An ungoverned agent can email a vendor, approve a subscription, or touch a customer record — and leave your audit log empty. SAM closes that gap. It gives an agent a real identity, a policy firewall, short-lived credentials, governed money movement, redaction, and memory — six legs, one console. Plain HTTP, no SDK; you set the rules, SAM enforces them on every action.
Each leg solves one hard part of letting an agent act in the real world. Subscribe to what you need; add the rest as you grow.
A prompt-injection & policy screen. Screen any untrusted content before your agent acts — one call, pass / flag / block.
A time-boxed, revocable keycard to the accounts you already own — GitHub, Microsoft 365, mailboxes. Narrow permissions, an expiry timer you set, and a full audit of everything it touched. Every key closes on its own.
Real agent identities — mailboxes, sign-ups, downstream accounts — provisioned and governed, with a full paper trail of every identity created.
Every payment your agent attempts is authorized, signed, and recorded — on your own rail, with caps, mandates, and human-in-the-loop. SAM never holds your funds; anything outside your rules escalates instead of executing.
PII redaction that runs on your machine with your own LLM key — scrub sensitive data out of agent context before it ever leaves.
Memory that learns over time — recall budgets, lifecycle, and a learning loop you control. Runs on your machine; you own the corpus.
Choose SAM Starter, SAM Solo Suite, or SAMSuite Pro. Checkout is handled by Lemon Squeezy — we never see a card.
In one console, set risk levels, credential ceilings, payment caps, and redaction profiles — with presets to start fast.
Drop in an API key. Any runtime that can send an HTTP request works — OpenAI, Cursor/MCP, custom. No SDK to learn.
Two short walkthroughs: setting SAM up, and watching it govern a live agent.
Price-setter, not price-taker — governed identity is worth more than a bare mailbox. Every paid plan opens with a 7-day free trial.
Pricing scales with one thing — how many agents you run. Every paid plan includes all hosted legs; there's no per-action meter (cost-to-serve per action is $0). Action volume is counted only as a fair-use, anti-abuse backstop — never a bill. Annual ≈ 2 months free, applied at checkout.
All hosted legs for a single agent — the full firewall.
Everything for one agent — the complete governed-identity stack.
Everything, across up to 5 agents.
Everything, for a full agent fleet of up to 20.
| Plan | Agents | What you get | Price |
|---|---|---|---|
| SAM Starter | 1 | All hosted legs | $29/mo |
| SAM Solo Suite | 1 | Everything — all legs + Serum/Shredder learning | $49/mo |
| SAMSuite Pro | 5 | Everything | $99/mo |
| SAMSuite+ | 20 | Everything | $249/mo |
| Enterprise | 20+ | Everything + custom | Talk to us → |
| SAM Memory (SAMSerum + Shredder only) | 1 / 5 / 20 | Memory & redaction layer, no hosted legs | $29 / $59 / $129/mo |
Annual billing ≈ 2 months free on any paid plan, applied at checkout. Prices are listed per month; final amounts confirmed at checkout (Lemon Squeezy).
Every paid plan starts with a 7-day free trial — cancel before it ends and you're not charged. Need just memory? SAM Memory (Serum + Shredder standalone) starts at $29/mo with the learning loop. Running more than 20 agents? Talk to us about Enterprise →
SAM's entire surface is plain HTTP/JSON + Authorization: Bearer <key>.
No SDK. Agents authenticate by API key, Bearer token, or MCP — never a login form.
One contract, every runtime.
POST /cypher/v1/intents
Authorization: Bearer sk_live_…
Content-Type: application/json
{"account_id":"acct","venue":"STRIPE_ISSUING",
"action_type":"PAY_API","asset":"USD","amount":5,
"destination":{"type":"API_SERVICE","id":"api:openai",
"rail":"stripe:issuing"},
"reason":"api fee","requested_by":"EXECUTOR",
"idempotency_key":"<uuid you reuse on retry>"}No. Every SAM call is plain HTTP/JSON with a Bearer key. Any language or agent runtime that can make an HTTP request works — proven with stdlib-only reference clients.
Never. Checkout and all billing run through Lemon Squeezy as the merchant of record. SAM stores entitlements, not payment data.
Only within the caps and mandates you set. Anything outside your rules escalates for human approval instead of executing — fail-closed by design. SAM authorizes, signs and records; the funds move on your own rail and SAM never holds them.
On your machine, with your own LLM key — your memory corpus and redaction are designed to stay within systems you control. SAM licenses and configures them; except as needed to provide the service, troubleshoot, or meet a legal obligation, we don't access, store, or use your data or content. The one exception is yours to switch on: SAMShredder's optional semantic mode sends the text being scrubbed to an LLM (Anthropic) using your own key — the default regex mode is fully local and sends nothing.
By one thing — how many agents you govern. Every paid plan ships with all hosted legs; SAM Starter covers a single agent, SAMSuite Pro covers up to five, SAMSuite+ up to twenty. There's no per-action meter (cost-to-serve per action is $0) — action volume is only a fair-use, anti-abuse backstop. Just need memory and redaction? SAM Memory (Serum + Shredder standalone) starts at $29/mo.