Plans
Start with Trial. Choose Starter or Team when the workflow fits.
Trial lets teams evaluate the real self-hosted runtime for 3 days. Starter starts from $49/month, Team starts from $149/month, and Business starts from $399/month. Custom covers larger rollout, procurement, or security-review needs.
Trial
Self-hosted core, console, API, worker, CLI, and limited scoped evidence.
Starter
Self-hosted release gate for small teams, basic auth, CLI gate, core evidence, and guided reports.
Team
Team workspaces, shared approval flow, templates, longer history, collaboration, and SSO group mapping.
Business
Higher limits, runtime checks, registry mirror guidance, and production-readiness controls without enterprise claims.
Custom
Manual commercial review for rollout, procurement, security review, and product-fit requirements.
License behavior
| Plan | Payment required | Core gate available | Main limitations or unlocks |
|---|---|---|---|
| Trial | No checkout; expires after 3 days | Yes, server-mode self-hosted gate is included. | Limited scale, retention, connector depth, and reports. Online refresh required. |
| Starter | Yes: $49/month USD through secure checkout | Yes, same core workflow. | Adds small-team limits, guided reports, history, and online refresh. |
| Team | Yes: $149/month USD through secure checkout | Yes, same core workflow. | Adds workspaces, shared approval flow, templates, longer retention, and online refresh. |
| Business | Yes: $399/month USD through secure checkout | Yes, same core workflow. | Adds higher limits, runtime checks, explicit mirror guidance, production controls, and online refresh. |
| Custom | Manual only | Yes, scoped by contract. | Manual fulfillment for rollout, procurement, security review, and product-fit requirements. |
Install-bound licenses
Every customer runtime keeps a stable RELEASEPASSPORT_INSTALL_ID in the runtime Secret. License envelopes bind to installIdHash. Trial, Starter, Team, and Business refresh entitlement online; Custom can be fulfilled manually.
Production fulfillment states.
Checkout readiness.
Checkout and entitlement issuance run on the public commercial service, not inside the customer runtime. Webhook activation will map signed successful payment events to active entitlement; pending stays pending; failed, cancelled, or expired stays inactive.
curl -sS https://releasepassport.com/releasepassport/v1/billing/checkout \
-H "Content-Type: application/json" \
-d '{
"planId": "starter_monthly",
"workspaceId": "workspace-acme-prod",
"email": "billing@example.com",
"companyName": "Acme Platform Team",
"provider": "polar",
"merchantOfRecord": "polar"
}'
# Payment and entitlement issuance stay on the public commercial service.
# Provider and merchantOfRecord are adapter metadata. No payment secret is returned here.Payment state mapping
| Payment event/status | Release Passport status | Entitlement result |
|---|---|---|
| Successful payment completion | active | Activate eligible paid entitlement. |
| Accepted capture or settlement | active | Activate eligible paid entitlement. |
| Pending authorization or delayed payment | pending | No production entitlement yet. User can wait or retry as instructed by checkout. |
| Denied or failed payment | failed | Do not activate production entitlement. |
| Cancelled or expired checkout | expired or cancelled | Do not activate production entitlement. |
Custom request template.
Send only public-safe implementation context. Secrets and private evidence are never required for the sales request.
Company:
Technical owner:
Commercial owner:
Target domain:
Kubernetes distribution:
Auth mode (basic, OIDC, or proxy):
CI/CD and GitOps:
Registry location:
First services:
Desired shadow-mode date:
Do not include secrets, tokens, private keys, kubeconfigs, or private evidence.