Plans & Licensing
TameFlare uses a tiered licensing model. Every installation starts on the Starter tier — free, no license key required. Paid tiers unlock higher limits and additional features.
Tiers
| | Starter | Pro | Team | Enterprise | |---|---|---|---|---| | Price | Free | $20/mo | $49/mo | Custom | | Agents | 3 | 10 | Unlimited | Unlimited | | Actions/mo | 1,000 | 10,000 | 50,000 | Unlimited | | Audit retention | 30 days | 30 days | 1 year | Unlimited |
Features by Tier
Starter (Free)
- Full policy engine (14 operators, nested conditions)
- ES256 decision tokens
- Dashboard approvals
- GitHub connector
- Webhook connector (any HTTP API)
- Slack approval workflow
- Encryption at rest (AES-256-GCM)
- 30-day audit retention
- CLI + Node.js / Python SDKs
- Community support (GitHub)
Pro ($20/mo)
Everything in Starter, plus:
- Prometheus metrics —
GET /api/metrics - Webhook callbacks — fire-and-forget on decisions
- 10 agents, 10,000 actions/month
- Email support (48h response)
Team ($49/mo)
Everything in Pro, plus:
- Unlimited agents
- Batch API — up to 20 actions per request
- Config export/import — backup and restore policies + agents
- 1-year audit retention
- Priority email support (4h response)
Enterprise (Custom)
Everything in Team, plus:
- Unlimited actions
- SSO / SAML
- Dedicated support engineer
- On-premise deployment
- Custom SLAs
- Compliance documentation
License Keys
License keys are signed JWTs with the prefix tf_lic_. They encode your tier, limits, and feature flags.
Activation
Option 1: Environment variable
Set TF_LICENSE_KEY in your environment:
TF_LICENSE_KEY=tf_lic_eyJhbGciOiJIUzI1NiIs...Option 2: Dashboard
Navigate to /activate and paste your license key.
Option 3: CLI
tf license activate tf_lic_eyJhbGciOiJIUzI1NiIs...Checking Status
# CLI
tf license status
tf license usage
# API
GET /api/license/activateUsage Tracking
Usage is tracked per organization per calendar month:
- Actions: Incremented after each successful action request. Batch requests count each action individually.
- Agents: Counted from active agents at check time.
When you reach a limit, the API returns 402 Payment Required with your current usage and a link to upgrade. Existing actions and policies continue to work.
Feature Gating
Features not included in your tier return 403 Forbidden with the required tier name. The dashboard shows a locked overlay on gated sections with an upgrade link.
Self-Hosting
All tiers support self-hosting. Your data stays on your infrastructure. License keys are verified offline — no phone-home or internet connection required for validation.
Environment Variables
| Variable | Required | Description |
|---|---|---|
| TF_LICENSE_KEY | No | License key JWT. Omit for Starter tier. |
| TF_LICENSE_SECRET | No | HMAC secret for JWT verification. Change in production. |
FAQ
What happens when my license expires? Your instance falls back to Starter tier limits. Existing data is preserved.
Can I upgrade mid-month? Yes. Activate a new license key and limits take effect immediately. Usage counters are not reset.
Do I need internet access for license validation? No. License keys are verified locally using HMAC-SHA256. No external calls are made.
How do I get a license key? Contact us at info@tameflare.com or visit the pricing page.
Do I need a separate license per environment? Yes. Each TameFlare instance requires its own license key. If you run separate instances for dev, staging, and production, each needs a license. For development and testing, use the free Starter tier — it has all features with lower limits. Only production instances typically need paid tiers.
What happens if I downgrade from Team to Pro? Your instance immediately applies Pro tier limits. Here's what changes:
| Resource | Team limit | Pro limit | What happens to excess | |---|---|---|---| | Agents | Unlimited | 10 | Agents beyond 10 are suspended (not deleted). Reactivate by upgrading or removing other agents. | | Actions/mo | 50,000 | 10,000 | New actions are rejected with 402 once the 10,000 limit is reached. | | Audit retention | 1 year | 30 days | Events older than 30 days are purged on the next cleanup run. Export before downgrading if you need them. | | Config export/import | Yes | No | Feature becomes unavailable. Existing exported files still work — you just can't create new exports. |
How do I purchase a license? Email info@tameflare.com with your desired tier and number of instances. You'll receive a license key within 24 hours. For Enterprise, we'll schedule a call to discuss your requirements.
There is no self-serve checkout yet. We process purchases manually to ensure proper onboarding. Self-serve is planned — track progress on our GitHub.
What payment methods do you accept?
| Method | Pro | Team | Enterprise | |---|---|---|---| | Credit card (Stripe) | Yes | Yes | Yes | | Invoice (NET 30) | No | Yes | Yes | | Annual prepay (wire transfer) | No | No | Yes |
Is there a refund policy? Yes. We offer a 30-day money-back guarantee on all paid tiers. If TameFlare doesn't meet your needs within the first 30 days, email info@tameflare.com for a full refund. No questions asked.
After 30 days, refunds are handled on a case-by-case basis.
Is annual pricing available? Annual pricing is coming soon. Currently, all paid tiers are billed monthly. When annual pricing launches, expect a ~20% discount (2 months free). Subscribe to our changelog or GitHub releases to be notified.
What happens when I hit my action limit? TameFlare uses a hard block at the action limit. When you reach your monthly action quota:
- New action requests return 402 Payment Required with your current usage and limit
- The response includes a link to upgrade
- Existing allowed actions, policies, and agents continue to work normally
- The counter resets on the 1st of each month (UTC)
There is no soft limit, grace period, or overage billing. If you're close to your limit, the dashboard overview shows a usage bar with a warning at 80%.
How do I contact Enterprise sales? Email enterprise@tameflare.com or visit the pricing page and click "Contact Sales". Enterprise includes:
- Dedicated Slack channel with the engineering team
- Custom SLAs (response time, uptime guarantees)
- Professional services (custom connectors, policy migration, training)
- On-premise deployment support
- Volume licensing for multiple instances