What large organizations add. The gateway stays Apache-2.0.
The gateway's production path is Apache-2.0 and stays that way. Enterprise is the set of modules large organizations add on top: your identity provider, evidence for your auditors, controls for agent payments, devices and inspected outbound traffic, and a supplier on the other end of the phone.
What is never behind the licence
Routing, HA, failover, retries, circuit breakers, four-tier caching, hierarchical budgets, the policy chain, the MCP and A2A gateways, agent governance, jobs, realtime, secrets connectors, multi-tenancy, the evidence ledger, data residency, the admin console and full observability. The gateway's production path is open source.
The modules a licence switches on
- Console SSO (OIDC) and SCIM 2.0 provisioning
- Data-plane JWT: corporate IdP and workload tokens authenticate /v1 and agents
- MCP user OAuth: MCP servers act as the signed-in user
- Long-retention admin audit, immutable export packs and agent evidence packs
- A read-only auditor role, and exit export
- CMEK envelope encryption and FIPS posture reporting
- Platform budgets, and guardrails on pass-through traffic
- Slack and Teams approvals, and agent registry import
- Agent payments under spending mandates
- TLS inspection on the egress proxy
- AI content marking: C2PA, watermarks and text fingerprints
- Wäg Edge enforcement on devices, and the fleet view
- Custom branding
- Commercial support
Enterprise modules are compile- and licence-gated, and the gate is always on. Evaluating them is free anyway: an evaluation licence is a signed key, issued without an order form and with no automatic renewal, so you can run every entitlement above — SSO, SCIM, data-plane JWT, MCP user OAuth, audit packs, compliance hooks — and confirm they do what we say before you pay for them.
How it is priced
Per deployment environment. Not per token, not per seat, not per request. Your usage volume does not change what you pay, and growing your AI traffic does not create a commercial event — which matters for a component that sits in front of all of it.
There is no purchasable Enterprise licence yet, and prices are published when there is one. Until then the entitlements run under a design partner agreement, at no licence cost.
What your reviewers will ask for
Entity and jurisdiction facts, licensing terms, the security review pack, the AI Act obligation mapping, and an honest answer on certifications. All of it is published rather than gated behind a call.
One endpoint. Every model. Complete control.
Run it in your own infrastructure
Everything you need to run a control plane in production is Apache-2.0 and stays that way — routing, HA, caching, failover, budgets, policy, MCP, jobs and observability. Self-hosted, no account, no phone-home.
$ docker run -p 4000:4000 <registry>/waeg-gateway:<version>Not a working pull: the images are not public yet. Design partners receive the registry details privately.
Deploy in 5 minutesShape it as a design partner
Wäg is not publicly released yet. We are working with a small cohort of teams running multi-provider AI in production, and serious about governance and sovereignty, to harden the control plane on real workloads.
- Every Enterprise capability included, at no licence cost
- Hands-on migration — we do it with you, including from LiteLLM
- A direct line to the engineers building it, and real influence on what ships next