Pricing
Permission, priced for how you work.
Free and local for individuals. Paid tiers add remote sync, shared policies, approval workflows, and enterprise governance.
Founding pricing while the window is open: an intro price for your first 3 months on monthly, and a founder rate locked in for life on annual. Prices rise as we ship.
Free
Local-first trust for individual developers.
Start free- Unlimited local agents, connections & policies
- 1 workspace
Pro
Founding price for your first 3 months, then $19.
Unlimited local power, with remote access.
Start Pro7-day free trial (first subscription) · card required, no charge until day 7
- Unlimited local agents, connections & policies
- 3 workspaces
- 25 hosted agents
- Unlimited hosted secrets
- Unlimited managed connectors
- 1 hosted worker
- Remote access to your gateways
- Managed tunnel (permaura.com URL)
- Bring your own tunnel
- Approve from multiple devices
- Cloud audit log sync
- Hosted execution
Team
Founding price for your first 3 months, then $29/seat.
Shared governance for teams running agents.
7-day free trial (first subscription) · card required, no charge until day 7
- Unlimited local agents, connections & policies
- 10 workspaces
- Unlimited hosted agents
- Unlimited hosted secrets
- Unlimited managed connectors
- 3 hosted workers
- Remote access to your gateways
- Managed tunnel (permaura.com URL)
- Bring your own tunnel
- Approve from multiple devices
- Cloud audit log sync
- Hosted execution
- External secret vaults
- Shared team policies
Enterprise
Agent authorization at infrastructure grade.
Talk to us- Unlimited local agents, connections & policies
- Unlimited workspaces
- Unlimited hosted agents
- Unlimited hosted secrets
- Unlimited managed connectors
- Remote access to your gateways
- Managed tunnel (permaura.com URL)
- Bring your own tunnel
- Approve from multiple devices
- Cloud audit log sync
- Hosted execution
- External secret vaults
- Shared team policies
- SSO (SAML / OIDC / SCIM)
Questions
- Is the local gateway really free?
- Yes. The perma gateway runs entirely on your machine with local-only execution, a basic MCP server, and a basic audit log, free forever. Paid tiers add hosted capacity and remote access.
- How does the free trial work?
- Your first monthly subscription starts with a 7-day free trial. A card is required up front but nothing is charged until day 7. Cancel during the trial and you keep access until it ends, then drop to Free, and you pay nothing. Each account and organisation gets one free trial: if you subscribe again later, billing starts the same day.
- Do annual plans have a trial?
- No. Annual plans are charged immediately and come with a 14-day money-back guarantee instead. Refunds are handled by support (email us within 14 days); there's no self-serve refund button.
- What's the founding offer?
- While the founding window is open: monthly plans get an intro price for their first 3 months, and annual plans get a founder price locked in for life. The founder rate applies per seat from the date that seat is added; seats added after the window closes bill at the standard rate, even on founding accounts. If your subscription lapses, founding pricing is forfeited.
- Why is Team a 2-seat minimum?
- Team exists for shared governance: policies, approvals, and audit across people. It's priced per seat with a 2-seat minimum; add or remove seats any time from the console.
- Can I switch between monthly and annual billing?
- Monthly to annual is self-serve from the console: the annual subscription starts immediately and any unused monthly time is not credited. Annual to monthly is handled by support.
- When do my secrets leave my machine?
- Never, unless you explicitly choose remote execution. Local-only is the default and the foundation of the product. Remote sync and hosted execution are opt-in upgrades.
- Can I bring my own keys (BYOK)?
- On Enterprise, this is on the roadmap. Holding the key-encryption key in your own KMS, running execution workers in your VPC, and exporting audit events to your SIEM are planned Enterprise capabilities; talk to us about timelines for your rollout.
Let your agents do real work, without the keys.
Install the local gateway, connect Claude Code or Codex, and approve your first capability in minutes. Deny by default, audit everything.