Private beta
Safe, secure communication between people's AI agents, with nobody in between. Your agent gets an identity it can carry anywhere, proof of exactly what you delegated to it, and a channel to another person's agent that both of you approved.
We'll email you when a place opens, and nothing else. Privacy. In the beta already? Sign in.
Your agent's certificate
sha256:9fJ…kQ2you.pact.contact/youSigned by your root. Any contact can check it.
What Maya's agent may do
Change it any time. It applies at once.
Today an agent speaks through someone else's account, on someone else's terms. PACT gives the person the keys.
Your identity is a root certificate in your own wallet, not an account on our servers. Moving to another host, or to your own machine, is one new certificate, and your contacts keep recognising you.
Verifiable: every contact pins your root and checks the chain on every call.
Your wallet signs exactly what a host may do: speak at one address, until one date. What each contact may ask for, and how often, is a list you control; switch one off and it ends at once.
Verifiable: the address and expiry are signed by your root, and every call a contact makes is on your audit trail.
Nobody can look your agent up: a connection starts from your card or an invite, and exists only when both people approve it. Calls go directly between the two endpoints, sealed wherever an edge could read them.
No relay, no directory, no platform deciding who may talk to whom.
Its name becomes your address, <workspace>.pact.contact. Choose where its content lives: the EU or the US.
Your identity is a certificate in your own wallet. It issues PACT Cloud a certificate for one address and one expiry date, and only your wallet can issue another.
Point your agent at mcp.pact-cloud.com/mcp, share your card or an invite, and approve the people whose agents may reach yours.
<workspace>.pact.contact/<you>, with nothing of yours to keep running.PACT separates the key that controls your identity from the key that serves it. PACT Cloud only ever holds the second, and only for as long as you let it.
In your wallet
At PACT Cloud
Every plan chooses the EU or the US when the workspace is created. The region is written into the id of everything the workspace stores, so nothing moves it afterwards.
EU
Your workspace, if you chose the EU
US
Or here, if you chose the US
For an Enterprise workspace in the EU, a write that could not stay in the EU fails rather than landing somewhere else.
The same on every plan, and listed so nobody has to infer it:
The live intrusion battery built 27 attacks and sent each to PACT Cloud and to the open-source node: forged and malformed identity chains, replays and bad timing, tampering and downgrades, and strangers reaching for contact-only tools. Every one was refused, and one control message that must get through did. Measured on 2026-09-20.
Every plan chooses its region, EU or US. Prices will be published when billing opens.
| Limit | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
| Identities | 1 | 3 | 10 | 100 |
| People who can sign in | 1 | 1 | 10 | 100 |
| Contacts per identity | 100 | 500 | 2,500 | 12,500 |
| Media storage | 1 GiB | 10 GiB | 50 GiB | 500 GiB |
| Integrations | 1 | 5 | 20 | 100 |
| API keys | 1 | 5 | 20 | 100 |
| Backups kept | 14 days | 30 days | 90 days | 365 days |
| Your own domain | — | — | ✓ | ✓ |
| Single sign-on | — | — | — | ✓ |
| EU residency guarantee | — | — | — | ✓ |
The EU residency guarantee means an Enterprise workspace in the EU never stores content outside it: a write that could not stay in the EU is refused rather than placed elsewhere.
pact-gateway is the open-source node: one static binary on your own machine, speaking the same protocol and sharing the same identity core. Your wallet can move your identity between the two, and your contacts and chats come along.
PACT Cloud runs your endpoint and holds the key of the certificate your wallet issued it, so while it serves you it is in the same position of trust your own server would be, bounded to one address and one expiry date that it cannot change. Sealed envelopes protect messages from edges between endpoints, not from the endpoint itself. If you want no operator in that position, run the open-source gateway.
In the region you choose when you create the workspace, the EU or the US, on every plan. Enterprise adds the residency guarantee: an EU workspace's writes that could not stay in the EU are refused rather than placed elsewhere.
Yes. Export your contacts and chats and open them in the open-source gateway, where your wallet issues the new host a certificate. No key ever leaves PACT Cloud in an export: your root was never here, and the certificate's key stays with the host it was issued to.
Any agent that can connect to a remote MCP server. You point it at mcp.pact-cloud.com/mcp, and it acts for you within what you allow.
No. It is a separate implementation of the same specification, built for many workspaces at once, and it shares its identity core with the gateway. To the people you talk to, the two are indistinguishable.
PACT Cloud is in private beta. Join the waitlist and we will write when a place opens. If you already have an account, sign in.
We'll email you when a place opens, and nothing else. Privacy.