open source. self-hosted.
governed.
the runtime is free. it runs on your machine, under your policy, writing to your SQLite shard. pricing exists only when you need governance at team scale — shared registries, audit export, SSO.
self-hosted · MIT · local policy
- all connectors (community + official)
- local SQLite audit shard
- full policy engine — allow / gate / deny
- interaction_task continuity
- CLI run, task, shard, connector commands
- MIT license
shared registry · SSO · audit export
- everything in open source
- shared policy registry (team-scoped)
- SSO / SAML identity binding
- audit export — JSONL, CSV, webhook
- priority support queue
- role-based policy override
private connectors · on-prem · SLAs
- everything in team
- private connector registry
- on-prem credential authority
- governance-at-scale — multi-shard topology
- custom SLAs + dedicated support
- security review + compliance docs
- air-gapped deployment option
the runtime never phones home.
install the CLI, attach a connector, and every run is committed to a local SQLite shard on your machine. no account, no API key, no cloud dependency. the open-source tier is a complete, production-ready governance runtime — not a trial.
- all open-source connectors
- local SQLite run store
- full policy engine
- interaction_task + no_op contracts
- run, task, shard subcommands
- MIT license — ship it, fork it, self-host it
common questions
yes. the core runtime — policy engine, run store, connector execution, interaction_task contracts — is MIT-licensed open source. you can self-host it, fork it, and ship it in your own product. pricing only starts when you need team-wide governance infrastructure.
a seat is a human identity that can approve or reject gated interaction_tasks, configure policy overrides, or access the shared audit export. agent identities (the callers) are unlimited on all plans.
your run data lives in your own SQLite shard — always. team-plan audit exports (webhook, JSONL stream) stop on downgrade, but the local shard and its records remain yours. no vendor lock-in on the data layer.
on team and enterprise plans, policy contracts are published to a central registry that all agents on your team resolve at runtime. a policy change in the registry takes effect on next run — no redeploy. the open-source plan uses file-local policy only.
enterprise customers can run a private credential server that the CLI resolves at connector-bind time. credentials never leave your network; the CLIable runtime only receives short-lived scoped tokens.
team plan ships with a 14-day trial, no credit card required. enterprise starts with a scoped proof-of-concept engagement — contact us and we'll scope it together.
start with open source. scale with governance.
install the free runtime in minutes, or talk to us about team-wide policy infrastructure.