An ungoverned agent can email a vendor, approve a subscription, or touch a customer record — and leave your audit log empty. SAM closes that gap. It gives an agent a real identity, a policy firewall, short-lived credentials, governed money movement, redaction, and memory — six legs, one console. Plain HTTP, no SDK; you set the rules, SAM enforces them on every action.
Each leg solves one hard part of letting an agent act in the real world. Subscribe to what you need; add the rest as you grow.
A prompt-injection & policy firewall. Every piece of untrusted content is screened before your agent acts on it — pass, flag, or block.
A time-boxed, revocable keycard to the accounts you already own — GitHub, Microsoft 365, mailboxes. Narrow permissions, an expiry timer you set, and a full audit of everything it touched. Every key closes on its own.
Real agent identities — mailboxes, sign-ups, downstream accounts — provisioned and governed, with a full paper trail of every identity created.
Governed money movement. Caps, mandates, and human-in-the-loop on every payment; anything outside your rules escalates instead of executing.
PII redaction that runs on your machine with your own LLM key — scrub sensitive data out of agent context before it ever leaves.
Memory that learns over time — recall budgets, lifecycle, and a learning loop you control. Runs on your machine; you own the corpus.
Choose Starter, Solo Suite, or Suite Pro. Checkout is handled by Lemon Squeezy — we never see a card.
In one console, set risk levels, credential ceilings, payment caps, and redaction profiles — with presets to start fast.
Drop in an API key. Any runtime that can send an HTTP request works — OpenAI, Cursor/MCP, custom. No SDK to learn.
Two short walkthroughs: setting SAM up, and watching it govern a live agent. (Footage lands right after launch — storyboards are written.)
Price-setter, not price-taker — governed identity is worth more than a bare mailbox. Start free; every paid plan opens with a 7-day free trial.
Pricing scales with one thing — how many agents you run. Every paid plan includes all hosted legs; there's no per-action meter (cost-to-serve per action is $0). Action volume is counted only as a fair-use, anti-abuse backstop — never a bill. Annual ≈ 2 months free, applied at checkout.
Customer-run memory & redaction, on your own LLM key.
All hosted legs for a single agent — the full firewall.
Everything for one agent — the complete governed-identity stack.
Everything, across up to 5 agents.
Everything, for a full agent fleet of up to 20.
| Plan | Agents | What you get | Price |
|---|---|---|---|
| Free | 1 | Customer-run Serum + Shredder, no learning loop (BYO LLM key) | $0 |
| Starter | 1 | All hosted legs | $29/mo |
| Solo Suite | 1 | Everything — all legs + Serum/Shredder learning | $49/mo |
| Suite Pro | 5 | Everything | $99/mo |
| Suite+ | 20 | Everything | $199/mo |
| Enterprise | 20+ | Everything + custom | Talk to us → |
| SAM Memory (Serum + Shredder only) | 1 / 5 / 20 | Memory & redaction layer, no hosted legs | $29 / $59 / $109/mo |
Annual billing ≈ 2 months free on any paid plan, applied at checkout. Prices are listed per month; final amounts confirmed at checkout (Lemon Squeezy).
Every paid plan starts with a 7-day free trial — cancel before it ends and you're not charged. Need just memory? SAM Memory (Serum + Shredder standalone) starts free, then $29/mo with the learning loop. Running more than 20 agents? Talk to us about Enterprise →
SAM's entire surface is plain HTTP/JSON + Authorization: Bearer <key>.
No SDK. Agents authenticate by API key, Bearer token, or MCP — never a login form.
One contract, every runtime.
POST /cypher/v1/intents
Authorization: Bearer sk_live_…
Content-Type: application/json
{"account_id":"acct","venue":"STRIPE_ISSUING",
"action_type":"PAY_API","asset":"USD","amount":5,
"reason":"api fee","requested_by":"EXECUTOR",
"idempotency_key":"<uuid you reuse on retry>"}No. Every SAM call is plain HTTP/JSON with a Bearer key. Any language or agent runtime that can make an HTTP request works — proven with stdlib-only reference clients.
Never. Checkout and all billing run through Lemon Squeezy as the merchant of record. SAM stores entitlements, not payment data.
Only within the caps and mandates you set. Anything outside your rules escalates for human approval instead of executing — fail-closed by design.
On your machine, with your own LLM key — your memory corpus and redaction are designed to stay within systems you control. SAM licenses and configures them; except as needed to provide the service, troubleshoot, or meet a legal obligation, we don't access, store, or use your data or content.
By one thing — how many agents you govern. Every paid plan ships with all hosted legs; Starter covers a single agent, Suite Pro covers up to five, Suite+ up to twenty. There's no per-action meter (cost-to-serve per action is $0) — action volume is only a fair-use, anti-abuse backstop. Just need memory and redaction? SAM Memory (Serum + Shredder standalone) starts free.