Start free

Licensing

The source is public. Running it in production is what requires a licence.

Free
€0
  • Any non-production use
  • Development and evaluation
  • Testing, CI, research, teaching
  • Production use by individuals
  • Production use by organisations of four or fewer people
  • Full source, no feature gates
View the source

No licence needed, no registration, nothing to sign.

Multiple deployments
Talk to us
  • Several environments or business units
  • Site licence across an organisation
  • Redistribution inside a product you sell
  • Air-gapped or regulated deployments
  • Procurement paperwork and security review
Get in touch

Tell us the shape of it and we will quote.

What the licence covers

Written plainly, including what it does not promise.

01
Included

The right to run one production deployment for the term. Every update and security fix published during it. Best-effort support by email, usually a reply within a few working days.

02
Not included

No uptime or response-time guarantee, no on-call, no custom development, no indemnity. This is a small team and we would rather tell you that up front than write an SLA we cannot honour.

03
Which packages

Everything published under the Business Source License 1.1: sovereign-mcp-gateway, sovereign-mcp, sovereign-shield, intentshield and logicshield. One licence covers the set. sovereign-mcp-audit is deliberately not among them. It is Apache 2.0 and needs no licence for any use, commercial or otherwise, because a tool that tells you what your agents can reach is worth more unrestricted than licensed.

04
It becomes Apache 2.0

Each released version converts to the Apache License 2.0 four years after it was published. That is a term of the licence, not a promise we can withdraw. If we disappear, what you are running becomes permissively licensed on a date you can look up today.

05
Not sure whether you need one

Ask. If you are evaluating, building against it, or running it for a handful of people, you do not. Email contact@sovereign-shield.net and describe what you are doing. A straight answer costs nothing.

The licence itself

Identical across all five packages. This is the header of every LICENSE file.

LICENSE
Business Source License 1.1

Licensor:             Mattijs Moens

Licensed Work:        sovereign-mcp-gateway

Additional Use Grant: You may make production use of the Licensed Work,
                      without a commercial license, as an individual, or as
                      an organisation of four or fewer people.

Change Date:          2030-08-22

Change License:       Apache License, Version 2.0

Each package carries its own Change Date, four years after that package's first release: sovereign-mcp 2030-03-20, sovereign-shield and intentshield 2030-03-09, logicshield 2030-03-29. The terms are unmodified BSL 1.1.

Common questions

Is this open source?

Source-available, not OSI open source. You can read it, modify it, fork it and run it for anything except commercial production use. We say this plainly rather than stretching the term.

Why not Apache or MIT?

Under a permissive licence anyone can run this as a paid service and contribute nothing back. BSL keeps the source open to everyone while keeping the commercial rights with the people maintaining it, and it converts to Apache 2.0 on a fixed date regardless.

What counts as production?

Running it in the path of real traffic, for a real workload, at an organisation of five or more people. Staging, CI and evaluation do not count, however long you take.

Can we evaluate first?

Yes, indefinitely, without asking. That is the point of the free tier. Nothing is time-limited and no feature is held back.

Is VAT included?

No. Prices are quoted excluding VAT. Belgian customers are charged 21%. Businesses elsewhere in the EU with a valid VAT number are invoiced under the reverse-charge procedure and pay no Belgian VAT. Customers outside the EU are outside its scope. Your invoice states the treatment that applies together with the supplier's VAT number.

Do you offer a trial of the paid tier?

There is nothing to trial. The software is identical. The licence is permission to run it commercially, not a different build.

We need a security review first.

The source is public and the test suites run in CI on every commit. Point your reviewers at the repositories. If you need something signed, say so in your first email.

Get a licence

One email. Tell us what you are running and where, and we will send terms and an invoice.

contact@sovereign-shield.net

No mail app? Compose in Gmail or Outlook.