Metorial vs Archestra
Archestra and Metorial both put a governed layer between AI clients and the tools your company uses.
Where Archestra wins: LLM proxy with hard spend limits per organization, team, user, agent, virtual key or environment; requests are blocked with HTTP 402 once a limit is hit.
Metorial is the stronger fit if you want Git-synced skills, ChatGPT support and an EU data region.
Every Archestra fact below links to Archestra's own page. Anything they don't publish is marked "Not published", not "No".
Where Archestra wins
- LLM proxy with hard spend limits per organization, team, user, agent, virtual key or environment; requests are blocked with HTTP 402 once a limit is hit.source
- Enterprise features (SSO, RBAC, granular access control) are free in production for companies under 30 users.source
- Session-level deterministic guardrails: tool results add restrictions to the session and later tool calls must satisfy them, enforced outside the agent loop.source
Key differences
Each cell links to the page it comes from.
| Feature | Metorial | Archestra |
|---|---|---|
| Source license | FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0. | AGPL-3.0 (enterprise features under separate LICENSE_ENTERPRISE)source |
| Self-host | Yessource | Yessource |
| Integration catalog | 1,000+source | 900+source |
| One URL for all tools | Yessource | Yessource |
| Per-user OAuth | Yessource | YessourceREADME: OAuth + On-Behalf-Of so tools run as the user. |
| SSO (SAML or OIDC) | Yessource | YessourceOkta, Entra ID, Google, GitHub, GitLab, generic OIDC/SAML 2.0; enterprise license (free under 30 users). |
| SCIM provisioning | Yessource | Not publishedTeam sync from directory groups at SSO login; SCIM not mentioned. |
| Role or group-based tool access | Yessource | YessourceGranular access control is an Enterprise feature. |
| Audit log per person | Yessource | YessourceMCP Gateway log records tool, gateway, account, arguments and result per call. |
| Create and edit skills | Yessource | Yessource |
| Git sync for skills | Yessource | PartialsourceImport documented; ongoing sync not stated. |
| Own chat app required | Nosource | NosourceShips its own chat & projects UI, but external clients supported. |
| Prompt-injection detection | Yessource | PartialsourceMitigation by deterministic session policy rather than detection; Guardrails in Beta and AI Security tier. |
| EU data region | Yessource | Not publishedNo managed cloud offering documented; self-host only. |
| SOC 2 Type II | Yessource | Not published |
| LLM gateway or model routing | No | YessourceLLM Proxy with providers, model router, virtual keys. |
| Starting price | $0 (Dev); Scale from $250/monthsource | Free (AGPL; enterprise features free under 30 users); Enterprise contact salessource |
Which AI clients each works in
| Feature | Metorial | Archestra |
|---|---|---|
| Claude (web and desktop) | Yessource | YessourceClaude Desktop documented; claude.ai web not explicitly. |
| Claude Code | Yessource | Yessource |
| ChatGPT | Yessource | Not published |
| Cursor | Yessource | Yessource |
| Codex | Yessource | Yessource |
| GitHub Copilot | Yessource | PartialsourceCopilot CLI named; Copilot in IDE not named. |
| Custom agents (SDK or API) | Yessource | YessourceDocs section 'AI SDKs and Frameworks'. |
Full checklist
Every row we track, with what it means. "Not published" means the vendor's own pages don't say.
Connect
| Feature | Metorial | Archestra |
|---|---|---|
| Integration catalogHow many ready-made integrations or MCP servers the vendor publishes. | 1,000+source | 900+source |
| Verified or official serversThe catalog includes servers the vendor tests or maintains, not only community listings. | Yessource | PartialsourceCatalog servers are 'evaluated'; no formal verification program described. |
| Bring your own MCP serverYou can add an MCP server you built or host yourself. | Yessource | Yessource |
| Remote (HTTP) MCP serversConnects to MCP servers hosted elsewhere over HTTP. | Yessource | Yessource |
| Local, stdio or Docker serversRuns MCP servers that ship as local processes or containers. | Yessource | YessourceSelf-hosted servers run as Kubernetes workloads (embedded cluster in Docker quickstart). |
| One URL for all toolsA user adds one endpoint to their AI client and reaches every approved tool through it. | Yessource | Yessource |
| Version pinningYou can lock an integration to a known version. | Yessource | Not published |
| Schema change monitoringChanges to tool definitions are detected and flagged. | Yessource | Not published |
AI clients
| Feature | Metorial | Archestra |
|---|---|---|
| Claude (web and desktop)Documented to work in the Claude apps. | Yessource | YessourceClaude Desktop documented; claude.ai web not explicitly. |
| Claude CodeDocumented to work in Claude Code. | Yessource | Yessource |
| ChatGPTDocumented to work in ChatGPT. | Yessource | Not published |
| CursorDocumented to work in Cursor. | Yessource | Yessource |
| CodexDocumented to work in Codex. | Yessource | Yessource |
| GitHub CopilotDocumented to work in GitHub Copilot. | Yessource | PartialsourceCopilot CLI named; Copilot in IDE not named. |
| Custom agents (SDK or API)Your own agents can use the tools through an SDK or API. | Yessource | YessourceDocs section 'AI SDKs and Frameworks'. |
| Own chat app requiredYes means people must work inside the vendor’s own app rather than the AI client they already use. | Nosource | NosourceShips its own chat & projects UI, but external clients supported. |
Identity and access
| Feature | Metorial | Archestra |
|---|---|---|
| Per-user OAuthTool calls run with each person’s own account, not a shared key. | Yessource | YessourceREADME: OAuth + On-Behalf-Of so tools run as the user. |
| Managed OAuth appsThe vendor provides OAuth apps so you don’t register your own. | Yessource | Not published |
| Bring your own OAuth appYou can use OAuth apps registered under your own company. | Yessource | Not published |
| SSO (SAML or OIDC)People sign in through your identity provider. | Yessource | YessourceOkta, Entra ID, Google, GitHub, GitLab, generic OIDC/SAML 2.0; enterprise license (free under 30 users). |
| SCIM provisioningUsers and groups sync automatically from your identity provider. | Yessource | Not publishedTeam sync from directory groups at SSO login; SCIM not mentioned. |
| Role or group-based tool accessAccess to tools follows roles or groups. | Yessource | YessourceGranular access control is an Enterprise feature. |
| Tool-level allow and denyIndividual tools can be allowed or blocked, not only whole servers. | Yessource | PartialsourcePer-gateway tool selection (Manual mode); no explicit per-tool allow/deny rules documented. |
| Read-only modesAn integration can be limited to read-only tools. | Yessource | Not published'Can read' permission level applies to platform resources, not tool calls. |
Visibility and security
| Feature | Metorial | Archestra |
|---|---|---|
| Audit log per personEvery call is recorded and tied to the person or agent who made it. | Yessource | YessourceMCP Gateway log records tool, gateway, account, arguments and result per call. |
| Call tracingTool arguments and results are recorded for debugging and review. | Yessource | Yessource |
| Log export or SIEMLogs can be exported or streamed to your security tools. | Yessource | PartialsourceMetrics and traces export (homepage: OpenTelemetry and Prometheus); no named SIEM integration. |
| Data redaction or DLPSensitive data in tool traffic can be detected, masked or blocked. | Yessource | PartialsourceMetadata-only logging mode; guardrails can redact secrets; no PII/DLP feature documented. |
| Prompt-injection detectionTool traffic is inspected for prompt-injection attacks. | Yessource | PartialsourceMitigation by deterministic session policy rather than detection; Guardrails in Beta and AI Security tier. |
| Tool-poisoning protectionMalicious or changed tool descriptions are detected. | YesThrough Protoguard. | Not published |
Skills
| Feature | Metorial | Archestra |
|---|---|---|
| Create and edit skillsTeams can write and edit shared skills in the product. | Yessource | Yessource |
| Git sync for skillsSkills sync to or from a Git repository. | Yessource | PartialsourceImport documented; ongoing sync not stated. |
| Skills delivered by roleSkills reach people based on their role or group. | Yessource | Not publishedSkills scoped by user, agent and environment; roles/teams not mentioned on skills page. |
| Skills over MCPSkills are served to AI clients through MCP. | Not published | PartialsourceShared marketplace for coding agents; transport not explicitly MCP. |
Deployment
| Feature | Metorial | Archestra |
|---|---|---|
| Source licenseThe license the product’s code is published under, if any. | FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0. | AGPL-3.0 (enterprise features under separate LICENSE_ENTERPRISE)source |
| Self-hostYou can run it on your own infrastructure. | Yessource | Yessource |
| VPC or on-premCan be deployed in your own cloud account or data center. | Yessource | Yessource |
| Air-gappedCan run with no internet connection. | Yes | Not published |
| EU data regionData can be hosted in the EU. | Yessource | Not publishedNo managed cloud offering documented; self-host only. |
Compliance
| Feature | Metorial | Archestra |
|---|---|---|
| SOC 2 Type IIHolds a SOC 2 Type II report. | Yessource | Not published |
| ISO 27001Holds ISO/IEC 27001 certification. | Not published | Not published |
| HIPAASupports HIPAA workloads, usually with a BAA. | YesSigns BAAs. | Not published |
| GDPR and DPAStates GDPR compliance and offers a data processing agreement. | YessourceA data processing agreement is published at /legal/data-processing-agreement. | Not published |
Pricing
| Feature | Metorial | Archestra |
|---|---|---|
| Public pricingPrices are published on the vendor’s site. | Yessource | NosourceFree terms public; paid license price not listed. |
| Free tierA free plan or free edition exists. | Yessource | YessourceApplies to companies with fewer than 30 Archestra users. |
| Starting priceThe lowest published paid price, as listed. | $0 (Dev); Scale from $250/monthsource | Free (AGPL; enterprise features free under 30 users); Enterprise contact salessource |
| Pricing modelHow the vendor charges: per seat, usage, platform fee, or a mix. | Flat monthly plans with paid add-ons (extra seats, tool calls)source | Open core: AGPL base + Enterprise license required at 30+ userssource |
Model layer
Which should you pick?
| Situation | Pick | Why |
|---|---|---|
| Rolling AI out to every employee in the clients they already use | Either | Both connect to existing AI clients. Compare the client list below. |
| You must self-host | Either | Both document a self-hosted option. |
| You need an LLM gateway or model routing today | Archestra | Archestra documents an LLM gateway. Metorial doesn't ship one yet. |
| Teams should share skills, not only tools | Either | Both document shared skills; compare the Skills rows below. |
| You are building integrations into your own product | Either | Both offer an SDK or API for your own agents. |
Pricing
Published prices only. Nothing is estimated.
Metorial
What each Metorial plan includes
From the Metorial pricing page.
| Included | Metorial Dev | Metorial Scale | Metorial for Enterprise |
|---|---|---|---|
| Tool calls per month | 500,000 | 2,500,000 | Custom |
| Callbacks | 10,000 | 100,000 | Custom |
| Workforce seats | 2 | 20 | Custom |
| Provider integrations | 10 | Unlimited | Unlimited |
| Log retention | 30 days | 90 days | Custom |
| Production access | Not included | Included | Included |
On every plan
- Slack and email support
- Auth Connections: Unlimited
- Sessions: Unlimited
- Concurrent Connections: Unlimited
- Developer API Access
- Custom Integrations
- Remote MCP Servers
- Managed MCP Servers
Moving from Archestra to Metorial
- Remote MCP servers you use through Archestra can be added to Metorial as they are.
- OAuth apps registered under your company can be reused, so people sign in the way they do today.
- Sign-in moves to your identity provider through SAML; groups decide who gets which tools.
- Skills, policies and audit history in Archestra don't transfer automatically. Talk to us about moving them.
Book a demo to plan the move with us.
Frequently asked questions
Common questions about Metorial and Archestra.
Is Archestra open source?
Archestra lists: AGPL-3.0 (enterprise features under separate LICENSE_ENTERPRISE).Can I self-host Archestra?
Yes, Archestra documents a self-hosted option.Does Archestra work with ChatGPT?
Archestra's own pages don't document ChatGPT support.Is Metorial cheaper than Archestra?
Metorial's Dev plan is free and Scale starts at $250 a month. Archestra doesn't publish prices, so a direct comparison needs a quote.Is Metorial SOC 2 compliant?
Yes. Metorial is SOC 2 Type 2 and GDPR compliant, with EU and US regions.Is Metorial open source?
Metorial's engine is published under FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalog. You can self-host it or use the hosted platform.
More comparisons
Metorial vs BarndoorMetorial vs Cloudflare MCP server portalsMetorial vs Docker MCP GatewayMetorial vs ContextForge MCP GatewayMetorial vs Microsoft MCP Gateway / Azure API Management MCPMetorial vs MintiveMetorial vs ObotMetorial vs Speakeasy AI Control PlaneMetorial vs TrueFoundry AI GatewayBest open-source MCP gatewaysMetorial vs RunlayerMetorial vs Arcade.dev
Checked October 17, 2026. 34 Archestra facts are sourced, each linked in its row. Spotted something wrong? Tell us and we will fix it. All product names are trademarks of their owners.