Pricing
The CLI is free. Teams pay for the record.
Every diff runs on your own machine. Team stores each diff and its approval.
CLI
$0
no account
Every command, on any machine.
- Render and diff
- The CI check
- JSON output for agents
Team
For teams$12
a user a month
Stored diffs and approvals.
- Everything in CLI
- Diffs stored a year
- Approvals before prod
- The Team API
Org
Quoted
from 50 users
Long retention and sign-on.
- Everything in Team
- Diffs stored 7 years
- Single sign-on with SAML
- Audit log export
A user is anyone who approves a diff. CI runs and agents are free.
Every plan, line by line
| Plan | Diff | CI check | Stored diffs | Approvals | API |
|---|---|---|---|---|---|
| CLI | yes | yes | no | no | no |
| Team | yes | yes | 1 year | yes | yes |
| Org | yes | yes | 7 years | yes, with roles | yes |
The Team API
Diffs as records.
The CLI uploads each diff. The API reads and approves them.
- POST/v1/diffs
Upload a diff from the CLI or CI
- GET/v1/diffs/{id}
One diff, with its keys and reviews
- POST/v1/diffs/{id}/approve
Approve a diff for one environment
- GET/v1/environments
Each environment and its last deployed render
Team and Org only. Every route takes a Team key.
Request
curl -X POST https://api.diffkeel.example/v1/diffs/df_8k2/approve \
-H "Authorization: Bearer $DIFFKEEL_KEY" \
-d '{ "env": "prod" }'Response200 OK
{
"id": "df_8k2",
"env": "prod",
"changes": 3,
"approved": true,
"check": "pass"
}Questions
Before you choose.
Does the CLI send my config anywhere?
No. The CLI renders and diffs on your machine. On Team, it uploads the diff, with secrets already masked.
Who counts as a user?
Anyone who approves a diff. CI runs and agents never count.
Can I keep using the CLI alone?
Yes. Every command in the CLI stays free, with no account.