After the demo

You watched it refuse. Here is what buying it means.

The agent in the demo is ours and every visitor shares it. What is sold is an agent with an identity of its own — its actions attributable to you, its scope set by you, its credential renewed and withdrawable. This page is the whole of what that costs, what it does and does not do, and how long it takes to appear.

Tell me when billing opens Talk to a person instead Back to the demo
01

What it costs

First governed agent $99 per month
Each additional agent $79 per month
Self-serve limit 10 agents, then we talk

You cannot pay today, and here is exactly why

Two separate things block it, and only one of them is about money. The company does not exist yet — incorporation, then a bank account, then payment-processor verification, in that order — so there is no live key to charge a card with. Separately, provisioning is not self-serve: every account is created with no authority to spend and the right to provision is granted deliberately. Fixing the first would not open the second.

The prices above are not a projection. They are the ones built and proven end-to-end against the payment processor in test mode — a real hosted checkout, a real subscription, the ten-agent limit refusing an eleventh — and they are waiting on the company, not on the code.

02

What is and is not included

Stated here rather than in a footnote, because the boundary is the product. An agent that refuses by name is only worth buying if you know which refusals it can make.

Included

  • One agent with an identity of its own. Not the shared demo credential — a key and a verifiable identity issued to you, attributable to you in the audit record, and withdrawable.
  • Policy enforced on that agent. The rules the substrate loads at startup are evaluated on every governed call, and a refusal names the rule that made it — the same path the demo just showed you.
  • Deny by resource, action and subject. A rule can name what is being touched, what is being done to it, and which agent is asking.
  • A credential that expires and renews itself. Identities are short-lived rather than permanent; the agent renews its own, which is what makes withdrawal mean anything.
  • Google ADK or OpenAI Agents. Those are the two framework templates that exist and are proven, alongside a plain base template.

Not included

  • Multi-protocol coordination. Protocols are documented and carried on the spec; most have no wire behind them. Do not buy this for protocol interoperability.
  • Delegation deeper than two levels. A root agent and the children it delegates to. A third level validates, is stored, renders back to you — and is ignored at runtime. Deeper trees are not supported.
  • Governance of frameworks beyond those two. Identity conformance has been demonstrated more widely; a provisionable, governed agent has not. If you run something else, that is a conversation.
  • An agent that does your work. You supply the model key and we hold none. What is governed is whether the call is permitted — not what the model generates.
  • Self-serve provisioning. See above. Today the agent is granted, not bought.
03

What happens after you decide

It takes about three and a half minutes, and you will be shown it happening

Provisioning an agent is not instant and nothing about the design pretends it is. One provision through the public API, measured on 2026-08-21, returned in 217 seconds — the application log and the edge request log agree to the millisecond. That is one sample on a warm system for a one-agent spec, so treat it as the floor rather than the expected value.

The number that actually bounds it is the timeout envelope, not the measurement: the broker gives up at 420 seconds, deliberately before the platform would, so a failure is recorded as failed instead of sticking forever at "provisioning".

Stated because a wait nobody warned you about reads as a broken system. Three and a half minutes of silence after paying is the moment a first customer asks for a refund for something that worked.

  1. 0sThe request is accepted and your agent's row is written before any work starts, so its progress survives even if the connection does not.
  2. ~26sYour agent's identity is minted — the credential that makes its actions attributable to you.
  3. ~217sThe agent is deployed, governed, and answering. Measured, not estimated.
  4. 420sThe ceiling. Past this the attempt is recorded as failed rather than left pending, and you are told.
04

Be told the day it opens

One field

Billing opens when the company, the bank account and the processor are in place. Leave an email and you are told on that day. If you would rather explain what you are building first, that form asks more and reaches the same people.

Add your name and a note (optional)

This goes to one place — the enquiry record the contact form writes to. It is not a mailing list and there is nothing else to send you.

What you are on a list for

  • One email, on the day a card can actually be charged.
  • The price above if it still holds, or the number that replaced it and why.

And if you would rather not wait

The foundation underneath all of this is open source and installable now. You can mint an identity, sign a request with it and verify both against public keys alone, with no account and no key from us.

Run it yourself Talk to us