as a network service requires that work to comply with the AGPL.

Interoperability components — Apache-2.0

Section titled “Interoperability components — Apache-2.0”

To maximize interoperability:

  • Protocol Buffers definitions (proto/) — Apache-2.0
  • High-level client SDK (keyrack crate) — Apache-2.0

Commercial licensing is available for organizations that wish to embed KeyRack without AGPL reciprocity obligations.

Contributions welcome on the open source core:

  1. Fork the repository
  2. Create a feature branch
  3. Run cargo test --workspace and ensure tests pass
  4. Submit a pull request with a clear description

Security vulnerabilities should be reported via the responsible disclosure process in SECURITY.md — do not open public issues for security bugs.

Be respectful and constructive. Security-critical code requires careful review — expect thorough feedback on crypto and authorization changes.

  • Watch the GitHub repository for releases
  • Read Why KeyRack for project motivation
  • Try the demos to evaluate fit

See also: Commercial licensing · Developer guide