# MCP & agent pricing

Two lanes, both real:

1. **Operator seat** (~$99/facility/mo) — facility staff use the Today board. Fair-use MCP for that org is included (5,000 calls/day, 120/minute). Confirm-gated writes. Checkout is the existing Stripe Operator price.
2. **MCP add-on** ($49/month) — headless agents above that cap, without another facility seat. 50,000 calls/day. Checkout uses `STRIPE_PRICE_MCP_ADDON` on the **same Stripe account**. Until that env var is set, add-on checkout returns `not_configured` and does not charge.

**Sandbox** is $0. Key `uc_demo_public_sandbox` (or `GET /api/mcp/demo-key`) reads seeded Austin and Oakland and dry-runs writes. Hard cap 200 calls/day. Live vendor sends return `402`.

Over the cap the API returns `429`. Unpaid persisted writes return `402` with `upgrade_url`. There is no separate credit meter.

## Auth

- Org API keys (`uc_live_…`) are stored hashed. Missing or invalid bearer → **401** (not `mcp_disabled`).
- OAuth 2.1 is `client_credentials` only at `POST /api/oauth/token`. No authorization-code or registration endpoint.
- Mutations need `confirm: true` or return `needs_confirmation`. Sandbox confirm does not persist.
- Idempotency-Key replays a mutating call.
- SCRA stays unchecked without a stored check artifact.

**Not legal advice.** MCP is not insurance or E&O.

**Links:** [Full MCP buyer page](https://unitclock.com/mcp) · [All pricing](https://unitclock.com/pricing)