Control what AI can do in production.

Require authorization before sensitive changes proceed.

Hold sensitive GitHub pull requests and configured deployment steps until their authorization requirements are satisfied.
Required checks enforce authorization on the repositories you configure.

Start now

For teams that want the first protected repo and signer online without a sales cycle.

Free

For testing Permission Protocol on one repo

Free
1 signer
1 repository
GitHub PR approval flow
Signed receipts for test and evaluation actions
Community support
Multi-signer teams
Pilot rollout support
Enterprise procurement package

⚠️ Free is for evaluation: 1 signer, 1 repo.

RECOMMENDED

Team

For teams ready to protect real deploys

$100per signer / month, billed annually
Priced per signer of record
3-signer minimum: $3,600/year
Monthly billing: $125 per signer, starting at $375/month
Multiple repositories
Production deploy approvals
Multi-signer approval workflows
Signed, verifiable receipts
Exportable audit trail
Email support
Custom pilot design
Enterprise security review package

Tell us who signs. Rod will follow up about the supported setup.

Evaluation to enterprise

Validate one approval workflow, then agree any broader rollout separately.

Paid Evaluation

Validate one GitHub approval workflow

$10,0002 weeks · fixed fee
One GitHub repository and approval workflow
Named approvers and agreed success criteria
Approval, denial and changed-commit tests
Signed receipts and independent verification
Founder-led setup and an evidence pack
Production rollout beyond the agreed evaluation
Automatic continuation or subscription

Pilot

Validate and roll out one agreed workflow

$50K8 weeks · fixed scope
Start with the $10K evaluation or scope the full eight weeks
Optional $40K, six-week extension agreed separately
Controlled rollout after acceptance
First high-risk workflow mapped and protected
Signer model and receipt review
Slack or Discord launch support
Pilot readout for leadership and security

Enterprise

For organizations standardizing human authorization for AI actions

from $150Kper year
Workflows and repositories defined in the agreement
Rollout plan and named delivery contact
Identity and private deployment subject to feasibility review
Evidence retention and export requirements scoped together
Support and response commitments agreed in writing

Why pricing is not usage-based

You're not paying for API calls or approvals.

You're paying for control over actions that cannot be undone:

Merging sensitive pull requestsRunning configured deployment stepsVerifying receipts in CI

Permission Protocol ensures:

→ Held actions require an authorized signer; policy clearance is recorded separately

→ Signed receipts record who authorized what

→ Configured checks enforce authorization before an action proceeds

Secure your highest-risk action first

Most teams start with:

Deploy approvals (GitHub / CI)Sensitive repository changesReceipt verification in CI