pricing
Per governed agent identity. In volume. Never per call.
You budget on how many agents you govern — so that's what we meter, and the per-agent rate decays as the fleet grows. Per-decision pricing would reward routing around the very control meant to sit in front of every call, so the meter is the fleet, never the traffic.
free forever
Community
Freeself-hosted · unlimited agents
The core, self-hosted:
- Source-available core (BSL 1.1; SDKs Apache-2.0)
- Unlimited governed agent identities — nothing metered
- Full fail-closed pipeline + payload-bound step-up
- Write-before-execute WORM audit
- Bring your own Redis · community support
enterprise
Self-hosted · VPC
from $55/agent/mo · decays with volume
Everything in Community, plus:
- Bring-your-own-IdP JWT verification (SSO / SAML / SCIM: planned)
- HA + long-term tamper-evident audit retention
- Compliance evidence pack (SOC 2)
- Managed canary / decoy threat intel
- Support + SLA
enterprise · offline
Air-gapped
from $110/agent/mo · decays with volume
Everything in Self-hosted, plus:
- Fully offline / air-gapped deployment
- Offline license — zero telemetry, cannot phone home
- Offline threat-intel updates
- Regulated compliance (attested offline audit export)
- High-touch support
early access
Managed Cloud
from $30/agent/mo · we run it
Everything in Self-hosted, plus:
- Managed control plane — we run Redis, durability, upgrades
- Your IdP — we only verify JWTs, never mint identity
- Customer-verifiable per-tenant WORM signing key
- Isolated tenant + its own durable Redis
- Lowest ops burden · email support + SLA
Community is free forever, self-hosted, with no agent cap — the estimator below sizes the three paid tiers, where you meter per governed agent identity in volume.
your fleet
250governed agents
blended · 100 – 499
$41/agent/mo≈ $10,250/mo
| Fleet (governed agents) | Cloudwe run it · early access | Self-hosted · VPCyour cloud, your Redis | Air-gappedfully offline, signed |
|---|---|---|---|
| 1 – 24 | $30 /agent | $55 /agent | $110 /agent |
| 25 – 99 | $26 /agent | $48 /agent | $96 /agent |
| 100 – 499 | $23 /agent | $41 /agent | $83 /agent |
| 500 – 2,499 | $19 /agent | $34 /agent | $68 /agent |
| 2,500+ | $15 /agent | $27 /agent | $54 /agent |
blended per-agent rate · capacity metered only at the paid tiers, never per decision · 10,000+ fleets are a custom quote
What actually differs between tiers
The gateway software is identical everywhere. What you pay for is who operates it and the support & compliance model — not different code.
| Tier | Who runs it | What you're paying for |
|---|---|---|
| Community | You self-host | Free forever, unlimited agents — the source-available core (BSL 1.1; SDKs Apache-2.0). Bring your own Redis + infra. Nothing is metered or capped, and nothing is withheld. A non-sandbox boot is fail-closed on provisioning: it requires your own signing keys, a signed integrity manifest, and a signed license — all of which you issue yourself against your own root, at no cost. |
| Self-hosted · VPC | You self-host (your VPC) | HA, long-term tamper-evident audit retention + compliance evidence, managed canary intel, support + SLA. SSO/SAML/SCIM is planned, not shipped. |
| Air-gapped | You self-host, fully offline | The SAME software — the premium is the offline ops (offline license, zero telemetry, offline threat-intel) + regulated compliance + high-touch support, not the code. |
| Managed Cloud | We run the control plane | Lowest ops burden — the one tier where the difference is real. Identity stays yours (bring your IdP; the gateway only verifies). |
community · free forever
Read the gate you put in your critical path.
The gateway core is source-available (BSL 1.1; SDKs Apache-2.0). Self-host it free, forever — no signup, no sales call. The sandbox exercises the full pipeline, step-up ceremony included.
git clone https://github.com/mcpip-security/mcpip.git && cd mcpip
./scripts/quickstart.sh
# zero → first governed call: ~5 mindesign-partner program
A pilot on one real workflow, inside your boundary.
Regulated, high-consequence environments — payments, ledger postings, production infrastructure. ~8 weeks, direct maintainer support, free for design partners. In return: one real workflow behind the gate, honest feedback, and a reference on success. The structure is published openly.
free to self-host forever, no agent cap · standard trial on paid tiers · design-partner pilots free · list prices blended after volume decay · very large fleets by quote