Pricing
Simple, honest pricing
Open source at the core. Managed cloud for teams that don't want to operate infrastructure.
Open Source
Self-host everything. MIT license.
- ✓AgentGuard proxy — full source code
- ✓MCP + A2A + ATXP interception
- ✓YAML policy enforcement
- ✓SQLite audit log (local)
- ✓Escalation approve/reject API
- ✓Python + Node.js SDKs
- ✓CLI tool (agentguard validate, simulate)
- ✓Community support (GitHub Issues)
- —No managed dashboard
- —No email notifications
- —You manage infrastructure
Cloud Pro
Managed AgentGuard + full dashboard.
- ✓Everything in Open Source
- ✓Managed AgentGuard hosting
- ✓Live dashboard at /dashboard/agents
- ✓YAML policy editor in browser
- ✓Escalation approval queue
- ✓Email alerts on escalation (Resend)
- ✓Webhook delivery with HMAC signing
- ✓Supabase audit log (cloud)
- ✓Daily spend tracking per agent
- ✓Up to 5 agents
- ✓100,000 intercepted calls/month
- ✓Email support
Cloud Team
Multi-user access, RBAC, SLA.
- ✓Everything in Cloud Pro
- ✓Unlimited agents
- ✓Unlimited intercepted calls
- ✓Role-based access (RBAC)
- ✓Multiple team members
- ✓Custom webhook policies
- ✓Priority email support
- ✓99.9% uptime SLA
- ✓Custom spend limit alerts
- ✓Audit log export (CSV)
- ✓Dedicated Slack channel
All plans include Nascentist API key management — your LLM API keys (Groq, Together, OpenAI) stay hidden from your agents. They see only your nsc_live_ key.
Frequently asked questions
Can I self-host for free forever?
Yes. The AgentGuard Go service and both SDKs are MIT-licensed. You can run them on your own infrastructure with no restrictions, no telemetry, and no license fee. Forever.
What counts as an "intercepted call"?
Every MCP tool call, A2A task, or ATXP payment that passes through AgentGuard — whether it is allowed, blocked, or escalated. Health checks and /reload-policy calls are not counted.
What happens if I exceed the 100,000 call limit?
AgentGuard continues to intercept all calls. You are notified by email and can upgrade to Cloud Team or self-host the excess.
Is this related to Nascentist API proxy?
Yes. AgentGuard is the agent safety layer built on top of Nascentist. Your nsc_live_ keys work across both products.
Can I use my own Supabase project?
Yes, on all tiers including Open Source. Provide your SUPABASE_URL and SUPABASE_SERVICE_KEY and AgentGuard writes audit logs to your own database.