[metadata]
description: Transparent pricing for the MCP Gateway. Free for individuals, scalable for teams, enterprise-grade for large organizations.
og:description: Transparent pricing for the MCP Gateway. Free for individuals, scalable for teams, enterprise-grade for large organizations.
og:image: https://www.permit.io/opengraph-image?c7c5d9b2de25f712
og:image:alt: Permit.io: Runtime Access Control for the AI Era
og:image:height: 630
og:image:type: image/png
og:image:width: 1200
og:locale: en_US
og:site_name: Permit.io
og:title: Pricing | Permit MCP Gateway
og:type: website
og:url: https://www.permit.io
twitter:card: summary_large_image
twitter:creator: @permit_io
twitter:description: Transparent pricing for the MCP Gateway. Free for individuals, scalable for teams, enterprise-grade for large organizations.
twitter:image: https://www.permit.io/opengraph-image?c7c5d9b2de25f712
twitter:image:alt: Permit.io: Runtime Access Control for the AI Era
twitter:image:height: 630
twitter:image:type: image/png
twitter:image:width: 1200
twitter:title: Pricing | Permit MCP Gateway
viewport: width=device-width, initial-scale=1

[document-links]
ABAC: /abac
AI Access Control Center: /ai-compliance-explorer
AI Access Control: /ai-access-control
About: /about
Access Control Compliance: /ai-compliance
App and API Permissions: /app-and-api-permissions
Audit Logs: https://docs.permit.io/how-to/use-audit-logs/types-and-filtering
Blog: /blog
CLI: /cli
Coding Agents Gateway: /coding-agents-gateway
Community Slack: https://io.permit.io/slack
Compliance: /solutions/compliance-teams
Contact sales: /demo
Customers: /customers
Cybersecurity: /solutions/cybersecurity
Developers: /solutions/developers
Docs: https://docs.permit.io
Elements: /elements
Email: mailto:help@permit.io
Enterprise: /mcp-gateway#enterprise
FAQ's: /pricing#faqs
Features: /mcp-gateway#features
Finance: /solutions/finance
Gateway: /mcp-gateway#gateway
Get Started Free: https://app.agent.security
GitHub: https://github.com/permitio
Government: /solutions/government
Healthcare: /healthcare
Identity: /mcp-gateway#identity
Identity: /solutions/identity-teams
Insurance: /solutions/insurance
Join Slack Community: https://io.permit.io/slack
LinkedIn: https://www.linkedin.com/company/permitio/
MCP Gateway: /mcp-gateway
Nexus PDP: /nexus-pdp
Open Source: /open-source
Or talk to the Permit team →: /enterprise-form?cta=mcp_gateway_pricing_cta
PBAC: /pbac
Permit: /
Policy Engine: https://docs.permit.io/overview/how-does-it-work
Pricing: /mcp-gateway/pricing
Pricing: /pricing
Privacy Policy: /legal/privacy-policy
Product: /solutions/product-teams
RBAC: /rbac
ReBAC: /rebac
Security: /solutions/security-teams
Service Status: https://permit-io.instatus.com/
Slack: https://io.permit.io/slack
Start Building →: https://app.agent.security
Talk to Us →: /enterprise-form?cta=mcp_gateway_pricing_enterprise
Terms & Conditions: /legal/terms-and-conditions
Trust Center: /trust
Try the Gateway →: https://app.agent.security
Try the Gateway: https://app.agent.security
Videos: /videos
X: https://x.com/permit_io
YouTube: https://www.youtube.com/@permitio

[page-chrome]
Gateway
Identity
Features
Enterprise
Pricing

[content]
Pricing | Permit MCP Gateway
Permit
•
MCP Gateway
Try the Gateway
Simple, Transparent Pricing
Pay for What You
Actually Need.
Start free. Scale with your agents. Enterprise when you're ready. No surprises, no lock-in.
Free forever
Community
$0
No credit card required
Get Started Free
All authorization models (RBAC, ABAC, ReBAC)
Up to 1,000 MAU (human + agentic identities)
Embeddable authorization interfaces
Community Slack support
Unlimited authorization microservices
Basic audit log (7-day retention)
Most Popular
For teams at scale
Pro
$25
starting /month
Start Building →
Up to 50,000 MAU (human + agentic identities)
Up to 20,000 tenants & 50 environments
Full GitOps CI/CD pipeline
OAuth 2.1 proxy & consent editor
Extendable audit & decision logs
Logs forwarder for monitoring
Dedicated Slack support channel
SOC 2 Type II compliance report
SSO support (optional add-on)
Agent fingerprinting & drift detection
Custom for your org
Enterprise
Custom
Talk to Us →
Unlimited MAU (human + agentic identities)
Unlimited tenants & environments
Dedicated customer success manager
HIPAA BAA, GDPR, CCPA, SOC 2
Multi-cloud & on-prem deployment
Professional services & onboarding
99.99% uptime SLA
Customizable trust levels & policy tiers
Shadow agent detection & HITL approvals
Custom policy engine integrations
Compare Plans
Everything at a Glance
Feature
Community
Pro
Enterprise
Authorization models
All
All
All
MAU (human + agentic)
1,000
50,000
Unlimited
Tenants
10
20,000
Unlimited
Environments
1
50
Unlimited
OAuth 2.1 proxy
—
✓
✓
Consent editor
—
✓
✓
Trust-level access control
✓
✓
Custom
Agent fingerprinting
—
✓
✓
GitOps CI/CD
—
✓
✓
Audit log retention
7 days
21 days+
Custom
SOC 2 Type II report
—
✓
✓
SSO / SAML / OIDC
—
Add-on
✓
Dedicated support
—
✓
✓
Shadow agent detection
—
—
✓
HITL approvals
—
—
✓
On-prem / VPC deploy
—
—
✓
SLA uptime
—
99.95%
99.99%
Questions & Answers
Frequently Asked
What is Agent Security / the MCP Gateway?
+
Agent Security is a security gateway that sits between your AI tools (Cursor, Claude, VS Code Copilot) and the MCP servers they connect to. It authenticates the human and the agent, authorizes every tool call against fine-grained policy, logs everything for audit, and supports human-in-the-loop approvals—all without code changes. You adopt it with a single URL switch.
What counts as a monthly active user (MAU)?
+
A MAU is any unique identity—human or agentic—that triggers at least one authorization decision in a calendar month. Human delegators (e.g. human|{subject}) and the agents acting on their behalf (e.g. agent|{client_id}) are counted as separate identities.
Do I need to modify my MCP servers or AI agents?
+
No. The gateway works as a transparent proxy. Point your MCP clients to the gateway URL instead of the upstream server, and enforcement, consent, and audit happen automatically. No SDKs, no code changes.
How do trust levels work?
+
Each tool is classified into Low (read-only), Medium (write), or High (destructive) based on its name. Trust levels are hierarchical—higher levels inherit all permissions from lower ones. During the consent flow, users choose the level to grant their agent, capped by the admin-configured ceiling. On the Enterprise tier, trust levels are fully customizable: define your own risk tiers, reclassify tools, and create org-specific policies beyond the default Low/Medium/High model.
What authentication methods are supported?
+
The Consent Service supports email/password, email OTP, passkeys, social providers (Google, GitHub, Microsoft), and enterprise SSO (SAML, OIDC). Admins can configure allowed methods per host, including forced SSO redirect and email-domain restrictions.
How long do sessions last?
+
Application sessions persist across MCP client restarts and are stored in Redis. They have a 30-day inactivity timeout (reset on every tool call) and a 90-day hard maximum. Enterprise plans add fully configurable consent windows. Admins can also revoke sessions immediately.
What are the Enterprise-only advanced features?
+
Enterprise unlocks agent fingerprinting (behavioral verification), in-session monitoring, shadow agent detection, human-in-the-loop (HITL) approvals for high-risk actions, intent-based access control, permission receipts (tamper-evident audit records), and time-limited consent windows.
Do you offer discounts for startups or open-source projects?
+
Yes. We offer special pricing for early-stage startups, non-profits, and open-source maintainers. Reach out via Slack or email to learn more.
Ready to Secure
Your Agentic Stack?
Start free, ship fast, and let Permit handle the trust layer.
Try the Gateway →
Join Slack Community
Or talk to the Permit team →
Permit.io
Runtime Access Control for the AI Era
GitHub
Slack
X
YouTube
LinkedIn
Products
App and API Permissions
Nexus PDP
MCP Gateway
Coding Agents Gateway
AI Access Control
Elements
Pricing
Solutions
Finance
Insurance
Healthcare
Government
Cybersecurity
RBAC
ABAC
ReBAC
PBAC
Access Control Compliance
Teams
Developers
Security
Compliance
Identity
Product
Developers
Docs
Policy Engine
Audit Logs
CLI
Open Source
Service Status
Resources
Blog
AI Access Control Center
Customers
Videos
FAQ's
Company
About
Trust Center
Contact sales
Community Slack
Email
Privacy Policy
Terms & Conditions
SOC 2 Type II attested
HIPAA BAA available
GDPR
CCPA
CNCF Silver Member
©
2026
Permit Inc.
