Evaluation RuleDecision layer

Permaura Rule: Gate Client Credentials Before You Delegate Agent Work

Should an agency put Permaura between its AI assistants and client apps, and at what point does the paid tier earn its keep? Deploy Permaura on the Free plan for a single client workflow first, and only move to Pro at $19 monthly ($15.83 annual equivalent) once you need a second or third workspace, hosted secrets, or remote gateway access.

By InnovaAI ResearchPublished

“Should an agency put Permaura between its AI assistants and client apps, and at what point does the paid tier earn its keep?”

Deploy Permaura on the Free plan for a single client workflow first, and only move to Pro at $19 monthly ($15.83 annual equivalent) once you need a second or third workspace, hosted secrets, or remote gateway access.

Common Mistake

Agencies buy Pro seats before validating a single approval policy, then discover the gateway install and MCP client configuration is the real cost and the client never asked for approval gates. Run one refund or messaging workflow on Free, show the client the signed audit trail, and let that artifact justify the paid tier and the setup fee.

Why This Works

The Free tier already includes unlimited local agents, connections, and policies plus one workspace, so the permission model and device-signed approvals can be proven on a live client workflow at $0. The paid jump buys operational scale rather than capability: Pro adds 3 workspaces, unlimited hosted secrets, one hosted gateway, remote access, and a managed permaura.app tunnel, which is what multi-client delivery actually requires. Permaura's own trade-off is that someone must install and manage the gateway, so the decision hinges on whether the agency will absorb that overhead rather than on feature gaps.

Apply When
  • •The agency runs AI assistants (Claude, ChatGPT, Cursor, Codex) against client-owned Stripe, GitHub, HubSpot, or Slack accounts and currently passes raw API keys into prompts or local configs
  • •At least one client workflow involves money movement or outbound messaging, such as Stripe refunds or Gmail sends, where an unreviewed agent action carries real cost
  • •The agency is scoping a productized security layer and can sell a setup engagement in the $2,250 range with roughly 20 hours of delivery effort
  • •More than one workspace is needed because client environments must stay separated, which the $0 Free plan cannot cover at 1 workspace
  • •A client or insurer asks for a signed record of which agent requested what and who approved it
Open the Permaura coursePermaura decision recordBrowse the Academy

More on Permaura