Home / Pricing

Every call your agents make, checked before it runs.

Every plan enforces the same deterministic policy on every call: allow, deny, rate-limit, or hold for approval. Start free and be live in minutes.

Starter

Try PolicyLayer with your real stack.

Free

10,000 policy checks a month

MCP servers
5
Active policies
10
Dashboard members
3
Scoped grants
Unlimited
Audit retention
7 days
  • Full policy engine allow, deny, rate limits, argument-level rules, tool hiding
  • Dashboard roles admin, policy manager, viewer
  • Community support
START FREE →

Enterprise

For organisations with compliance and scale requirements.

Contact us

Custom check volume, annual agreements

Check volume
Custom
Audit retention
Custom
Deployment
Hosted, dedicated, private
Uptime SLA
Included

Everything in Team, plus:

  • SAML SSO and SCIM provisioning
  • Custom roles and IP allowlisting
  • SIEM streaming audit events to your stack
  • MSA, DPA, security review, invoice billing
  • Dedicated support and onboarding
CONTACT SALES →

Free to start. No card required. Cancel anytime.

Pricing questions.

What counts as a policy check? +

One tool call evaluated by the gateway: an agent makes the call, your policy runs, the decision is enforced and logged. Allowed or denied, it counts once. Connecting servers, editing policies, and browsing the dashboard never count.

Do lower tiers get a weaker policy engine? +

No. Every tier runs the same engine with the same guarantees: deterministic rules, argument-level conditions, rate limits, tool hiding. The tiers differ in scale (servers, policies, members, volume) and in the workflow around the decisions (approvals, alerts, analytics, exports), never in the strength of enforcement.

What happens when Starter hits its cap? +

Calls beyond the cap are denied with a clear policy error until the month resets or you upgrade. Nothing fails silently: your agents see exactly why the call was stopped, and reads of your dashboard and audit log keep working.

Do I need a card to start? +

No. Starter is free with no card and no time limit. You only add billing details when you move to Team.

How does Team overage work? +

Your first 100,000 policy checks each month are included in the $199. Beyond that, usage is billed at $1 per 1,000 additional checks on your monthly invoice. There is no hard stop by default, so production traffic never gets cut off.

Can I cap my Team bill? +

Yes. Set a monthly billing limit and the gateway pauses overage at that amount, behaving exactly like the Starter cap: calls are denied with a clear error rather than billed. Raise or remove the limit any time.

Is my MCP traffic stored? +

The gateway logs each call with its tool name, outcome, and the names of the arguments, never their values. Your prompts and payloads are not retained. See the security page for the full data-handling model.

Can we self-host or run in our own cloud? +

Dedicated environments and private deployment are scoped per organisation on the Enterprise plan. Talk to us about your requirements.

Can I cancel anytime? +

Yes. Team is billed monthly with no commitment. Cancel and you drop back to Starter, keeping your servers, policies, and grants.

Put policy on every call before it runs.

Connect your MCP servers, set your rules, and route your agents through the gateway. Free for 10,000 policy checks a month, live in minutes.

Free to start. No card required.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.