AgentHippo
Start free. Pay when agents go to production.
Ship agents in weeks, not quarters — acting under each user's and each agent's own permissions, with hard budgets, an off switch, rollback, and a record of every action.
- Full stack — gateway, control plane, runtime · hosted or on-prem
- Any model, any agent
- No seat fees
Plans
Free for individuals
Try it on your laptop or a first server.
$0
No card. Welcome credits or your own keys.
- IDE and CLI — any engine, any model
- Your first governed agent on the hosted console
- Budget, kill switch, and audit for that agent
- Chat from the IDE, the web, Slack, or WhatsApp
- Community support
Hosted Control Plane
Production agents and their data on your VM; we run the console.
$500/ agent / month
Capped at $2,500 a month (5 agents) · annual invoicing available.
- Everything in Free, for every agent
- Agents act as the requesting user — your database enforces it
- Hard per-agent budgets, checked before every call
- Kill switch, deny rules, and one-command rollback
- On-call alerts to Grafana IRM or PagerDuty
- Unlimited users and SSO
Self-Hosted Stack
Many agents, with the whole stack on your VM.
$3,000/ month
Billed monthly · annual invoicing available.
- Everything in Hosted, running on your VM
- Unlimited agents and users — one license per control plane
- Nothing depends on our uptime
- WORM evidence archive in your storage
- Premium support — onboarding, setup review, and a named contact
Enterprise
Every team and environment, in your VPC.
Custom
Annual contract · Production Sprint included.
- Everything in Self-Hosted, across multiple control planes
- Cloud, private, or fully air-gapped model estates
- Signed packs with pinned trust roots
- Audit rights and source escrow
- Dedicated senior engineer — uptime and support SLA
Model spend is separate: bring your own provider keys to the gateway, or use prepaid credits with auto top-up.
Production Sprint
Want us to ship the first one?
One real workflow in production in three weeks, in your environment — measured before and after, and handed off only when our control checklist passes live.
- Per-user permissions
- Spend refused at the cap
- Kill switch and rollback
- Full action record
$25,000 fixed fee
Credits in full toward your first year on a production plan.
Common questions
What counts as an agent?
One identity you deploy through the control plane. Versions, users, and channels are unlimited, and local and CI runs never count. Need a governed staging copy? Tell us and we won't bill it.
What happens after I subscribe?
We email you at the address you used at checkout to confirm your setup. You keep using the same console — your plan just covers more agents.
I already have an agent in production. How much changes?
The agent keeps its code and its engine. You register it, add the runtime wrapper, and deploy from the bundle — the bundle carries no provider key, so nothing sensitive lands on the host. Budget, off switch, and audit are on from its first poll.
What happens if AgentHippo is down?
On the hosted plans, agents keep running on their last lease until it expires, then stop — the same fail-closed behavior as a kill. On Self-Hosted Stack and Enterprise, the control plane is yours; nothing depends on our uptime.
What happens when my credit balance runs out?
On Free, requests stop at your balance and resume when you top up — a hard stop, never an overage bill. On production plans, you bring your own provider keys to the gateway or enable auto top-up, so a wallet never stops a production agent. Your own budget caps still do; that's the product.
What is the Production Sprint?
A fixed-fee, three-week engagement. Week one, we work inside your business to find the workflow where an agent moves a real number, and baseline it. Then we deploy the agent in your environment and measure the same workflow again. Acceptance is concrete: our control checklist — per-user permissions, budget refused at the cap, kill and rollback, full action record — passes live in your environment. The fee credits in full toward a Self-Hosted Stack or Enterprise annual contract, or toward up to twelve months of Hosted Control Plane.
How is this different from an MCP gateway?
MCP gateways gate the tools; AgentHippo scopes the authority. A gateway holds a shared credential and filters which tool calls pass — behind it still sits one service account that can read everyone's rows. AgentHippo's agents never hold the credential: each turn exchanges a short-lived token for the requesting user's own authority, and your database (Postgres RLS, AWS IAM, Unity Catalog) enforces it — even if every layer above is misconfigured.
What does "governed" actually mean?
Every deployment polls a lease from the control plane. From one console you can kill an agent, deny a user, cap spend and concurrency, or pin a signed version — effective in under a minute. Every action lands in a tamper-evident record tied to the user, session, and agent version.
Talk to us
Tell us what the agent should do and where it runs. We'll reply within one business day with a time to talk and a first-pass plan.
- A 20-minute call with the founders — no sales script
- Which plan fits, or whether a Sprint makes sense
- Design partners this quarter get the Sprint at $15,000
Or send the form — prefer email? [email protected]
All plans include the same signed IDE and CLI builds. Prices exclude applicable tax. Questions? [email protected]