The governance layer is free. Operations cost money.
Every tier runs the same kernel, so no tier can be refused a risk gate, an approval queue, an audit trail, an injection sanitiser or the MCP surface. The paid tiers add the work of running this for more than one team.
Community
Free forever
Self-hosted, single tenant
The complete governance kernel, on your own hardware, with no licence key.
- MIT kernel
- Risk gate
- Approval queue
- Audit trail
- Sanitiser
- MCP surface
- Self-hosted
- Single-tenant
Team
Popular$99
per month, 10 seats
For one platform team putting a hosted instance in front of real agents.
Everything in Community, plus
- Multi-tenant hosting
- Hosted registry
- SSO via OIDC
- 10 seats
- Email support
Business
$499
per month, 200 seats
For a company where several teams share one governed deployment.
Everything in Team, plus
- Cross-tenant audit aggregation
- Token analytics
- 200 seats
- 24-hour support
Enterprise
$2,000
per month, unlimited seats
For an estate that needs seat management, longer retention and a named contact.
Everything in Business, plus
- Seat management
- Priority support
- Extended audit retention
- Custom adapters
- Unlimited seats
- Dedicated support
The governance layer is free forever. The paid tiers add operations at scale.
Questions the table does not answer
- Is the free tier a trial?
- No. It is the same governance kernel the paid tiers run, under MIT, on your own hardware, with no licence key and no expiry.
- What am I paying for, then?
- Operations at scale: more than one workspace on one deployment, a hosted adapter registry, SSO against your identity provider, longer audit retention, more seats, and a support route.
- Can a paid tier take away a governance control?
- No, and the code refuses to try. Gating the risk gate, approvals, the audit trail, the sanitiser or the MCP surface is tested against in the public repository.
- How is a seat counted?
- One human account. Agents are not seats, because an agent is not a person holding a credential. Team is 10 seats, Business is 200, and Community and Enterprise are not seat-limited.
- Which tier do I need for SSO?
- Team. SSO via OIDC is part of the Team tier, and the licensing code grants it from Team upwards. It is sold at the entry paid tier deliberately, because the governance kernel already answers "agents cannot act without a human" and SSO is what answers "and we can prove who that human was to our identity provider".
Start with the free tier. Nothing expires.
Clone the kernel and run it yourself, or create a hosted workspace and let us run the operations for you.
The guarantee that no tier can gate governance is a test in the public repository. Already have a workspace? Sign in. Enterprise is a conversation: [email protected].