The deployment layer for your agents' MCP servers. Sovereign by default.
foro runs your MCP servers on sovereign EU infrastructure, so connecting agents to internal systems is something your security review can say yes to. We guide the pilot from kick-off to handover.
EU-hosted, GDPR-first, guided pilot, not a black box
How a pilot works
A structured four-week arc with named roles and a success criterion, not an open-ended proof of concept.
- 1Kick-offOne concrete use case, one success criterion, one date. The default use case: a connector to your internal data.
- 2Guided sessionWe set up the workspace with you, invite your team, deploy the pilot server, and stay until the first authenticated tool call succeeds.
- 3Your domainmcp.yourcompany.com resolving to your server: the milestone your champion can demo internally.
- 4HandoverAdministrator walkthrough: token rotation, member roles, visibility. Your team runs it from here.
Built to pass your security review
Deals stall in security review, so we front-load the answers. Everything below holds on every plan; baseline security is never a paid feature.
Need the details on paper? Request the security & compliance pack.
- Data locality
- Platform compute, databases, and object storage all run on EU cloud infrastructure with no non-EU parent company. Optional GitHub and your LLM provider are the named exceptions; details in the pack.
- Isolation
- One container per MCP server, each on its own network. Servers never share a network with each other or with the platform.
- Secrets
- Encrypted with libsodium authenticated encryption; the master key lives in a Docker secret, never in an env var or the database.
- Transport & auth
- Automatic TLS on every endpoint, plus a per-project bearer token you can rotate from the dashboard.
- PII protection
- Structured masking (email, IBAN, card, BSN, phone) is live on Starter+. Free-text detection of names and addresses (English + Dutch) ships on Team and Enterprise.
- GDPR
- EU controller/processor split with a DPA on request; metrics and log retention by plan (24h / 7d / 30d / 90d).
Plans for organisations
Both start with a demo today; we activate the plan for you while self-serve checkout is on the way. Solo? See all plans.
Team
per month, for teams and consultancies
€249.00/mo
VAT included
- 10 MCP servers, 10 seats
- Workspaces with owner/member roles
- Custom domains on every server
- Structured + free-text PII masking
- Alerting via email and webhooks
- Priority email support
Enterprise
for organisations that need more
Custom
- Custom server and seat limits
- Dedicated capacity, zero-downtime deployments
- Compliance pack + security-review support
- Custom DPA
- Guided onboarding and pilot, including SSO with your own IdP (OAuth 2.1)
The security & compliance pack
Data locality, the encryption model, isolation, GDPR posture, and the shared-responsibility split, written for the person who has to sign off, not for a landing page. Every claim is verified against the codebase before it ships.
Leave a work email to download the security & compliance pack (PDF). We use it only to send the pack and follow up if you ask. See the privacy policy.
See your first internal connector live
A 30-minute demo with an engineer, on your use case. No slide deck.
Leave your work email and a human will reach out within one business day.