The gate is free. The corpus is paid.
The in-path gate you install is free, local, and open-core — all postures, the SDK, zero credential custody, and the opt-in drift network: crawler-corroborated advisories that warn you on call 1, plus the public drift ledger. Paid tiers add the optional cloud tier-1 corpus lookup (a contract judged once clears or condemns it everywhere), a higher-rate trust API, and the multi-tenant gateway.
To be clear about what is paywalled: the gate’s protection — the deterministic tier-0 contract-diff — is fully functional on Free, runs locally, and is unmetered. The cloud tier-1 corpus lookup is held off by default and opt-in; Pro is how you turn it on, plus a higher-rate trust API (600 req/min/key; the free directory API is 60 req/min/IP). Protection is never behind the paywall.
The in-path gate, for every developer.
- ·One-click install (Claude Desktop / Cursor / Cline / Zed)
- ·TS + Python SDK (wrap an authenticated session)
- ·All postures: Monitor / Guard / Strict
- ·Deterministic tier-0 contract-diff, runs locally
- ·Zero credential custody · default build egresses nothing
For teams shipping agents in production.
- ·Everything in Free
- ·Opt-in cloud tier-1 corpus lookup (sends only a contract hash)
- ·Trust API at 600 req/min per key
- ·Webhook on registry diff
- ·Email support
The multi-tenant in-path gateway.
- ·Multi-tenant gateway: per-tenant isolation, posture, and audit
- ·Self-host or managed; zero-egress by default
- ·SLA + DPA on request; sub-processor list
- ·Custom rate limit + priority support
- ·Acquisition discussions also welcome
The advisory directory the gate queries also stands alone. The public API and the mcp-server-mcpindex npm package are free at 60 req/min/IP, no key required: trust verdicts (/api/v1/trust), live screening (/api/v1/screen), search, recommend, and diff, plus /llms.txt and /.well-known/mcp-index.json. Higher rate limits ride the Pro key above.
Free covers everything you can call, no key required. Pro and Enterprise provisioning is manual today — request access above and we set you up. Enterprise multi-tenant is available on request (it is built but not the default deployment).
Request the security & procurement pack
Talk to us about enterprise: the multi-tenant in-path gateway, SLA + DPA, sub-processor list, and the security review band from the whitepaper. Tell us where to reach you and what you are evaluating.