Pricing
Free for one. Affordable for teams.
Self-host the entire stack for free, forever, on your own hardware. Pay only when you want us to operate the parts that need infrastructure: hosted SMS, mobile push, cloud receipt sync.
Self-host. BYO keys. No vendor lock-in. The free tier is the whole product, not a trial. Upstream LLM keys are forwarded once and never persisted. The protocol is open; the receipts verify offline with any Ed25519 library. Switching costs to other governance vendors are by design close to zero, the opposite of an enterprise control-tower license.
SynOI · governance, memory, and supply-chain guard, one plan
One plan: govern the AI you run.
It approves AI actions before they happen, remembers your context across any model, and mints a signed receipt for every decision. Full feature list on Features →.
Free
Self-host the whole product on your own machine, forever. Not a trial.
- The whole product, running on your own hardware
- AI actions are approved before they run
- A verifiable receipt for each decision
- Memory and context that travel with you across any model (Claude, GPT, Gemini, local)
- Bring your own LLM keys: open protocols, no lock-in
Operator
RecommendedEverything in Free, plus the hosted conveniences you can’t reasonably self-host.
- Everything in Free
- We host your approval channel (SMS, push): no Twilio account needed
- See your decision history in one dashboard
- Use it across up to 3 of your devices (cross-device sync in development)
- Email support
Team
Operator, for the whole team: fleet HITL routing, shared policy, exportable receipts.
- Everything in Operator
- Approvals can go to any teammate, not just you
- Shared team policy and shared team memory
- Export every receipt, or stream them by webhook
- Budget limits and spend alerts
Enterprise
On-prem or Edge deployment, compliance evidence, and a dedicated team.
- Everything in Team
- On-prem or SynOI Edge deployment, inside your own infrastructure
- Single sign-on (Okta, Azure AD, Google)
- Compliance evidence: SOC 2 Type II (planned), signed BAA
- Supply-chain guard for installs (Registry Mirror, blast-radius alerts): planned
- Dedicated infrastructure, custom policy, SLA and dedicated support
Token Saver · metered add-on
Early accessToken Saver: cuts redundant tokens and embeddings on gateway-routed traffic.
A metered add-on to the Gateway. It de-duplicates repeated context on the calls it covers, so you keep most of what it saves instead of paying twice for the same tokens or embeddings. Billed per dereference: a cache lookup or reuse Token Saver resolves on your behalf. Early access: not yet turned on by default for hosted traffic.
This dereference rate is SynOI's own meter, a separate line item from whatever your LLM provider bills you directly for the underlying tokens; it is not a pass-through of anyone else's charge.
Pay-as-you-go
No subscription. Metered from the first dereference at the top rate.
- No included allowance
- $2 per 1,000 dereferences (indicative)
Signing up today costs $0/month. No usage is billed until Token Saver leaves early access; metering begins at launch, at the indicative rate above.
Operator
RecommendedSame subscription as Operator above. Adds a Token Saver allowance.
- 100,000 dereferences/month included
- Overage $1 per 1,000 dereferences (indicative)
Rides your existing subscription above: no separate checkout.
Team
Same subscription as Team above. Adds a larger Token Saver allowance.
- 1,000,000 dereferences/month included
- Overage $0.50 per 1,000 dereferences (indicative)
Rides your existing subscription above: no separate checkout.
No double-billing. Usage inside an included allowance is never billed again. Overage pricing applies only to dereferences beyond that allowance. Pay-as-you-go carries no allowance: each dereference is metered at the top rate starting with the first one. Subscriptions are committed-use discounts; the meter never charges twice for the same call.
Token Saver is in early access. Prices shown are indicative; final pricing confirmed at launch.
Verified Publisher · add-on
SecondaryPublishing a package? Add Verified Publisher.
Separate plan from the tiers above: this protects your releases, not your installs. Every publish routed through it needs human approval on a second device, so a stolen npm token alone cannot ship a release. Free forever above 100,000 weekly downloads, because the load-bearing OSS commons should not have to pay for its own defense. Full explanation on Features.
OSS Free
For popular OSSFree for any package ≥ 100,000 weekly downloads. We protect the load-bearing OSS commons because someone has to.
- Human approval (HITL) on every publish routed through Verified Publisher (SMS / push / portal)
- Stolen npm token alone cannot ship a release
- Verified Publisher badge in registry mirror (registry mirror not yet deployed)
- Signed provenance attestation per release
- Signed, hash-chained release history
- Public divergence-score audit trail
- Community support (GitHub)
Individual Publisher
Request accessFor solo maintainers of one production package, internal or public. Includes registry-mirror and OID Resolver features that are not yet deployed.
- Everything in OSS Free
- One package (any download volume)
- Choose your HITL channel (SMS, push, portal, email)
- Receipt retention 90 days
- Email support
Studio
Request accessFor studios / small businesses that will publish a portfolio of packages. Not yet available: the multi-package registry tier is still in build.
- Everything in Individual
- Up to 10 packages
- Team approvers: any of N people can release
- Branded receipt URLs (yourcompany.synoi.systems/receipt/...)
- Receipt retention 1 year
- Priority email support
Premium Plugin Business
Request accessFor commercial plugin businesses: WordPress, Shopify, Magento, Salesforce AppExchange, premium npm. Not yet available: this tier ships after Studio.
- Everything in Studio
- Unlimited packages
- Dedicated support contact
- Customer-facing receipt UI for your end users
- Priority handling for high-profile compromise incidents
- Receipt retention 7 years (compliance grade)
- Annual contract option available
Ecosystem coverage
Above pricing is the npm baseline. Other ecosystems have variant pricing matched to their economics:
- WordPress plugins / themes: $5-15 / site / month for self-installed verifier; $200-2,000 / month for agencies managing 50-500 sites; $50K-500K / year for managed-host integrations (WP Engine, Kinsta, Pressable, SiteGround).
- PyPI: same shape as npm above.
- VS Code extensions: same shape as npm above.
- HuggingFace models / datasets: same shape as npm above + GPU validation pass-through for heavy models.
- MCP servers: under specification; pricing TBD.
- Docker / Helm: under specification; pricing TBD.
Common questions
Does Free have a request cap?
No. Free runs the actual gateway binary on your own machine against your own LLM keys, so there is no hosted usage limit to hit. Operator and Team don't change that: they add hosted conveniences (SMS/HITL, receipt sync, dashboard) on top, they don't meter your LLM traffic.
When would I outgrow Free?
When you want something Free can't self-host: SMS/HITL without running your own Twilio account, a receipt history dashboard, a license across multiple devices. That's what Operator and Team add. The governance and receipts themselves don't change.
What about LLM costs? Are those included?
No, you pay your LLM provider directly. We're middleware. Your Anthropic / OpenAI bill is separate. SynOI's cache and body-shrink cut redundant tokens on the calls they cover; we haven't published a measured savings percentage across customers, so we won't quote one here. Expect the effect to vary by workload. If you turn on Token Saver, its per-dereference charge is a distinct meter that we bill, separate from and in addition to your provider's per-token charge, not a markup on it.
Who handles billing?
Paddle. They're our merchant-of-record, which means they handle VAT, sales tax, invoicing, and chargebacks globally. You'll see “Paddle.com” on your statement.
Can I self-host the gateway?
Yes. The Gateway is the same software whether you run it on your laptop, your office server, or we host it for you. License key activates the same features either way.
How do I cancel?
One click in the portal at app.synoi.systems → Billing. Cancellation takes effect at the end of the current period. You keep access until then.
Enterprise: what's actually different?
On-prem deployment, SSO/SAML, signed DPAs, custom Policy Packs, SLA, and a person on the other end of email. SOC 2 Type II and the BAA are planned, not yet available. Annual contract. Sales-led.
What's the difference between the plan above and Verified Publisher?
Different buyers. The plan above protects you when you install packages (developers, agent operators, ops teams). Verified Publisher protects packages you publish (open-source maintainers, plugin businesses). Most engineering organizations buy from both sides because they do both. Pricing is independent: a 5-person studio publishing one internal package and consuming many would pay Studio (publisher, $99/mo) plus Team (install side, $99/seat × 5 = $495/mo) = $594/mo total.
My OSS package has 80,000 weekly downloads, close to the 100K free threshold. Do I pay?
Email supplychain@synoi.systems and tell us. The 100K threshold is a guideline, not a fence. Critical infrastructure with lower download counts (security-sensitive packages, ecosystem foundations, niche-but-load-bearing) is free at our discretion.
Can I just use the free CLI to check packages?
Yes. npx @synoi/scg-inspect <package>@<version>runs the full divergence taxonomy against any npm package: no signup, no install, no infrastructure. Use it ad hoc whenever you're about to depend on something new. The CLI is part of the free tier and stays free forever.
How does Verified Publisher actually stop an Axios-style attack?
When you opt in to Verified Publisher, your npm publishgoes through a wrapper that requires out-of-band approval on a second device before the release ships. A stolen long-lived token alone can't complete the publish: the attacker would need to also compromise your phone, your hardware key, or whichever HITL channel you've configured. That's the cost asymmetry that defeats opportunistic credential theft.