Blog · June 1, 2026

Drawbridge is live

Our multi-tenant identity platform — OIDC/SAML SSO, per-tenant schema isolation, a secrets vault — is now generally available.

Drawbridge, our multi-tenant identity platform, is now generally available.

Drawbridge gives every tenant dedicated OIDC/SAML single sign-on, per-call billing, theme management, and demo container provisioning. Each customer’s data lives in its own PostgreSQL schema — isolated at the database level, not just behind application-layer row filters.

This release also ships:

  • Secrets Vault — tenant-scoped encrypted secrets management with TOTP support, baked into the same realm-aware experience.
  • BYOS (Bring Your Own Server) — enroll your own existing hardware under OPKSSH-based access and manage sudo access via group membership.
  • BYOC (Bring Your Own Cloud) — provision OPKSSH-ready, Drawbridge-managed VMs directly inside your own AWS or Azure account, with your IAM/SP credentials.

Pricing that follows usage

The first 5,000 API calls each month are free. After that: $3 per 1,000 calls up to 500,000, then $2 per 1,000 beyond that. Calls are graduated — you always pay the rate of the band each call falls into, not a flat rate on your total. No commitments, no seats: pay only for what you actually use.

Try Drawbridge — the first 5,000 calls a month cost nothing, and no credit card is required. Workloads predictably exceeding 500,000 calls per month qualify for committed-use discounts; contact us for terms.

Built for the agentic era

Drawbridge speaks MCP, the Model Context Protocol, so AI agents can use it as a tool interface — with proper credentials, per-tenant isolation, and an audit trail. If you’re wiring copilots into real infrastructure, that’s the safe way to do it.