Pricing

Free to run. Enterprise when your company needs it.

The gateway, the map, gates and approvals are open source and free to self-host, forever. Enterprise adds single sign-on, provisioning, the audit log and support — priced per deployment, never per token.

No card to start · self-hosted in one command · your traffic never leaves your infrastructure

Open source

Free forever · self-hosted · Apache-2.0

For teams running the gateway themselves, from a laptop to a cluster.

OpenAI- and Anthropic-compatible gateway for 15+ providers
MCP, HTTP API and agent-to-agent gateways
The live Airspace map of every agent and data flow
Gates, human approvals and guardrails
Keys, budgets, rate limits and spend by agent, tag and customer
Fallbacks, retries, caching and health checks
Admin, approver and viewer roles
Postgres and Redis for several instances, Helm chart, signed images

Start free

No card · runs in one command

Enterprise

$6,000/ year

per deployment · 5 single sign-on seats · 100M requests a year

For companies running Control Tower in production, with identity, compliance and support.

Everything in open source, plus

Single sign-on (OIDC and SAML) + SCIM provisioning
Tamper-evident audit log, sent to your SIEM
Agents authenticate with your IdP's JWTs
Secret managers + key rotation
Organisations and team admins
Multi-region control plane
Support with SLAs, onboarding and a named contact
Air-gap friendly: the license is checked on your server

Start a 30-day trial — no card Over 100 seats? Talk to us

Enterprise is priced per deployment: a platform price with 5 seats and 100 million requests a year, plus seats as you grow — each block of seats costs less per seat. Requests over the allowance never slow or stop traffic. How licensing works →

Compare

Everything in open source, and what Enterprise adds

Plans	Open source$0Start free	Enterprisefrom $6,000 / yearBuy or try

Questions

Pricing FAQ

Is the open-source version really free in production?

Yes. The gateway, the Airspace, gates, approvals, guardrails, budgets and multi-instance support are Apache-2.0, with no license fee and no limits. Enterprise adds identity, compliance and support on top of the same gateway.

How is Enterprise priced?

Per deployment, yearly or monthly: a platform price that includes 5 seats and 100 million requests a year, plus seats as you grow — seats 6–25 and 26–100 each have their own price, lower for the larger block. Never per token. Above 100 seats or a billion requests a year, we'll size a quote with you.

What counts as a seat?

A person who signs in to the console with single sign-on, or whom your identity provider provisions over SCIM. People who sign in with a password don't use seats, and neither do agents.

Can we run it air-gapped?

Yes. The license key is checked on your own server against a public key built into each release — no call home. A server that can reach the license service picks up renewals by itself; one that can't keeps working until the key's end date.

Do you see our data or traffic?

No. Control Tower is self-hosted: prompts, answers, provider keys and traffic stay on your infrastructure. The only thing that ever leaves is the license key itself, once a day, if renewals are on.

What if our license ends or we go over?

Nothing breaks. Going over the yearly request allowance only shows in the console. An ended license has a 14-day grace period; after that the Enterprise features pause — and gateway traffic, gates and approvals carry on as before.

Is there a free trial?

Yes: a 30-day Enterprise key with 5 seats, straight away, with no card. Get a trial key →

04 · Get started

Put every agent on the map today.

Run the open-source gateway in one command, then add Enterprise the day your company asks for single sign-on and an audit trail.

Start free Buy or try Enterprise