V2 catalog meters three independent dimensions. They do not stack on the same request.
| Metric | What it measures | Billed on |
|---|---|---|
| Connected agent | MCP client identity registered at handshake | Mark / Redact — cap only (25 / 100), not per-agent |
| Guarded token (GT) | Characters evaluated on the hosted mask path | Mark; Redact control-plane fallback only |
| Enclave node | Host with active sidecar heartbeat (peak daily) | Redact+ with Enclave SKU — $/node |
Guarded tokens (GT)
Definition: UTF-8 length (after NFKC normalization) of mask-bound fields — prompt body, tool arguments, MCP payload bodies. Headers, hydrate lookups, and auth failures before scan are excluded.
Minimum: 1 GT per billable request (prevents zero-cost spam). Failed masks after scan still count.
Included pools (UTC calendar month):
| Tier | Included GT | Path |
|---|---|---|
| Local | — | Not hosted-billable |
| Mark | 3M | Hosted mask + ingress only |
| Redact | 2M | Control-plane sync/fallback only |
| Enclave (in-cluster) | Unlimited | Node-metered — never GT |
| Enterprise | Custom | Contract |
Overage (Mark): $150 per 5M GT block (same in USD and EUR). Usage throttles at the default spend cap (2× platform fee, admin can raise).
Redact CP exhaustion: Hosted fallback fail-closes when the 2M pool is spent. In-cluster sidecar traffic is unaffected.
Local hooks and Enclave sidecar paths never increment the GT counter.
Enclave nodes
Enclave is a data-plane SKU — not a standalone control-plane tier. Requires Redact+ (or Enterprise).
| Rule | Value |
|---|---|
| List price | $150/node/mo |
| Overage (beyond plan-included) | $125/node/mo |
| Minimum billable when SKU active | max(active nodes, 3) |
| Included with Redact | 5 nodes |
| Included with Enterprise | 25 nodes (floor in platform commit) |
Counting: Sidecar heartbeat → peak daily active nodes in the UTC month. Mark workspaces cannot deploy Enclave.
Example (Redact, 8 active nodes): $1,490 platform + 3 overage × $125 = $1,865/mo.
Connected agents
A connected agent is an MCP client identity bound at handshake — Cursor, Claude Code, VS Code, etc. Mark caps at 25; Redact at 100. This is a seat-style cap, not per-agent billing.
Spend caps and overage honesty
- Default GT overage cap = 2× monthly platform fee (Mark: $998; Redact CP path: $2,980).
- At cap, hosted mask throttles — no unbounded invoice surprise.
- Admins can raise or disable the cap under Operations → Usage.