Services & pricing
Every service is fixed-scope with a published price, defined deliverables, named-client assessment or verification depending on the service, and a Production Evidence Pack. Start online through TrustOps — no sales call required.
Vendor-neutral. Fixed, written scope. Human-reviewed deliverables.
Start here
One fixed fee, agreed in writing before the audit begins.
A fixed-scope, human-reviewed assessment of one MCP implementation — what will hold in production, what will not, and what to change first.
£395 one-timeNo VAT charged
Start this engagementTwo milestones — one on reservation, the balance on acceptance against the agreed criteria.
A bounded, hands-on migration of one existing MCP implementation to a stateless, deployment-safe architecture — implemented, tested and documented.
£1170 one-timeNo VAT charged
Start this engagementAn initial milestone to start the design, then a written scope after design review. No further milestone is due before that written confirmation.
Enterprise-managed authorization (EMA) and identity-assertion grant (ID-JAG) design for MCP — cross-app access, token exchange and identity boundaries, piloted against your identity provider.
£1750 one-timeNo VAT charged
Start this engagementThree milestones — reservation, the implementation milestone defined in the written scope, and acceptance.
A complete, evidence-backed MCP pilot for one enterprise use case — discovery to handover, with the documentation security and procurement actually ask for.
£2600 one-timeNo VAT charged
Start this engagementYour delivery schedule is confirmed during intake. Payments and order status are handled by TrustOps. If EcoCitizenz declines an engagement before commencement, payments are refunded in full.
Compare
Not sure which fits? Start with the audit — it tells you precisely which further work is worth buying, and its findings map directly onto the other three services.
Still deciding? Run the free Config Check or ask us in two fields and we will recommend one honestly.
Honest fit
Not every team should buy one of these services, and we would rather say so here than discover it during scope review. If you recognise your situation below, start with the free Config Check and keep your budget.
If you are on a current, supported MCP SDK and protocol version, your server behaves predictably under the traffic you actually get, and nothing in your roadmap changes the transport or the authorization model — an audit will mostly confirm what you already know.
Version bumps, configuration changes, adding a tool that follows the pattern of the tools you already have: this is ordinary engineering work. If your team can do it safely and has a way to verify it, paying an outside firm to do it adds cost and a handover, not safety.
Our deliverable is documentation a reviewer can assess. If you do not need cross-client proof, a state or transport redesign, identity integration, rollback evidence, or procurement-facing documentation, then the most valuable thing we produce is something you have no use for.
Where a paid engagement does earn its cost is the opposite case: production traffic ahead of you, clients you must prove against by name, an authorization model that has to hold up to review, or a reviewer waiting for evidence you do not have yet.
Continuation, not part of the fixed-price services
A fixed-scope engagement ends. Your MCP surface keeps changing. These ongoing ECZ-ID packages are operated by TrustOps and exist so the evidence you publish stays accurate after we hand over — they are a continuation route, not part of the fixed-price services above, and never the way you hold an identity. That is free and permanent on its own.
ECZ-ID MCP Verifier™
FREE
Resolve a Passport, inspect what a page actually asserts, and see the basis of each field.
Anyone checking a provider before they rely on it.
ECZ-ID MCP Assurance™
£199/month
Operated work on the evidence you publish: keeping declarations, bindings and references accurate as your MCP surfaces change, with the lifecycle operations that hold them true.
Providers whose customers re-check them, and who would rather not maintain that evidence themselves.
ECZ-ID MCP Assurance Plus™
£499/month
The same operated evidence work across more MCP surfaces and targets, within the entitlements the canonical product defines.
Providers operating several surfaces or targets who want one team maintaining the evidence for all of them.
ECZ-ID MCP Policy™
£1,499/month
Publish machine-readable buyer-side acceptance policy for MCP surfaces — what your organisation will and will not accept from what it consumes, stated under your own authority.
Buying organisations consuming third-party MCP surfaces.
The four engagements above are fixed-scope, with the scope fixed in writing before anything is agreed — they are not subscriptions, never convert into one, and agreeing an engagement never enrols you in a package.
These packages are acquired and operated through TrustOps — see the ongoing packages on TrustOps (external).
Quick routes
