Local, fair-code, and Cloud¶
Pisama has four distinct starting points:
- Open-source SDKs run locally and need no Pisama account.
- Pisama for n8n self-hosting is fair-code under the Sustainable Use License.
- Cloud Free adds managed ingestion, storage, and a browser dashboard.
- Paid Cloud adds capacity and advanced capabilities by plan.
The core pisama and pisama-core Python packages are MIT licensed. Some optional standalone packages use BSL or fair-code licenses, and are labeled individually in their package metadata and repositories.
Pisama for n8n self-hosting is source-available and free for permitted internal use. It is not OSI open source. Its engine, server, dashboard, and deployment files use the fair-code label consistently.
The canonical vocabulary and product allowances are available in the machine-readable capability manifest and the public product comparison.
Public package map¶
Every supported public package has an explicit source, license, and lifecycle boundary:
| Package | Role | Lifecycle | License | Public source |
|---|---|---|---|---|
pisama | Python CLI, SDK, and local MCP server | Stable entry point | MIT | Pisama-AI/pisama-python |
pisama-core | Python detection, scoring, trace, and repair primitives | Stable engine | MIT | Pisama-AI/pisama-core |
pisama-agent-sdk | ATIF and agent-evaluation SDK | Beta SDK | MIT | Pisama-AI/pisama-agent-sdk |
pisama-auto | Python auto-instrumentation used by pisama[auto] | Maintained implementation | MIT | Pisama-AI/pisama-auto |
pisama-claude-code | Claude Code trace analysis | Supported integration | MIT | Pisama-AI/pisama-claude-code |
pisama-verifier-gym | Verifier audit artifacts, agreement metrics, and release gates | Research | MIT | Pisama-AI/pisama-verifier-gym |
@pisama/sdk | TypeScript AI SDK middleware and redaction | Beta SDK | MIT | Pisama-AI/pisama-js |
@pisama/detectors | TypeScript local detectors | Beta engine | MIT | Pisama-AI/pisama-js |
@pisama/cli | TypeScript CLI, MCP, and Harbor ATIF analysis | Beta entry point | MIT | Pisama-AI/pisama-js |
n8n-nodes-pisama | n8n community nodes | Supported integration | MIT | Pisama-AI/n8n-nodes-pisama |
pisama-detectors | Specialized framework detector library | Labs | BSL 1.1, source-available | Pisama-AI/pisama-detectors |
| Pisama for n8n | Self-hosted n8n engine, server, and dashboard | Fair-code product | Sustainable Use License, fair-code | Pisama-AI/pisama-n8n |
Package lifecycle¶
- Stable packages are the canonical general-purpose install and engine surfaces.
- Beta packages are supported and tested, but APIs may still evolve before version 1.0.
- Supported integrations target a named host product and follow its compatibility requirements.
- Research packages publish reproducible evaluation methods and evidence. Their schemas may evolve as evaluation practice improves.
- Labs packages are maintained experiments with an explicit source-available license. They are not the canonical local detector engine.
- Maintained implementation packages remain compatible dependencies but are not promoted as separate starting points. Install
pisama[auto]instead of choosingpisama-autodirectly for new applications.
No published package is currently hard-deprecated or yanked. If a future consolidation removes a public surface, Pisama will first publish a migration path and keep the final compatible release available.
Shared capability boundary¶
| Capability | Main local SDKs | n8n self-hosted | Pisama-managed services |
|---|---|---|---|
| Local heuristic detection | Local heuristic detectors | Evidence-gated workflow and execution detectors | Included |
| Evidence-backed diagnosis | Included | Included | Included |
| Deterministic repairs | Local repair primitives | Input guardrails and error-route repairs | Included where supported |
| Model-generated fixes | Not included | Requires a cloud key | Included by plan or allowance |
| Advanced detection | Not included | Not included | Included by plan |
| Managed operations | You operate it | You operate it | Included |
| Team governance | Not included | Not included | Team and Enterprise |
This is a shared promise, not forced feature parity. The main local product is SDK, CLI, CI, and MCP oriented. Pisama for n8n self-hosting includes its own server, dashboard, polling, webhook ingestion, and deterministic workflow repairs. Their hosted quotas differ because their storage, model, and operator costs differ.
Feature comparison¶
| Capability | Open-source SDKs | Cloud Free | Paid Cloud |
|---|---|---|---|
| Where it runs | Your Python or TypeScript process | Pisama-hosted service | Pisama-hosted service |
| Account required | No | Yes | Yes |
| Detection | Local heuristic detectors | Core production heuristics | Safety, ML, and advanced evaluation tiers by plan |
| Interfaces | SDK, CLI, CI, optional local MCP | Dashboard and hosted ingestion API | Dashboard, API, alerts, and audit visibility by plan |
| Trace storage | You choose where to store traces | Managed history, 7-day retention | 30 to 90 days, or custom retention |
| Projects | No hosted project limit | 1 | 3 to 50, or custom |
| Healing | Local recommendations | Hosted deterministic repairs within the Free allowance | Model-generated fixes, larger allowances, and advanced automation by plan |
| Audit visibility | Your existing tools | Not included | Tenant API and authentication audit logs on Team and Enterprise |
| Network calls to Pisama | None unless you configure export | Required for hosted ingest | Required for hosted ingest |
| License or terms | Package-specific OSS, BSL, or fair-code license | Hosted service terms | Commercial service terms |
Hosted plans are currently activated through early access. The open-source SDKs are independent of a hosted plan and continue to work without an account.
What the open-source SDK includes¶
The local path includes:
- Registered heuristic detectors for loops, corruption, hallucination, coordination failures, and related failure modes
pisama analyze,pisama watch, and detector inventory commands- an optional local MCP server with
pip install "pisama[mcp]" - a custom detector API for local extensions
- local deterministic repair primitives from
pisama-core - file, JSON string, Python dictionary, and trace-object inputs
- no required database, Docker service, API key, or Pisama network call
import pisama
result = pisama.analyze("trace.json")
for issue in result.issues:
print(f"[{issue.type}] {issue.summary}")
Use this path for local development, CI checks, private traces, and custom pipelines that do not need a hosted dashboard.
What Cloud Free adds¶
Cloud Free is the managed starting point. It adds:
- hosted trace ingestion and history
- a browser dashboard for investigation
- core production heuristic detection
- 5,000 ingested events and 10 deterministic healing actions per month
- one project with 7-day retention
- a hosted approval workflow for included deterministic healing actions
- community support
The SDK can continue to run local checks while exporting selected traces to Cloud. Sending traces is explicit configuration.
What paid Cloud adds¶
The paid plans build on Cloud Free:
| Plan | Main additions |
|---|---|
| Indie | Higher allowances, 3 projects, 30-day retention, and the safety detector tier |
| Pro | ML-powered detection, 10 projects, 60-day retention, framework integrations, webhooks, and Slack alerts |
| Team | Pooled capacity, advanced evaluations, 50 projects, 90-day retention, tenant API and authentication audit logs, and GitHub fix PR generation |
| Enterprise | Custom capacity and retention, custom detectors, governance terms, and managed self-hosting options |
See the pricing page for current plan allowances and commercial terms.
Self-hosted platform¶
The platform source tree includes a FastAPI backend, Next.js dashboard, PostgreSQL, Redis, and Docker Compose configuration. This is a different deployment surface from the pip install pisama SDK.
Repository access, deployment support, Helm, and air-gapped requirements are handled separately from the public package licenses. Contact Pisama when you need a supported platform deployment in your own environment.
Choose a path¶
| Need | Recommended path |
|---|---|
| Evaluate detection locally | Open-source SDK |
| Add a failure gate to CI | Open-source SDK |
| Keep traces entirely in your environment | Open-source SDK |
| Use a managed dashboard and short trace history | Cloud Free |
| Add safety or ML detection | Paid Cloud |
| Add alerts and longer retention | Paid Cloud |
| Add tenant API and authentication audit logs | Team or Enterprise |
| Run the managed platform in your environment | Enterprise |
Move from local to hosted¶
Moving to Cloud is additive:
- Keep local
pisama.analyze()checks where they help. - Configure an exporter or integration for the traces you want hosted.
- Use the dashboard for shared history, investigation, and managed workflows.
Your local SDK workflow does not need to be removed when you adopt Cloud.