Pricing

Start free.
Scale when your data does.

Two meters, one bill: records vaulted and operations run. Every tier - including free - ships the full crypto stack. Security is never the upsell.

  • No credit card to start
  • MCP included in every tier
  • Soft limits - nothing breaks

Developer

For side projects and first integrations.

$0/mo

  • 1,000 records
  • 10,000 operations / mo
  • 1 project
  • Full crypto stack - nothing watered down
  • MCP server included
  • Community support
Get API key →

Startup

For products with real users and real PII.

$99/mo

  • Everything in Developer
  • 50,000 records
  • 500,000 operations / mo
  • 3 projects
  • 30-day audit log retention
  • Email support
Get API key →
Most popular

Business

For teams whose data has gravity.

$499/mo

  • Everything in Startup
  • 500,000 records
  • 5M operations / mo
  • Unlimited projects
  • Dedicated vault instance option
  • Audit exports
  • Priority support
Get API key →

Enterprise

For regulated industries at scale.

Custom

  • Everything in Business
  • Unlimited records & operations
  • VPC or on-prem deployment
  • HIPAA BAA
  • Custom SLAs
  • Compliance reporting
  • Dedicated support engineer
Talk to us →

Same security on every tier. AES-256-GCM at rest, TLS 1.2+ in transit, secure enclaves in use, keys sealed in FIPS 140-2 HSMs - on the free tier and on Enterprise alike. You never pay more to be safer. You pay more to vault more. See the full comparison.

Metering

What counts as usage

No seat math, no per-field pricing, no security add-ons. Two numbers and a promise: we tell you before they matter.

A record

One vaulted object. A card number, a credential set, a patient file - onevault.store() call, one record, one tokenized reference likeref_9f27ac31. Update it all you like; it stays one record.

An operation

One call that touches the vault: store, retrieve, compute, or grant. REST, SDK, or MCP - an agent invoking vault_compute meters exactly like your backend hitting POST /compute.

Overage

Limits are soft. Approach one and we email you. Cross it and nothing breaks - no locked data, no failed decrypts, no midnight pages. You upgrade on your schedule, not ours.

Compare

Every tier, side by side

The security column doesn't exist - because it would read the same all the way across.

FeatureDeveloperStartupBusinessEnterprise
Records1,00050,000500,000Unlimited
Operations / month10,000500,0005,000,000Unlimited
Projects13UnlimitedUnlimited
Per-user encryptionIncludedIncludedIncludedIncluded
Secure compute (enclaves)IncludedIncludedIncludedIncluded
MCP accessIncludedIncludedIncludedIncluded
Audit log retention7 days30 days1 yearCustom
SupportCommunityEmailPriorityDedicated engineer
DeploymentManaged cloudManaged cloudManaged cloud or dedicated instanceVPC or on-prem
FAQ

Pricing questions, answered

Do I need a credit card for the free tier?

No. Sign up, grab a vk_test_ key, and start vaulting. The Developer tier is free for as long as you stay within its limits - no card, no trial clock, no surprise invoice.

What happens if I exceed my limits?

Nothing breaks. Limits are soft: we email you as you approach them, and your reads and writes keep working while you upgrade. We will never hold your data hostage over a billing threshold.

Is the MCP server priced separately?

No. MCP access is included in every tier, including free. An agent calling vault_store is metered exactly like your backend calling the REST API - an operation is an operation.

Can I self-host Vaulty?

On the Enterprise tier, yes - deploy Vaulty into your own VPC or fully on-prem. Keys still live in FIPS 140-2 HSMs, and a dedicated support engineer helps you through the rollout.

Do you offer discounts for startups or nonprofits?

We do. Early-stage startups, nonprofits, and open-source projects can get discounted paid tiers. Email hello@vaulty.xyz and tell us what you are building.

Start vaulting data in minutes

One API call to encrypt, store, and use sensitive data - no cryptography expertise required.

Get API key →Read the docs

AI agent? Connect our MCP server: npx -y @vaulty/mcp - see vaulty.xyz/mcp