The operating standard
for AI agents at work.
Enable AI agents across your organization with clear ownership and scoped access. Gateway, agent identity, human approvals, and audit trails, all in one control plane.
Ownership & approvals · Gateway & scoped access · Identity, security & audit
Start free · Talk to us
Decision flow
Every risky action gets an owner.
Contro1 queues high-impact agent actions, routes each one to the right owner, tracks the SLA, and records the decision so nothing acts without accountability.
Between your agents and your systems
Access Gateway.
Contro1 sits between every AI agent and the apps your company runs on. Each agent gets exactly the access it needs and never sees a password or credential, every call is on the record, and anything risky waits for the people accountable for it.
Total control
The system of record for your AI agents.
Every agent known and owned, every skill checked, every action on the record, and every decision with the right person.
- Every skill, delivered and checked - push your company skills to every agent with versions and a preview of who changes, and see every skill employees install, scanned and riskiest first.
- Every agent, known and owned - agents appear the first time they call, each gets a human owner and exactly the access it needs, and any agent can be stopped.
- Every action, on the record - every read, hold, decision and call on one timeline, exportable as HMAC-signed evidence.
- Someone is always on shift - coverage by department and time zone, with an on-call fallback. A shift decides who is asked, never what an agent can do.
What is a system of record for AI agents?
Pricing
Put agents to work, with access you control.
Connect the agents your teams already use to your business tools, with clear permissions and an audit trail.
Start with one team. Expand across your organization.
Sub-agents are always free. Fair-use limits apply on every plan. Prices in USD.
Free - $0 forever
Up to 5 users and 10 agents. Sub-agents don't count. Connect your agents to business tools with permissions, approvals, and activity tracking.
- One gateway to all your business tools
- Permissions per agent, down to each action
- Agent identity, ownership, and hierarchy
- Block any agent instantly
- Human approvals where your team works
- Shared tools across your team
- MCP, API, and CLI, for Claude Code, Codex, Cursor, and more
- 7-day activity history
Team - $199 / month
Includes 10 users and 50 agents. Run agents across your team with company sign-in, longer history, and priority support. Everything in Free, plus:
- Single sign-on (SSO) with any SAML or OIDC provider
- Import people and groups from your directory
- Link agent identities between your identity provider and Contro1
- Agent skills: push your company skills to every agent, with versions and approvals
- Skills on employee computers, scanned daily, with alerts on dangerous ones
- Shadow AI discovery
- Export agent activity to your observability tools
- 90-day activity history
- Data processing agreement (DPA) and priority support
- Each extra user is $15/month and adds 5 agents to your shared allowance.
Enterprise - Custom
Annual agreement. For organization-wide control of agents and custom requirements. Everything in Team, plus:
- Automatic user provisioning with SCIM
- Shadow AI discovery across every department
- Stream activity to your SIEM
- Departments and sites, each with its own managers and reviewers
- Skill approval policy for every department
- Organization-wide limits on what agents can do
- Custom limits, data retention, and deployment
- Uptime SLA and a dedicated contact in a shared Slack channel
- Procurement-friendly: annual invoicing, POs, and volume pricing
- We beat any comparable offer on the same terms
Startup Program - Startups with up to $5M raised get Team at 50% off for the first year.
Up to $5M raised. Standard Team pricing applies after 12 months.
Production Pilot - Starting at $5,000 per team
One real workflow live in 30 days, connected to your organization's systems through the Contro1 gateway, with every action under control.
- Map the actions that matter: what runs on its own, what waits for a person, who approves it, and what is never allowed
- Connect through the gateway: each agent gets its own identity and only the access its job needs, scoped down to each action
- One workflow live in production: routine actions run autonomously, sensitive ones wait for the right approver, anything out of bounds is blocked
- Your team runs the next rollout: access and approval rules, exception handling, and a playbook for every team that follows
For developers
Wire it in once. Everyone gets exactly their own access.
One MCP for every client, a CLI for every workflow, and approvals in Slack and Teams. Every person and agent sees only what it is allowed to use.
One MCP, one address, the same tools for every client. list_actions answers with exactly what that person or agent may use in your systems, and what it could ask for; anything denied is never offered. A person acts with their own permissions, an agent with its capsule.
The contro1 CLI connects Claude Code, OpenClaw or NanoClaw in one command, follows every trace, answers the approval queue, pulls signed evidence and syncs skills. Every request waits in the Contro1 dashboard, and each approver can also answer it in Slack or Teams, with the full context and one-click answers.
Try our official connectors
Microsoft AGT · Microsoft Teams · Lambda MicroVMs · Block Buzz · LangGraph · OpenAI Agents SDK · OpenClaw · NanoClaw · Codex · Claude Code · Claude Managed Agents · CrewAI · n8n · Slack · Pydantic AI · Mastra · Strands Agents
Best tools
Compare the best AI agent control tools
See how control planes, AgentOps tools, guardrails, and HITL platforms differ before you choose the operating layer and runtime gates for production agents.
Comparisons
Compare runtime decision layers for enterprise agent governance.
Separate observability, evals, and runtime control.
Compare runtime approvals, feedback tools, and labeling workflows.
Learn more
Docs and resources
Guides
See where agentic AI fits in enterprise workflows, which actions need governance, and how to roll out safely.
Define the operations layer for approvals, routing, escalation, audit, and signed callbacks across agent workflows.
Understand the control tower pattern for seeing, pausing, routing, and auditing autonomous agent actions.
Introduce agents safely with inventory, policy, human oversight, and audit from day one.
Combine validation, permissions, and runtime control.
Design approvals, rejections, and escalations that survive real operational pressure.
Beyond the tooling
A new operating discipline for AI agents.
Teams that adopt Contro1 do not just gain oversight. They build a sharper internal language for what agents can do alone, where humans stay in the loop, and how decisions get owned.
- Clearer rules for what agents can act on alone
- Shared definitions of risk across product, security, and ops
- A repeatable pattern teams reuse for every new agent
FAQ
Before agents go to production
What is Contro1?
Contro1 is an enterprise AI control plane that enables AI agents across your organization. It brings together an MCP gateway, agent identity, ownership, scoped access, human approvals, and audit trails in one operating layer.
How is this different from an approval API?
An approval API usually sends a prompt and waits. Contro1 manages the full operational flow: queue, owner, SLA, escalation, callback, and audit trail.
What happens when nobody responds before SLA?
The request can escalate to the next role, manager, or on-call owner based on the rules your team defines.
Can we prove who decided what?
Yes. Contro1 ties agent actions to identity, owner, approval path, decision context, and outcome. When agents send trace data, you can also see the tools they called and the data they used, then export HMAC-signed evidence for proof.
Does this work across different agent frameworks?
Yes. You keep one request model, one control layer, and one audited decision path while teams run different frameworks.
Will this slow every workflow down?
No. Low-risk actions can stay automated and be recorded as audit-only events. Contro1 is for the decisions that already need ownership, review, or audit.
Is Contro1 free?
Yes. Contro1 offers an ongoing $0 Free plan; it is not a time-limited trial and no credit card is required. The Free plan includes every core control (Access Gateway, permissions, ownership, blocking, and approvals), up to 10 agents, up to 5 seats, 2,500 approval requests per month, and 7 days of audit history. Sub-agents never count toward the agent limit.
How does Team pricing grow?
Team is $199 per month and includes 10 users and 50 agents, shared across the whole team: one person can run one agent and another twenty. Each extra user is $15 per month and adds 5 agents to the shared allowance. Need more agents than your users cover? Add users: each one brings 5 more. For example, 3 people running 200 agents pay for the 40 users those agents need, $649 per month, and 25 people running 50 agents pay $424.
Who counts as a user, and which agents count?
Every person in your workspace is a user, including people who only approve or view. An agent counts when it acts during the month. Sub-agents, disabled agents and agents that did nothing that month never count. On Free, the 10 agents are shared across the whole team, however they are split between people. An AI client connecting for a person (such as Claude Code) is never cut off mid-connection: it counts toward the allowance, and registering new agents beyond it pauses until you upgrade.
Do coding agents like Claude Code, Codex, or Cursor count?
Each person's connected coding agent counts as one agent, however many sessions or sub-agents it runs. On Team, every user's allowance of 5 agents covers it with room to spare for the agents you run in production.
Do you charge per approval?
No. Approvals are never billed. Free includes 2,500 approval requests per month as a fair-use limit; paid plans have no approval request limit.
What happens when the Team trial ends?
The 14-day trial starts the moment you request it, with no credit card, and we send the payment details during the trial. If you do not continue, the workspace returns to Free on day 15. Your agents, connections, permissions and settings stay and keep working. Activity older than 7 days is hidden on Free and comes back if you upgrade within 60 days. Adding users or agents beyond the Free limits pauses until you upgrade.
Is usage unlimited?
No. Every plan is subject to rate limits and fair-use capacity, and we contact you before anything changes for a workspace that grows beyond it.
Can one team in a large company buy Team?
Yes. Many organizations start with one team, prove the operating model, and expand to Enterprise when several teams need shared governance.
Put your first agent under control.
Start free with every core control and up to 10 agents.
Start free · View docs