Plans
Free
$0 forever. For one person. Unlimited apps and agents, approvals, and activity, plus 3 automations for scripts
and CI.
Pro
$15 per person per month. For teams. Everyone gets the same apps and rules in every agent. Unlimited people and
automations, the People page and teams, access rules and approval floors by team and person, Team setups with
bundles, workspace Activity with CSV and JSONL export, alerts, and tool history.
Enterprise
$30 per person per month. Everything in Pro, plus OIDC SSO; SCIM; Inventory and
passport discover; custom
guardrails and Runtime Security; catalog review and rollout rules; agent policy; SIEM and OTLP streaming with alert
webhooks; a DPA on request; and annual invoicing. Still self-serve with a card.How apps work on each plan
On Free and Pro, verified catalog apps are open: choose Connect, and Passport either finishes the connection or asks an admin when a shared company credential is required. There is no app limit on any plan. On Enterprise, admins can keep the catalog open, require review, or set rules by app, category, and team. Access usually starts read-only, and an app is not marked ready until required company setup is done. On every plan, workspace admins can finish technical setup (company API keys, OAuth clients, custom URLs, removing apps). Built-in secret scanning and personal Safety preferences also stay on every plan. Pro adds access rules by team and person, approval floors by team, and workspace Activity export. Enterprise adds custom guardrails, agent policy, and audit streaming. Passport CLI is included on every plan and uses the same rules and Activity log as other connections.How seats are counted
Anyone who can sign in counts as a person (admin or member). Automations (the agent keys scripts and CI use) are never people and are never billed.- Free: one person and up to 3 automations.
- Pro and Enterprise: unlimited people and automations. Only people are billed.
At the Free limit
Free is for one person. Inviting, importing, or approving a second person waits until you upgrade to Pro, and pending invites hold a place. A fourth automation waits the same way. If a workspace has more people than its plan allows, for example after a trial or a paid plan ends, everyone keeps access and nothing is deleted. Only new people wait.Workspaces created on the earlier Free plan keep Free for up to 5 people, now with unlimited apps and up to 5
automations that no longer use a person’s place.
When a plan changes
Changing plans never deletes configuration. Settings that need a higher plan are kept but stop applying until that plan is active again.- Enterprise to Pro: SSO, SCIM, guardrails, agent policy, domain joining, catalog rules, and streaming stop applying. People, teams, team rules, Team setups, and Activity keep working.
- Pro to Free: Team setups, bundles, and the People and Activity pages pause, and teams and setups are kept. A saved approval floor keeps applying, since it only tightens. Team and person access rules keep restricting access until an owner resets the app to workspace-wide read-only or full.
Upgrade, change, or cancel
1
Upgrade
Open Settings, find the Billing card (Free owners see Plan & billing), and upgrade. Stripe Checkout asks
for a card.
2
Change plan
Plan changes on an existing subscription go through the Stripe customer portal. Passport edits your one subscription
in place and prorates — it never opens a second checkout, so you are not double-billed.
3
Cancel
Cancel anytime from the Billing / Plan & billing card in Settings, via the Stripe portal. You keep the paid
plan until the period ends, then move to Free. Your data stays until you delete the workspace.
On a deployment explicitly configured with
PASSPORT_BILLING_MODE=self-hosted, billing is off and every workspace is
unlocked. See Self-host.