WHAT'S INCLUDED
Every capability, on from day one¶
Databases, AI models, files, your own APIs, MCP tools, and the encrypted vault. Nothing is held back for a higher tier.
Capabilities are included. Operations are priced.
Every capability below is available to your organization. What you pay for is governed operations, at one cent each, and you start with $5 of credit and no card. See Pricing.
Two kinds of number matter: the size of your organization (people, machines, agents) and the work it does (runs, operations, hosted model tokens). Both are below, and both are readable from the CLI.
What your agent can reach¶
Paste any of these into ekka gate grant add --capability.
| What your agent can reach | Capability codes |
|---|---|
| Databases (read a row, list rows, write) | knowledge.postgres.readknowledge.postgres.listknowledge.postgres.write |
| AI models | llm.inferllm.act |
| Files on this machine | file.fs.readfile.fs.listfile.fs.write |
| Your own APIs | api.readapi.write |
| MCP tools | tool.mcp.readtool.mcp.invoke |
| The encrypted vault | secret.vault.read |
Your organization has all of them. You choose which agent gets which one, over which resource. See How governance works.
Secrets stay yours
Secrets live in your Enclave. Values never appear on the command line and never leave your machine. Govern authorizes the action without seeing the credential.
How big your organization can be¶
| What | Limit code | Included |
|---|---|---|
| People in your organization | org.members |
5 |
| Enclaves, the machines that run your agents | org.enclaves |
3 |
| Agents | org.agents |
3 |
An Enclave is a machine, so your laptop and a CI server are two of them. Write to [email protected] if you need more.
Past one of these, the CLI names the limit it hit and what it is set to. Everything you already have keeps running.
What EKKA meters¶
| What | Meter code | Priced | Default ceiling |
|---|---|---|---|
| Money, across everything | spend.total |
not applicable | $10.00 / day |
| Governed operations | execution.operation |
$0.01 each | 1,000 / day |
| Plan runs | execution.run |
not priced | 200 / day |
| Hosted input tokens | llm.tokens.input |
not priced | 100,000 / day |
| Hosted output tokens | llm.tokens.output |
not priced | 20,000 / day |
The first row caps your bill: $10 a day, in money. The others cap the rate, which is what stops a loop from spending a month of budget in an afternoon. 1,000 operations a day is at most $10 a day, so the two agree.
Refusals, gate checks, audit reads and failed runs are never charged. Full detail on Pricing.