Free
Evaluate the gateway with a focused pilot.
$0
per month
- Core gateway and policy controls
- Exact per-tool grants and per-call audit logging
- Local deployment and guided setup
Published pricing
Start with the control plane. Scale deliberately.
These figures are approved for display. Plan provisioning is still handled directly—there is no paid checkout in this application today. Rows marked Coming soon describe a committed roadmap item, not something available yet.
Pricing page, not a checkout
The running application currently recognizes trial/internal billing state and does not sell or activate paid plans online. Contact the team before relying on a paid tier or a specific limit.
Starter
Standalone MCP gateway and CIAM for one team.
$99
per month
$990 per year — two months free
- Everything in Free
- Content guardrails — secret, PII, and prompt-injection screening
- Tool-definition drift and rug-pull detection
- Unlimited SSO/SAML/OIDC connections Coming soon
Team
Several teams sharing one governed endpoint.
$349
per month
$3,490 per year — two months free
- Everything in Starter
- Progressive tool discovery and catalog search
- Company-wide department rollup Coming soon
- SCIM / JIT provisioning Coming soon
- Priority support
Business
Governance and compliance at organization scale.
$799
per month
$7,990 per year — two months free
- Everything in Team
- Audit-log / SIEM export
- Console admin SSO
- Dedicated support
Enterprise
A dedicated deployment and tailored rollout.
Contact us
custom
- Dedicated single-tenant instance
- Private Connect and BYO-IdP
- SOC 2 evidence packaging
- Genuinely unlimited tool-call volume — self-hosted, so K2 infrastructure never processes your calls
Fair use, disclosed up front
Flat and unmetered for virtually every real customer.
Not "unlimited, no exceptions, ever"—every paid tier includes a generous monthly tool-call allowance with a published overage rate for genuine outliers. We warn at 80% of the included allowance, warn again with a stated grace period if you cross it, and only then throttle new requests—never silent billing, never a full lockout. Self-hosted Enterprise instances run entirely on your own infrastructure, so K2 never processes those calls and never has usage to meter.
| Tier | Included | Overage |
|---|---|---|
| Starter | 100,000 calls/mo | $0.50 / 1,000 calls |
| Team | 500,000 calls/mo | $0.50 / 1,000 calls |
| Business | 1,500,000 calls/mo | $0.40 / 1,000 calls |
| Enterprise | Self-hosted, unmetered | N/A |
Security is foundational
Exact grants, revocation, and the core audit model are gateway capabilities—not decorative enterprise checkboxes.
Availability is configuration-led
Screening, SSO, Private Connect, audit streaming, and discovery require the relevant instance configuration and infrastructure.
No unsupported assurance claims
A contract, DPA, SOC 2 report, penetration-test report, or client-compatibility promise is not implied by this page. Confirm requirements directly.