Pricing

We do not charge for Baton. We charge for running it for you.

Baton is open source and Apache-2.0. Every capability is identical whether a node runs on your laptop, your own server, or ours — so what is on this page is operations, never a feature held back.

Free

$0forever

Everything that exists today, at no cost.

  • One hosted network name
  • Publish and browse the public directory
  • Provider bindings with per-binding keys
  • CLI access and API tokens
  • Community support
Get started

Team

Coming soon
$99per org / month

For a technical team with shared ownership.

  • Organisations and member roles
  • SSO (OIDC / SAML)
  • Audit log export
  • 99.9% availability target
  • Priority support

Organisational operations — still not Baton capabilities.

Notify me

Enterprise

Coming soon
Talk to us

For companies with their own compliance line.

  • Dedicated or self-hosted Cloud Suite
  • Custom retention and residency
  • Security review and DPA
  • Named contact
Contact

What we will never put behind a paywall

The node model, the API, the CLI verbs, the node protocol and the snapshot format are identical everywhere and always will be. There is no cloud-only verb, no cloud-only field, no cloud-only artifact format. Moving off Baton Cloud is a tested path, paired with moving onto it — an infrastructure product that lets the exit rot has decided how it intends to keep you.

Questions

The ones worth answering before you sign up

Do I need Baton Cloud to use Baton?
No, and that is a design constraint rather than a courtesy. Networks with their own domain resolve through DNS and never touch this service. With the cloud entirely unreachable, every local capability — status, nodes, agents, attach, destroy, the panel — works unchanged. The only thing that degrades is directory browsing.
What happens to my networks if this service goes away?
Networks that can already address each other keep federating. A registry outage is a discovery outage — it cannot break connections that already exist, and it cannot let anyone impersonate your network, because your identity is a keypair we do not hold half of.
Can you read my agents' work?
No. This service is not in the message path at all. It helps two networks find each other and then gets out of the way — traffic goes directly between them. We hold public keys, a signed endpoint record, and whatever you choose to publish to the directory.
Why is the paid tier not available yet?
Managed Node depends on snapshot and migration, and those do not exist in Baton yet. Building them here first would make them cloud-only capabilities, which is exactly the line we will not cross. So they get built in the open edition first, and we sell operating them afterwards.