Skip to main content

Services & pricing

Choose the engagement that matches where you are

Every service is fixed-scope with a published price, defined deliverables, named-client assessment or verification depending on the service, and a Production Evidence Pack. Start online through TrustOps — no sales call required.

Vendor-neutral. Published prices. Human-reviewed deliverables.

Service catalogue

Start here

MCP Readiness Audit

£395

Paid in full at checkout

A fixed-scope, human-reviewed assessment of one MCP implementation — what will hold in production, what will not, and what to change first.

  • Teams with a working MCP server or integration that has not yet faced production traffic, security review or procurement.
  • Engineering leads who need an independent, vendor-neutral view before committing to a rollout.
Start the audit — £395Continues on trustops.ecocitizenz.com for order review before any payment step.
Full scope, exclusions and deliverables

Stateless Migration Sprint

£1,950 total

£1,170 at checkout + £780 on acceptance

TrustOps also names this engagement MCP Protocol Migration & Modernisation Sprint — the same engagement, bought as the Stateless Migration Sprint: £1,950 total. One-off engagement, paid in stages; £1,170 due now, then 1 later milestone.

A bounded, hands-on migration of one existing MCP implementation to a stateless, deployment-safe architecture — implemented, tested and documented.

  • Teams with a working MCP server built on session-bound or legacy patterns that block horizontal scaling, serverless deployment or client upgrades.
  • Teams that need the migration done, not just described — brownfield work on your existing code, in your repository.
Start the migration — £1,170Continues on trustops.ecocitizenz.com for order review before any payment step.
Full scope, exclusions and deliverables

EMA/ID-JAG Design & Pilot

from £3,500 total

£1,750 at checkout, then 1 later milestone per written scope

Enterprise-managed authorization (EMA) and identity-assertion grant (ID-JAG) design for MCP — cross-app access, token exchange and identity boundaries, piloted against your identity provider.

  • Platform and security teams rolling MCP out inside an organisation with an existing identity provider (for example Okta, Microsoft Entra ID or Ping).
  • Teams that need per-user, per-agent authorization boundaries rather than shared static credentials.
Start the identity pilot — £1,750Continues on trustops.ecocitizenz.com for order review before any payment step.
Full scope, exclusions and deliverables

Enterprise MCP Pilot

£6,500 total

£2,600 at checkout; 30% + 30% at agreed milestones

A complete, evidence-backed MCP pilot for one enterprise use case — discovery to handover, with the documentation security and procurement actually ask for.

  • Organisations that need MCP evaluated and piloted properly: architecture, identity, governance and evidence — not a demo.
  • Teams whose security and procurement functions must sign off before production use.
Start the enterprise pilot — £2,600Continues on trustops.ecocitizenz.com for order review before any payment step.
Full scope, exclusions and deliverables

Your delivery schedule is confirmed during intake. Payments and order status are handled by TrustOps. If EcoCitizenz declines an engagement before commencement, payments are refunded in full.

Also from TrustOps

Further MCP engagements TrustOps sells directly

Separate from the fixed-scope services above: TrustOps sells these itself, with its own intake. The price, availability and terms shown are TrustOps' own.

Every MCP service in TrustOps (continues on trustops.ecocitizenz.com)

Compare

Side-by-side comparison

Not sure which fits? Start with the audit — it tells you precisely which further work is worth buying, and its findings map directly onto the other three services.

Readiness Audit

£395
Best for
Independent assessment before production
Payment
100% upfront, paid in full
Code changes
No — report & plan
Real-client testing
Compatibility assessment
Evidence Pack
Audit edition
Typical duration
5 working days

Migration Sprint

£1,950 total
Best for
Hands-on migration of an existing server
Payment
Paid in stages: £1,170 due now, then 1 later milestone (£780 on acceptance)
Code changes
Yes — in your repo
Real-client testing
Named clients verified
Evidence Pack
Migration edition
Typical duration
10 working days

Identity Design & Pilot

from £3,500 total
Best for
Enterprise identity & authorization design
Payment
Paid in stages: £1,750 due now, then 1 later milestone
Code changes
Pilot implementation
Real-client testing
Agreed pilot clients
Evidence Pack
Identity edition
Typical duration
Design ~10 working days; pilot per scope

Enterprise Pilot

£6,500 total
Best for
Full pilot with procurement-grade evidence
Payment
Paid in stages: £2,600 due now, then 2 later milestones (30% + 30%)
Code changes
Pilot implementation
Real-client testing
Named clients verified
Evidence Pack
Enterprise edition
Typical duration
Fixed in written scope

Still deciding? Run the free Config Check or ask us in two fields and we will recommend one honestly.

Honest fit

You may not need a paid engagement

Not every team should buy one of these services, and we would rather say so here than discover it during scope review. If you recognise your situation below, start with the free scanner and keep your budget.

Your implementation is already stable on a supported SDK

If you are on a current, supported MCP SDK and protocol version, your server behaves predictably under the traffic you actually get, and nothing in your roadmap changes the transport or the authorization model — an audit will mostly confirm what you already know.

The change you need is mechanical

Version bumps, configuration changes, adding a tool that follows the pattern of the tools you already have: this is ordinary engineering work. If your team can do it safely and has a way to verify it, paying an outside firm to do it adds cost and a handover, not safety.

Nobody is asking you for evidence

Our deliverable is documentation a reviewer can assess. If you do not need cross-client proof, a state or transport redesign, identity integration, rollback evidence, or procurement-facing documentation, then the most valuable thing we produce is something you have no use for.

Run the free MCP scanner first

Where a paid engagement does earn its cost is the opposite case: production traffic ahead of you, clients you must prove against by name, an authorization model that has to hold up to review, or a reviewer waiting for evidence you do not have yet.

Beyond the engagements

A free identity underneath, and products above it

Every MCP server can hold a free MCP Passport, with or without an engagement. The MCP Security & Customer Assurance Kit, four workflow bundles, the MCP assurance plans, and DCI, DORA and SBOM evidence are separate products; TrustOps shows their prices and what can be bought today.

Continuation, not part of the fixed-scope services

After delivery: an ongoing evidence posture

A fixed-scope engagement ends. Your MCP surface keeps changing. These ongoing ECZ-ID packages are operated by TrustOps and track the binding state, tool-list fingerprint and drift of your production MCP targets, with an exportable evidence pack, after we hand over — they are a continuation route, not part of the fixed-scope services above.

  • ECZ-ID MCP Verifier™

    Free

    Resolve a Passport, inspect what a page actually asserts, and see the basis of each field.

    Anyone checking a provider before they rely on it.

  • ECZ-ID MCP Assurance™

    £199/month

    Track one production MCP target: its binding state, tool-list fingerprint and drift, with a daily re-check and an exportable evidence pack.

    Providers whose customers re-check them.

  • ECZ-ID MCP Assurance Plus™

    £499/month

    Track up to 5 production MCP targets — binding state, tool-list fingerprint, drift and linked repository / package relationships — with an exportable evidence pack.

    Providers operating several production MCP targets.

  • ECZ-ID MCP Policy™

    £1,499/month

    Express posture rules over up to 10 production MCP targets under your organisation’s own authority, evaluated by TrustOps and exportable from your console.

    Organisations that need posture rules over their MCP targets, under their own authority.

The four professional services above are fixed-scope engagements with published prices and milestones — they are not subscriptions, never convert into one, and buying an engagement never enrols you in a package.

These packages are acquired and operated through TrustOps. See the ongoing packages on TrustOps (opens in a new tab — trustops.ecocitizenz.com).

Keep going

Where next on ECZ-ID MCP

Create free MCP Passport (continues on trustops.ecocitizenz.com)