Services & pricing
Every service is fixed-scope with a published price, defined deliverables, named-client assessment or verification depending on the service, and a Production Evidence Pack. Start online through TrustOps — no sales call required.
Vendor-neutral. Published prices. Human-reviewed deliverables.
Start here
£395
Paid in full at checkout
A fixed-scope, human-reviewed assessment of one MCP implementation — what will hold in production, what will not, and what to change first.
£1,950
£1,170 at checkout + £780 on acceptance
A bounded, hands-on migration of one existing MCP implementation to a stateless, deployment-safe architecture — implemented, tested and documented.
from £3,500
£1,750 at checkout; balance per written scope
Enterprise-managed authorization (EMA) and identity-assertion grant (ID-JAG) design for MCP — cross-app access, token exchange and identity boundaries, piloted against your identity provider.
£6,500
£2,600 at checkout; 30% + 30% at agreed milestones
A complete, evidence-backed MCP pilot for one enterprise use case — discovery to handover, with the documentation security and procurement actually ask for.
Your delivery schedule is confirmed during intake. Payments and order status are handled by TrustOps. If EcoCitizenz declines an engagement before commencement, payments are refunded in full.
Compare
Not sure which fits? Start with the audit — it tells you precisely which further work is worth buying, and its findings map directly onto the other three services.
Still deciding? Run the free MCP scanner or ask us in two fields and we will recommend one honestly.
Honest fit
Not every team should buy one of these services, and we would rather say so here than discover it during scope review. If you recognise your situation below, start with the free scanner and keep your budget.
If you are on a current, supported MCP SDK and protocol version, your server behaves predictably under the traffic you actually get, and nothing in your roadmap changes the transport or the authorization model — an audit will mostly confirm what you already know.
Version bumps, configuration changes, adding a tool that follows the pattern of the tools you already have: this is ordinary engineering work. If your team can do it safely and has a way to verify it, paying an outside firm to do it adds cost and a handover, not safety.
Our deliverable is documentation a reviewer can assess. If you do not need cross-client proof, a state or transport redesign, identity integration, rollback evidence, or procurement-facing documentation, then the most valuable thing we produce is something you have no use for.
Where a paid engagement does earn its cost is the opposite case: production traffic ahead of you, clients you must prove against by name, an authorization model that has to hold up to review, or a reviewer waiting for evidence you do not have yet.
Continuation, not part of the fixed-price services
A fixed-scope engagement ends. Your MCP surface keeps changing. These ongoing ECZ-ID packages are operated by TrustOps and exist so the proof you can point people at stays current after we hand over — they are a continuation route, not part of the fixed-price services above.
ECZ-ID MCP Verifier™
Free
Resolve a Passport, inspect what a page actually asserts, and see the basis of each field.
Anyone checking a provider before they rely on it.
ECZ-ID MCP Assurance™
£199/month
Keep your MCP provider identity and evidence current and independently resolvable, with the lifecycle operations that hold it accurate as your surfaces change.
Providers whose customers re-check them.
ECZ-ID MCP Assurance Plus™
£499/month
Extend that evidence posture across broader MCP surfaces and targets, within the entitlements the canonical product defines.
Providers operating several surfaces or targets.
ECZ-ID MCP Policy™
£1,499/month
Publish machine-readable buyer-side acceptance policy for MCP surfaces — what your organisation will and will not accept from what it consumes, stated under your own authority.
Buying organisations consuming third-party MCP surfaces.
The four professional services above are fixed-scope engagements with published totals and milestones — they are not subscriptions, never convert into one, and buying an engagement never enrols you in a package.
These packages are acquired and operated through TrustOps — see the ongoing packages on TrustOps (external).
Quick routes