You pay for agents that start work.
Everything they delegate is free.
An initiating agent is an identity that starts work — your coding agent, a deploy bot, a scheduled job. The subagents and delegation chains under it are covered, unlimited. No call meters, no seats, no tax on coverage.
Free
Up to 5 agents. Every client. Unlimited calls.
- Start on-device, no account (
--local) - 5 initiating agents · unlimited governed calls
- Subagents & delegation chains free, unlimited
- Identity, policy, limits, PII & audit
- Full tracing & cost X-ray
- Hardline floor & inline approvals
- 30-day audit retention
- Community support
No sign-up needed to try it — curl … | bash -s -- --local. what it writes →
Solo
For serious individuals — a personal fleet of 10.
- 10 initiating agents · unlimited calls
- Everything in Free
- Custom PII patterns
- 90-day audit retention
- Email support
Team
One plane across your whole team's agents — up to 25.
- 25 initiating agents · unlimited calls
- Whole-team fleet on one flat price
- Shared policies & org-wide rules
- Team approvals & standing grants
- Org-wide audit & cost rollup
- RBAC & roles
- 1-year audit retention
- Priority email support
Scale
For real fleets — up to 100 initiating agents.
- 100 initiating agents · unlimited calls
- Everything in Team
- 1-year audit retention
- Priority support
Enterprise
Compliance, scale, and deployment control.
- Unlimited initiating agents
- SSO / SAML · SCIM
- VPC / on-prem / self-host
- Unlimited audit retention
- SOC 2 evidence exports · DPA / BAA
- Dedicated support & SLA
Think hosts and containers: you pay for the host, containers are free. Count the agents you'd name if someone asked "what agents do you run?" — that's your bill. Every workspace's console shows the named list, so the number is one you can verify yourself.
Why price the agent, not the call or the seat?
Per-call pricing taxes coverage — it punishes you for routing your whole fleet through the control plane, which is the one behavior everyone should want. Per-seat pricing charges by the humans, and the point of autonomous agents is that fewer humans are in the loop. The fleet is what actually grows, so the fleet is what we price — in wide bands, so adding one agent never changes your bill.
Self-host for free
All six control layers are available as MIT-licensed npm modules. Use them individually or compose the full pipeline. No account required. Deploy anywhere.
Pricing FAQ
A durable identity that starts work — a person's coding agent (Claude Code, Cursor, Codex, any client), a named background agent, a CI bot, a scheduled job. It's counted once per month no matter how many sessions it opens or how many machines it runs on. Reinstalls and key rotations don't fork an agent's identity, and our own install-verification probe never counts.
Free, always, on every plan — and deliberately so. ACP enforces policy down the entire delegation chain; charging for every agent in the chain would punish exactly the architectures we want you to build. Fan out as wide as you like: only the agent at the root of the chain counts.
No call caps on any plan. The only number that matters is how many agents start work in a month.
Nothing breaks — blocking your agents mid-task is the one thing a control plane must never do to you. Agents beyond your band keep working, but they run ungoverned: no policy, no audit trail, no cost tracking, with a loud notice on every call so nobody finds out later. Upgrading brings them under governance immediately.
No. Your model spend stays on your own keys and subscriptions, always — ACP never touches or marks up your tokens. We meter and X-ray what your agents cost you; we don't take a cut of it.
Self-hosted uses the open-source npm modules in your own infrastructure. Managed (ACP Cloud) adds the web console, built-in integrations, agent-to-agent control, multi-tenant isolation, and we handle deployment and scaling.
Yes. Free needs no card. Paid plans are flat monthly — upgrade, downgrade, or cancel as your fleet changes.
ACP is not yet certified for SOC 2, HIPAA, or ISO 27001 — those certifications are on the roadmap, and we say so plainly on our trust page. What ACP gives you today is the evidence layer those frameworks ask for: identity-attributed logs of every tool call, redaction findings, policy decisions, and per-user attribution — audit exports built to serve as evidence in your own certification work.
Control every agent your team runs
Start free with up to 5 agents. Grow into a band when the fleet does — subagents free, calls unlimited, always.