From 6f18860e565c3752f858192c14e2dc2b5574b09d Mon Sep 17 00:00:00 2001 From: Alejandro Date: Thu, 12 Mar 2026 16:42:33 -0700 Subject: [PATCH 01/26] Add Enterprise page Co-Authored-By: Claude Sonnet 4.6 --- docs/toolhive/enterprise/index.mdx | 68 ++++++++++++++++++++++++++++++ sidebars.ts | 1 + 2 files changed, 69 insertions(+) create mode 100644 docs/toolhive/enterprise/index.mdx diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx new file mode 100644 index 00000000..195f6d40 --- /dev/null +++ b/docs/toolhive/enterprise/index.mdx @@ -0,0 +1,68 @@ +--- +title: Enterprise +description: Stacklok Enterprise offerings for ToolHive +hide_title: True +--- + +
+ Stacklok +

STACKLOK Enterprise

+
+ +### A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise +Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic — your policies, your infrastructure, no vendor lock-in. + +
+ + + Schedule a Demo + + + See how teams go from evaluationto production in under 60 days + + + + --- +

+ In production at Fortune 500 financial services, Fortune 500 technology, + and Fortune 2000 software companies. +

+ + --- + +
+ +### When Community isnt' enough + +Teams typically move to Stacklok Enterprise when they hit one of these walls: + + + diff --git a/sidebars.ts b/sidebars.ts index e1f929d0..2f32f2d7 100644 --- a/sidebars.ts +++ b/sidebars.ts @@ -279,6 +279,7 @@ const sidebars: SidebarsConfig = { items: [{ type: 'autogenerated', dirName: 'toolhive/guides-mcp' }], }, + 'toolhive/enterprise/index', 'toolhive/reference/client-compatibility', 'toolhive/reference/index', 'toolhive/faq', From daf0570ee366b46e871284217db68c6db55e2143 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Thu, 12 Mar 2026 17:02:19 -0700 Subject: [PATCH 02/26] Community vs Enterprise comparison section Co-Authored-By: Claude Sonnet 4.6 --- docs/toolhive/enterprise/index.mdx | 37 ++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 195f6d40..b7789281 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -66,3 +66,40 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: ))} +---- + +### ToolHive Community vs. Stacklok Enterprise + +

Distribution & Packaging

+ +| Capability | Community | Enterprise | +| :--- | :---: | :---: | +| ToolHive core platform | ✓ | ✓ | +| Release model | Continuous | Semantically versioned (MAJOR.MINOR.PATCH) | +| SigStore Cosign package signing with SBOM | ✓ | ✓ | +| API compatibility assurances between minor versions | — | ✓ | +| Patch versions retained for bugfixes and security updates | — | ✓ | +| Scanning attestations | — | ✓ | +| SLSA build provenance | — | ✓ | + +

Auth, Identity & Governance

+ +| Capability | Community | Enterprise | +| :--- | :---: | :---: | +| Basic authentication | ✓ | ✓ | +| Policy-as-code engine (CEDAR) | ✓ | ✓ | +| Audit logging & compliance reporting | ✓ | ✓ | +| Built-in IdP integration (Okta, Entra ID) | — | ✓ | +| IdP group → ToolHive role mapping | — | ✓ | +| Canonical policy packs (read-only, full CRUD, custom) | — | ✓ | +| Token exchange & credential brokering | — | ✓ | + +

Enterprise UI & Management

+ +| Capability | Community | Enterprise | +| :--- | :---: | :---: | +| ToolHive CLI | ✓ | ✓ | +| Usage telemetry & analytics (OpenTelemetry) | ✓ | ✓ | +| Enterprise MCP registry server and catalog | ✓ | ✓ | +| Enterprise Cloud UI (full CRUD management console) | — | ✓ | +| Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | From 584d571388afe1f40c9f56bb248c904c51eaa84e Mon Sep 17 00:00:00 2001 From: Alejandro Date: Fri, 13 Mar 2026 12:23:49 -0700 Subject: [PATCH 03/26] Add HubSpot demo form to Enterprise page Co-Authored-By: Claude Sonnet 4.6 --- docs/toolhive/enterprise/index.mdx | 56 +++++++++++-------------- src/components/HubSpotForm/index.tsx | 63 ++++++++++++++++++++++++++++ 2 files changed, 87 insertions(+), 32 deletions(-) create mode 100644 src/components/HubSpotForm/index.tsx diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index b7789281..0e4103ca 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -4,48 +4,40 @@ description: Stacklok Enterprise offerings for ToolHive hide_title: True --- +import HubSpotForm from '@site/src/components/HubSpotForm'; +
Stacklok -

STACKLOK Enterprise

+

Stacklok Enterprise

### A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic — your policies, your infrastructure, no vendor lock-in.
- - - Schedule a Demo - - - See how teams go from evaluationto production in under 60 days - - - - --- -

- In production at Fortune 500 financial services, Fortune 500 technology, - and Fortune 2000 software companies. -

- - --- - +
+ + Schedule a Demo + + + See how teams go from evaluation to production in under 60 days + +
+ +
+
+--- +

+ In production at Fortune 500 financial services, Fortune 500 technology, + and Fortune 2000 software companies. +

+ +--- + ### When Community isnt' enough Teams typically move to Stacklok Enterprise when they hit one of these walls: diff --git a/src/components/HubSpotForm/index.tsx b/src/components/HubSpotForm/index.tsx new file mode 100644 index 00000000..919146d5 --- /dev/null +++ b/src/components/HubSpotForm/index.tsx @@ -0,0 +1,63 @@ +// SPDX-FileCopyrightText: Copyright 2025 Stacklok, Inc. +// SPDX-License-Identifier: Apache-2.0 + +import React, { useEffect, useRef, useState } from 'react'; + +interface HubSpotFormProps { + portalId: string; + formId: string; + region: string; +} + +const SCRIPT_SRC = '//js-na2.hsforms.net/forms/embed/v2.js'; + +export default function HubSpotForm({ + portalId, + formId, + region, +}: HubSpotFormProps): React.ReactElement { + const containerRef = useRef(null); + const [submitted, setSubmitted] = useState(false); + + useEffect(() => { + if (!containerRef.current) return; + + const init = () => { + window['hbspt'].forms.create({ + portalId, + formId, + region, + target: `#hubspot-form-${formId}`, + onFormSubmitted: () => setSubmitted(true), + }); + }; + + if (window['hbspt']) { + init(); + return; + } + + const existing = document.querySelector(`script[src="${SCRIPT_SRC}"]`); + if (existing) { + existing.addEventListener('load', init); + return; + } + + const script = document.createElement('script'); + script.src = SCRIPT_SRC; + script.charset = 'utf-8'; + script.type = 'text/javascript'; + script.addEventListener('load', init); + document.body.appendChild(script); + }, [portalId, formId, region]); + + if (submitted) { + return ( +
+ {/*

We will be in touch by email within one business day to schedule your demo.

*/} +
+ ); + } + + return
; +} From 70a4c30da77b29e6794a4502bb9ddbaa631a4ff5 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Fri, 13 Mar 2026 14:58:17 -0700 Subject: [PATCH 04/26] product offering and enterprise feature sections --- docs/toolhive/enterprise/index.mdx | 133 ++++++++++++++++++++++++++++- 1 file changed, 130 insertions(+), 3 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 0e4103ca..6af92708 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -12,7 +12,9 @@ import HubSpotForm from '@site/src/components/HubSpotForm';
### A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise -Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic — your policies, your infrastructure, no vendor lock-in. +Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, +and turnkey identity provider integrations. +Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in.
@@ -45,6 +47,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls:
    {[ 'Developers are bringing their own MCP servers to work — shadow AI is spreading and there is no central control', + 'Your organization has multiple coding assistants and AI agents that need access to business context', 'Your security or compliance team is asking how MCP servers are authenticated, audited, and patched', 'You need SSO and IdP integration (Okta, Entra ID) across your organization', 'You are running MCP in production and need SLA-backed support for incidents', @@ -67,13 +70,23 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Capability | Community | Enterprise | | :--- | :---: | :---: | | ToolHive core platform | ✓ | ✓ | -| Release model | Continuous | Semantically versioned (MAJOR.MINOR.PATCH) | +| Release model | Continuous | Versioned | | SigStore Cosign package signing with SBOM | ✓ | ✓ | -| API compatibility assurances between minor versions | — | ✓ | | Patch versions retained for bugfixes and security updates | — | ✓ | | Scanning attestations | — | ✓ | | SLSA build provenance | — | ✓ | +

    Security and Supply Chain

    +| Capability | Community | Enterprise | +| :--- | :---: | :---: | +| Basic scanning (Trivy, unit tests, integration tests) | ✓ | ✓ | +| Static analysis on every release (attested via SigStore) | — | ✓ | +| Autonomous pen testing on every minor release | — | ✓ | +| Hardened container base images (Chainguard or equiv.) | — | ✓ | +| Proactive notification of vulnerabilities | — | ✓ | +| CVEs addressed within SLO with responsible disclosure | — | ✓ | +| All Sev 0–3 vulnerabilities backported as patch updates | — | ✓ | +

    Auth, Identity & Governance

    | Capability | Community | Enterprise | @@ -95,3 +108,117 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Enterprise MCP registry server and catalog | ✓ | ✓ | | Enterprise Cloud UI (full CRUD management console) | — | ✓ | | Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | + +

    Versioning, Maintenance & Support

    +| Capability | Community | Enterprise | +| :--- | :---: | :---: | +| Latest release | ✓ | ✓ | +| Supported versions: LATEST, LATEST-1, LATEST-2 | — | ✓ | +| Community support (GitHub) | ✓ | ✓ | +| Dedicated support with SLA | — | ✓ | +| Proactive security advisories | — | ✓ | +| Onboarding & integration assistance | — | ✓ | + +

    Enterprise Connectors (MCP Servers)

    + +| Attribute | Community | Enterprise | +| :--- | :---: | :---: | +| Base image | Open source | Chainguard or equivalent | +| Signing & attestations | — | SigStore signed with SLSA provenance | +| Customized tools (tuned to agent workflows) | — | ✓ | +| Streamable HTTP transport | — | ✓ | +| SBOM & dependency vetting | — | ✓ | +| Qualified for target workload | — | ✓ | +| Maintained on enterprise release cadence | — | ✓ | +| Backported security patches | — | ✓ | + +--- +### Product Offerings +Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and our Enterprise Connectors are licensed as an annual subscription. +Professional services are priced based on time and materials. + + +| SKU | Description | Pricing Model | +| :--- | :--- | :---: | +| **Stacklok Enterprise Platform** | Enterprise licensed distribution of ToolHive with Cloud UI, Desktop UI, IdP integration, policy engine, and SLA-backed support | Annual subscription | +| **Enterprise Connectors** | Production-ready connectors, maintained on enterprise release cadence | Annual subscription (per connector) | +| **Professional Services** | Extended integration, policy configuration, additional IdP onboarding, connector development | Time & materials | + +--- +### Enterprise Feature Deep-Dive +Stacklok Enterprise secures MCP servers across your organization through its registry, runtime, gateway, and portal. + +

    Registry: No more fighting shadow AI

    +The source of truth for approved MCP servers within the enterprise. + +
      + {[ + 'Integrate with the official MCP registry', + 'Add custom MCP servers and skills', + 'Group servers based on role or use case', + 'Manage your registry with an API-driven interface', + 'Verify provenance and sign servers with built-in security controls', + 'Preset configurations and permissions for a frictionless user experience', + ].map((item) => ( +
    • + + {item} +
    • + ))} +
    + +

    Runtime: Kubernetes-native deployment

    +Deploy, run, and manage MCP servers in Kubernetes with security guardrails. + +
      + {[ + 'Deploy MCP servers in the cloud via Kubernetes', + 'Run MCP servers locally via Docker or Podman', + 'Proxy remote MCP servers securely for unified management', + 'Kubernetes Operator for fleet and resource management', + 'Leverage OpenTelemetry for centralized monitoring and audit logging', + ].map((item) => ( +
    • + + {item} +
    • + ))} +
    + +

    Gateway: Single endpoint, full control

    +Intelligent MCP gateway for authentication, authorization, and policy enforcement. + +
      + {[ + 'Integrate with your IdP for SSO (OIDC/OAuth compatible)', + 'Build composite tools that orchestrate multiple tools in parallel or sequential chains', + 'Customize and filter tools and descriptions', + 'Reduce context bloat and token usage', + 'Connect with local clients like Claude Desktop, Cursor, and VS Code', + ].map((item) => ( +
    • + + {item} +
    • + ))} +
    + +

    Portal: Self-service with guardrails

    +Custom UI for teams to discover, deploy and manage approved MCP servers. + +
      + {[ + 'Cross-platform desktop app and web-based cloud-UI', + 'Make it easy for admins to curate MCP servers and tools', + 'Automate server discovery', + 'Install MCP servers with a single click', + 'Compatible with hundreds of AI clients', + ].map((item) => ( +
    • + + {item} +
    • + ))} +
    + +--- \ No newline at end of file From 081383c6b95be50a26a6d3814cf18be850a5b405 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Fri, 13 Mar 2026 15:51:26 -0700 Subject: [PATCH 05/26] deployment, validate, and FAQs --- docs/toolhive/enterprise/index.mdx | 101 ++++++++++++++++++++++++++++- 1 file changed, 100 insertions(+), 1 deletion(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 6af92708..086acc20 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -221,4 +221,103 @@ Custom UI for teams to discover, deploy and manage approved MCP servers. ))}
---- \ No newline at end of file +--- +### Deployment + +

How Deployment Works

+Stacklok Enterprise is delivered as a licensed distribution of ToolHive. +You deploy it in your own environment. Stacklok provides supply-chain-hardened artifacts and dedicated support. +Your infrastructure, your data, your control. + +--- +### Validate Stacklok Enterprise in your Environment +We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support. + +
+
+ + Learn about our Proof of Concept + + + See how teams go from evaluation to production in under 60 days + +
+ +
+
+
+ +--- +### Frequently Asked Questions + +
+How does Stacklok Enterprise relate to ToolHive Community? + +Your answer here. + +
+ +
+Can I migrate my existing ToolHive Community setup to Enterprise? + +Your answer here. + +
+ +
+What happens to my data if I end my Enterprise contract? + +Your answer here. + +
+ +
+How long does a typical deployment take? + +Your answer here. + +
+ +
+Why should I use an MCP platform instead of running MCP servers directly? + +Your answer here. + +
+ +
+What AI clients work with Stacklok Enterprise? + +Your answer here. + +
+ +
+Can I run custom MCP servers outside the Stacklok registry? + +Your answer here. + +
+ +
+What is the difference between Enterprise Connectors and Custom Connectors? + +Your answer here. + +
+ +
+When will FIPS-compliant binaries and FedRAMP / ISO 27001 compliance be available? + +Your answer here. + +
+ +
+Is Stacklok Enterprise available on AWS or Azure Marketplace? + +Your answer here. + +
\ No newline at end of file From fc15a50d2eea52f149af08c580df04f358306939 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Fri, 13 Mar 2026 17:46:03 -0700 Subject: [PATCH 06/26] updated hierarchy and Enterprise Deep Dive visuals --- docs/toolhive/enterprise/index.mdx | 152 ++++++++++++----------------- 1 file changed, 60 insertions(+), 92 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 086acc20..d2fe9e38 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -1,5 +1,5 @@ --- -title: Enterprise +title: Stacklok Enterprise description: Stacklok Enterprise offerings for ToolHive hide_title: True --- @@ -11,10 +11,12 @@ import HubSpotForm from '@site/src/components/HubSpotForm';

Stacklok Enterprise

-### A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise +
+

A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise

Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in. +
@@ -40,7 +42,7 @@ Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by --- -### When Community isnt' enough +## When Community isn't enough Teams typically move to Stacklok Enterprise when they hit one of these walls: @@ -63,20 +65,20 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: ---- -### ToolHive Community vs. Stacklok Enterprise +## ToolHive Community vs. Stacklok Enterprise -

Distribution & Packaging

+### Distribution & Packaging | Capability | Community | Enterprise | | :--- | :---: | :---: | | ToolHive core platform | ✓ | ✓ | -| Release model | Continuous | Versioned | +| Release model | Continuous | Semantically versioned (MAJOR.MINOR.PATCH) | | SigStore Cosign package signing with SBOM | ✓ | ✓ | | Patch versions retained for bugfixes and security updates | — | ✓ | | Scanning attestations | — | ✓ | | SLSA build provenance | — | ✓ | -

Security and Supply Chain

+### Security and Supply Chain | Capability | Community | Enterprise | | :--- | :---: | :---: | | Basic scanning (Trivy, unit tests, integration tests) | ✓ | ✓ | @@ -87,7 +89,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | CVEs addressed within SLO with responsible disclosure | — | ✓ | | All Sev 0–3 vulnerabilities backported as patch updates | — | ✓ | -

Auth, Identity & Governance

+### Auth, Identity & Governance | Capability | Community | Enterprise | | :--- | :---: | :---: | @@ -99,7 +101,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Canonical policy packs (read-only, full CRUD, custom) | — | ✓ | | Token exchange & credential brokering | — | ✓ | -

Enterprise UI & Management

+### Enterprise UI & Management | Capability | Community | Enterprise | | :--- | :---: | :---: | @@ -109,7 +111,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Enterprise Cloud UI (full CRUD management console) | — | ✓ | | Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | -

Versioning, Maintenance & Support

+### Versioning, Maintenance & Support | Capability | Community | Enterprise | | :--- | :---: | :---: | | Latest release | ✓ | ✓ | @@ -119,7 +121,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Proactive security advisories | — | ✓ | | Onboarding & integration assistance | — | ✓ | -

Enterprise Connectors (MCP Servers)

+### Enterprise Connectors (MCP Servers) | Attribute | Community | Enterprise | | :--- | :---: | :---: | @@ -133,7 +135,7 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Backported security patches | — | ✓ | --- -### Product Offerings +## Product Offerings Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and our Enterprise Connectors are licensed as an annual subscription. Professional services are priced based on time and materials. @@ -145,92 +147,58 @@ Professional services are priced based on time and materials. | **Professional Services** | Extended integration, policy configuration, additional IdP onboarding, connector development | Time & materials | --- -### Enterprise Feature Deep-Dive +## Enterprise Feature Deep-Dive Stacklok Enterprise secures MCP servers across your organization through its registry, runtime, gateway, and portal. -

Registry: No more fighting shadow AI

-The source of truth for approved MCP servers within the enterprise. - -
    - {[ - 'Integrate with the official MCP registry', - 'Add custom MCP servers and skills', - 'Group servers based on role or use case', - 'Manage your registry with an API-driven interface', - 'Verify provenance and sign servers with built-in security controls', - 'Preset configurations and permissions for a frictionless user experience', - ].map((item) => ( -
  • - - {item} -
  • - ))} -
- -

Runtime: Kubernetes-native deployment

-Deploy, run, and manage MCP servers in Kubernetes with security guardrails. - -
    - {[ - 'Deploy MCP servers in the cloud via Kubernetes', - 'Run MCP servers locally via Docker or Podman', - 'Proxy remote MCP servers securely for unified management', - 'Kubernetes Operator for fleet and resource management', - 'Leverage OpenTelemetry for centralized monitoring and audit logging', - ].map((item) => ( -
  • - - {item} -
  • - ))} -
- -

Gateway: Single endpoint, full control

-Intelligent MCP gateway for authentication, authorization, and policy enforcement. - -
    - {[ - 'Integrate with your IdP for SSO (OIDC/OAuth compatible)', - 'Build composite tools that orchestrate multiple tools in parallel or sequential chains', - 'Customize and filter tools and descriptions', - 'Reduce context bloat and token usage', - 'Connect with local clients like Claude Desktop, Cursor, and VS Code', - ].map((item) => ( -
  • - - {item} -
  • - ))} -
- -

Portal: Self-service with guardrails

-Custom UI for teams to discover, deploy and manage approved MCP servers. - -
    - {[ - 'Cross-platform desktop app and web-based cloud-UI', - 'Make it easy for admins to curate MCP servers and tools', - 'Automate server discovery', - 'Install MCP servers with a single click', - 'Compatible with hundreds of AI clients', - ].map((item) => ( -
  • - - {item} -
  • - ))} -
+### Registry: No more fighting shadow AI +| The source of truth for approved MCP servers within the enterprise. | +| :--- | +| Integrate with the official MCP registry | +| Add custom MCP servers and skills | +| Group servers based on role or use case | +| Manage your registry with an API-driven interface | +| Verify provenance and sign servers with built-in security controls | +| Preset configurations and permissions for a frictionless user experience | + +### Runtime: Kubernetes-native deployment + +| Deploy, run, and manage MCP servers in Kubernetes with security guardrails. | +| :--- | +| Deploy MCP servers in the cloud via Kubernetes | +| Run MCP servers locally via Docker or Podman | +| Proxy remote MCP servers securely for unified management | +| Kubernetes Operator for fleet and resource management | +| Leverage OpenTelemetry for centralized monitoring and audit logging | + +### Gateway: Single endpoint, full control + +| Intelligent MCP gateway for authentication, authorization, and policy enforcement. | +| :--- | +| Integrate with your IdP for SSO (OIDC/OAuth compatible) | +| Build composite tools that orchestrate multiple tools in parallel or sequential chains | +| Customize and filter tools and descriptions | +| Reduce context bloat and token usage | +| Connect with local clients like Claude Desktop, Cursor, and VS Code | + +### Portal: Self-service with guardrails + +| Custom UI for teams to discover, deploy and manage approved MCP servers. | +| :--- | +| Cross-platform desktop app and web-based cloud UI | +| Make it easy for admins to curate MCP servers and tools | +| Automate server discovery | +| Install MCP servers with a single click | +| Compatible with hundreds of AI clients | --- -### Deployment +## How Deployment Works -

How Deployment Works

Stacklok Enterprise is delivered as a licensed distribution of ToolHive. -You deploy it in your own environment. Stacklok provides supply-chain-hardened artifacts and dedicated support. -Your infrastructure, your data, your control. +We provide supply-chain-hardened artifacts and dedicated support. You deploy it in your own environment. +Your data never leaves your environment. --- -### Validate Stacklok Enterprise in your Environment +## Validate Stacklok Enterprise in your Environment We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support.
@@ -241,7 +209,7 @@ We help you validate Stacklok Enterprise in your environment at your pace with f - See how teams go from evaluation to production in under 60 days + Scoped to your environment. Hands-on support throughout.
@@ -250,7 +218,7 @@ We help you validate Stacklok Enterprise in your environment at your pace with f
--- -### Frequently Asked Questions +## Frequently Asked Questions
How does Stacklok Enterprise relate to ToolHive Community? From 31b2ffe247392a635e4699c53d284aa1dd736b3b Mon Sep 17 00:00:00 2001 From: Alejandro Date: Fri, 13 Mar 2026 19:02:43 -0700 Subject: [PATCH 07/26] CTA styling with custom CSS for HubSpot --- docs/toolhive/enterprise/index.mdx | 37 +++++++++++-------- src/components/HubSpotForm/index.tsx | 7 ++-- src/css/custom.css | 54 ++++++++++++++++++++++++++++ 3 files changed, 82 insertions(+), 16 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index d2fe9e38..16ac67e9 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -12,14 +12,22 @@ import HubSpotForm from '@site/src/components/HubSpotForm';
-

A hardened distribution of ToolHive Community that securely scales MCP servers across your enterprise

-Repackaged with signed binaries, hardened images, formal semantic versioning, backported security patches, +

A hardened and production-ready distribution of ToolHive Community

+Securely scale MCP servers across your enterprise with Stacklok Enterprise's signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in.
- +
-
+
Schedule a Demo @@ -29,7 +37,7 @@ Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by See how teams go from evaluation to production in under 60 days
- +
@@ -190,19 +198,20 @@ Stacklok Enterprise secures MCP servers across your organization through its reg | Install MCP servers with a single click | | Compatible with hundreds of AI clients | ---- -## How Deployment Works - -Stacklok Enterprise is delivered as a licensed distribution of ToolHive. -We provide supply-chain-hardened artifacts and dedicated support. You deploy it in your own environment. -Your data never leaves your environment. - --- ## Validate Stacklok Enterprise in your Environment We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support.
-
+
Learn about our Proof of Concept @@ -212,7 +221,7 @@ We help you validate Stacklok Enterprise in your environment at your pace with f Scoped to your environment. Hands-on support throughout.
- +
diff --git a/src/components/HubSpotForm/index.tsx b/src/components/HubSpotForm/index.tsx index 919146d5..f5db5fc6 100644 --- a/src/components/HubSpotForm/index.tsx +++ b/src/components/HubSpotForm/index.tsx @@ -7,6 +7,7 @@ interface HubSpotFormProps { portalId: string; formId: string; region: string; + instanceId: string; } const SCRIPT_SRC = '//js-na2.hsforms.net/forms/embed/v2.js'; @@ -15,9 +16,11 @@ export default function HubSpotForm({ portalId, formId, region, + instanceId, }: HubSpotFormProps): React.ReactElement { const containerRef = useRef(null); const [submitted, setSubmitted] = useState(false); + const targetId = `hubspot-form-${instanceId}`; useEffect(() => { if (!containerRef.current) return; @@ -27,7 +30,7 @@ export default function HubSpotForm({ portalId, formId, region, - target: `#hubspot-form-${formId}`, + target: `#${targetId}`, onFormSubmitted: () => setSubmitted(true), }); }; @@ -59,5 +62,5 @@ export default function HubSpotForm({ ); } - return
; + return
; } diff --git a/src/css/custom.css b/src/css/custom.css index 07b76380..506e7218 100644 --- a/src/css/custom.css +++ b/src/css/custom.css @@ -446,3 +446,57 @@ details summary:hover { [data-theme='dark'] .json-schema-viewer details summary:hover { color: var(--ifm-color-primary); } + +/* HubSpot form styling for Enterprise page */ + +.hs-form-private .hs-input { + border-radius: 8px; + border: 1px solid rgba(255, 255, 255, 0.3); + background-color: rgba(255, 255, 255, 0.15); + color: var(--stacklok-white); + padding: 0.5rem 0.75rem; + width: 100%; + box-sizing: border-box; +} + +.hs-form-private .hs-input:focus { + outline: none; + border-color: rgba(255, 255, 255, 0.7); +} + +.hs-form-private label { + color: var(--stacklok-white); + font-size: 0.875rem; + font-weight: 500; +} + +.hs-form-private .hs-input::placeholder { + color: rgba(255, 255, 255, 0.5); +} + +.hs-form-private textarea.hs-input { + min-height: 50px; + resize: vertical; +} + +.hs-form-private input[type="submit"], +.hs-form-private .hs-button { + background-color: var(--stacklok-white); + color: var(--stacklok-green-leaf); + border-radius: 24px; + border: none; + padding: 0.6rem 1.5rem; + font-weight: 600; + cursor: pointer; + margin-top: 0.5rem; +} + +.hs-form-private input[type="submit"]:hover, +.hs-form-private .hs-button:hover { + background-color: var(--stacklok-cookie); +} + +.hs-form-private .hs-error-msg { + color: #ffcccc; + font-size: 0.8rem; +} From 352034476d0d3e9e56ee7288752c2018b70e1858 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sat, 14 Mar 2026 23:24:13 -0700 Subject: [PATCH 08/26] FAQ answers and Demo CTA id for linking --- docs/toolhive/enterprise/index.mdx | 75 ++++++++++++++++++++++-------- 1 file changed, 56 insertions(+), 19 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 16ac67e9..a23cbddf 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -19,14 +19,15 @@ Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by
-
Schedule a Demo @@ -232,69 +233,105 @@ We help you validate Stacklok Enterprise in your environment at your pace with f
How does Stacklok Enterprise relate to ToolHive Community? -Your answer here. +ToolHive Community is an open-source distribution optimized for individual developers +and pre-production use, making it the right tool for evaluating MCP and building a +proof of concept. Stacklok Enterprise is a separate, hardened distribution built for +production: semantically versioned, with IdP integration, centralized governance, +and SLA-backed support. Moving from Community to Enterprise is a supported migration +where Stacklok provides the enterprise binaries and dedicated engineering support to +take you from proof of concept to production. +[See the full comparison](#toolhive-community-vs-stacklok-enterprise) +or [learn about our proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
Can I migrate my existing ToolHive Community setup to Enterprise? -Your answer here. +Yes. Enterprise uses different binaries from Community, so migration is a manual process, +but every Enterprise license includes dedicated engineering support to make it seamless. +In practice, most customers use Community for evaluation and have not built significant +production configuration before engaging with Stacklok, so the migration is typically +straightforward. [Learn about our proof of concept engagement](#validate-stacklok-enterprise-in-your-environment) +to understand how we support the transition.
What happens to my data if I end my Enterprise contract? -Your answer here. +Your data never leaves your environment. Stacklok Enterprise is self-hosted, +so you retain full control of your data and your deployment regardless of +your contract status. If you end your contract, your existing Enterprise +binary continues to run. There is no vendor lock-in. You lose access to +new releases, backported security patches, and dedicated support, but your +deployment remains fully operational. +[Learn more about our product offerings](#product-offerings).
How long does a typical deployment take? -Your answer here. - +Most deployments reach production within 60 days of contract signing. +Stacklok works directly with your platform team, and every Enterprise +license includes dedicated engineering support throughout the process. +You will need an existing Kubernetes environment to get started. +Timelines are scoped to your environment, so if your situation is more +complex we will work at your pace. [Learn about our proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
Why should I use an MCP platform instead of running MCP servers directly? -Your answer here. +Running MCP servers directly gives you no isolation, no access controls, and no visibility +into what those servers are doing. ToolHive addresses this by running each server in its +own container with least-privilege permissions, encrypting credentials at rest, and tracing +every tool call via OpenTelemetry. Stacklok Enterprise adds centralized governance, IdP-backed +authentication, and audit logging for teams running MCP at scale across their organization. +[Explore the core concepts](../concepts) to dig deeper into how ToolHive works.
What AI clients work with Stacklok Enterprise? -Your answer here. +Stacklok Enterprise works with any AI coding assistant or agent that supports MCP. +This includes Claude Code, GitHub Copilot, Cursor, Windsurf, VS Code, Zed, Cline, +Continue, Roo Code, Goose, LM Studio, OpenAI Codex, and many more. Most clients +support automatic configuration so developers can connect without manual setup. +[See the full client compatibility reference](../reference/client-compatibility) for the complete list.
Can I run custom MCP servers outside the Stacklok registry? -Your answer here. +Yes. Stacklok Enterprise starts with a base registry of vetted, hardened MCP servers +maintained by Stacklok. From there, you have full control to add your own servers from +public package managers, Docker images, remote URLs, or build a private registry +tailored to your organization. You are never limited to Stacklok's catalog. [See how to +run MCP servers in Kubernetes](../guides-k8s/run-mcp-k8s) for the full details.
What is the difference between Enterprise Connectors and Custom Connectors? -Your answer here. - -
- -
-When will FIPS-compliant binaries and FedRAMP / ISO 27001 compliance be available? - -Your answer here. +Enterprise Connectors are production-ready MCP servers built, hardened, and maintained by Stacklok +on the enterprise release cadence, signed, attested, and qualified for your target workload so your +security team does not have to validate them independently. Custom Connectors are servers you bring +yourself, which ToolHive can run and govern, but which remain your responsibility to maintain and +secure. Enterprise Connectors are sold per connector on an annual basis. +[See Enterprise Connectors in our Product Offerings](#product-offerings).
Is Stacklok Enterprise available on AWS or Azure Marketplace? -Your answer here. +Stacklok Enterprise is not currently available on AWS or Azure Marketplace. We +are actively exploring cloud marketplace availability and welcome your input on +procurement requirements. [Get in touch](#schedule-a-demo) to share your use case.
\ No newline at end of file From d7d65cb735f42ddd9cf0139cc40c31a8158bf255 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 12:40:41 -0700 Subject: [PATCH 09/26] enterprise header text points to enterprise docs page --- docusaurus.config.ts | 2 +- src/css/custom.css | 8 ++------ 2 files changed, 3 insertions(+), 7 deletions(-) diff --git a/docusaurus.config.ts b/docusaurus.config.ts index 36b3c5be..5172580d 100644 --- a/docusaurus.config.ts +++ b/docusaurus.config.ts @@ -292,7 +292,7 @@ const config: Config = { position: 'left', }, { - href: 'https://stacklok.com/platform/', + to: '/toolhive/enterprise', label: 'Enterprise', position: 'left', }, diff --git a/src/css/custom.css b/src/css/custom.css index 506e7218..3644853b 100644 --- a/src/css/custom.css +++ b/src/css/custom.css @@ -141,15 +141,11 @@ thead th { /* Navbar links */ .navbar__link--active { - box-sizing: border-box; - border-radius: var(--ifm-breadcrumb-border-radius); - background: var(--stacklok-fluorescent); - color: var(--stacklok-dusk); + color: var(--stacklok-fluorescent); } .navbar__link--active:hover { - background: var(--stacklok-cookie); - color: var(--stacklok-dusk); + color: var(--stacklok-primary-light); } /* Targets the theme switch button in the navbar */ From 3397f8fc135cfab1297d13df61d8d8f861ad1587 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 13:10:50 -0700 Subject: [PATCH 10/26] Demo or PoC hooks per section --- docs/toolhive/enterprise/index.mdx | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index a23cbddf..64fe9e8d 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -72,6 +72,9 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: ))} +Recognizing these challenges in your organization? +[Schedule a demo](#schedule-a-demo) to see how Stacklok Enterprise addresses them. + ---- ## ToolHive Community vs. Stacklok Enterprise @@ -143,6 +146,9 @@ Teams typically move to Stacklok Enterprise when they hit one of these walls: | Maintained on enterprise release cadence | — | ✓ | | Backported security patches | — | ✓ | +Seen enough to want a closer look? +[Schedule a demo](#schedule-a-demo) to walk through the capabilities that matter most to your team. + --- ## Product Offerings Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and our Enterprise Connectors are licensed as an annual subscription. @@ -155,6 +161,9 @@ Professional services are priced based on time and materials. | **Enterprise Connectors** | Production-ready connectors, maintained on enterprise release cadence | Annual subscription (per connector) | | **Professional Services** | Extended integration, policy configuration, additional IdP onboarding, connector development | Time & materials | +Ready to discuss what the right package looks like for your organization? +[Schedule a demo](#schedule-a-demo) to talk through your requirements. + --- ## Enterprise Feature Deep-Dive Stacklok Enterprise secures MCP servers across your organization through its registry, runtime, gateway, and portal. @@ -199,6 +208,9 @@ Stacklok Enterprise secures MCP servers across your organization through its reg | Install MCP servers with a single click | | Compatible with hundreds of AI clients | +Ready to see how the platform works in your environment? +[Start a proof of concept](#validate-stacklok-enterprise-in-your-environment) to take the next step. + --- ## Validate Stacklok Enterprise in your Environment We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support. From abdf0b83baf5d3784c85b6defebae91246bb5972 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 13:38:04 -0700 Subject: [PATCH 11/26] Explore Community Section post FAQ --- docs/toolhive/enterprise/index.mdx | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 64fe9e8d..6e66bdb7 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -346,4 +346,17 @@ Stacklok Enterprise is not currently available on AWS or Azure Marketplace. We are actively exploring cloud marketplace availability and welcome your input on procurement requirements. [Get in touch](#schedule-a-demo) to share your use case. - \ No newline at end of file + + +--- + +## Explore ToolHive Community + +:::tip[Not ready for Stacklok Enterprise yet?] + +ToolHive Community is free, open source, and the best way to evaluate MCP before +moving to production. + +[Get started with ToolHive Community →](/toolhive) + +::: \ No newline at end of file From ec6882bedb95a5c5b61fe46bd07d55612bdf9761 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 13:46:37 -0700 Subject: [PATCH 12/26] Heading capitalization adheres to STYLES-Guide.md --- docs/toolhive/enterprise/index.mdx | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 6e66bdb7..d7adb517 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -79,7 +79,7 @@ Recognizing these challenges in your organization? ## ToolHive Community vs. Stacklok Enterprise -### Distribution & Packaging +### Distribution & packaging | Capability | Community | Enterprise | | :--- | :---: | :---: | @@ -90,7 +90,7 @@ Recognizing these challenges in your organization? | Scanning attestations | — | ✓ | | SLSA build provenance | — | ✓ | -### Security and Supply Chain +### Security and supply chain | Capability | Community | Enterprise | | :--- | :---: | :---: | | Basic scanning (Trivy, unit tests, integration tests) | ✓ | ✓ | @@ -101,7 +101,7 @@ Recognizing these challenges in your organization? | CVEs addressed within SLO with responsible disclosure | — | ✓ | | All Sev 0–3 vulnerabilities backported as patch updates | — | ✓ | -### Auth, Identity & Governance +### Auth, identity & governance | Capability | Community | Enterprise | | :--- | :---: | :---: | @@ -113,7 +113,7 @@ Recognizing these challenges in your organization? | Canonical policy packs (read-only, full CRUD, custom) | — | ✓ | | Token exchange & credential brokering | — | ✓ | -### Enterprise UI & Management +### Enterprise UI & management | Capability | Community | Enterprise | | :--- | :---: | :---: | @@ -123,7 +123,7 @@ Recognizing these challenges in your organization? | Enterprise Cloud UI (full CRUD management console) | — | ✓ | | Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | -### Versioning, Maintenance & Support +### Versioning, maintenance & support | Capability | Community | Enterprise | | :--- | :---: | :---: | | Latest release | ✓ | ✓ | @@ -165,7 +165,7 @@ Ready to discuss what the right package looks like for your organization? [Schedule a demo](#schedule-a-demo) to talk through your requirements. --- -## Enterprise Feature Deep-Dive +## Enterprise feature deep-dive Stacklok Enterprise secures MCP servers across your organization through its registry, runtime, gateway, and portal. ### Registry: No more fighting shadow AI @@ -212,7 +212,7 @@ Ready to see how the platform works in your environment? [Start a proof of concept](#validate-stacklok-enterprise-in-your-environment) to take the next step. --- -## Validate Stacklok Enterprise in your Environment +## Validate Stacklok Enterprise in your environment We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support.
@@ -240,7 +240,7 @@ We help you validate Stacklok Enterprise in your environment at your pace with f
--- -## Frequently Asked Questions +## Frequently asked questions
How does Stacklok Enterprise relate to ToolHive Community? From 10720fc632baaff2963733bc9a7608dec4e6e502 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 14:02:11 -0700 Subject: [PATCH 13/26] first person voice issues resolved per STYLES-GUIDE.md --- docs/toolhive/enterprise/index.mdx | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index d7adb517..d3706e08 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -151,7 +151,7 @@ Seen enough to want a closer look? --- ## Product Offerings -Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and our Enterprise Connectors are licensed as an annual subscription. +Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and its Enterprise Connectors are licensed as an annual subscription. Professional services are priced based on time and materials. @@ -213,7 +213,7 @@ Ready to see how the platform works in your environment? --- ## Validate Stacklok Enterprise in your environment -We help you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support. +Stacklok helps you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support.
- Learn about our Proof of Concept + Learn about the proof of concept @@ -278,7 +278,7 @@ your contract status. If you end your contract, your existing Enterprise binary continues to run. There is no vendor lock-in. You lose access to new releases, backported security patches, and dedicated support, but your deployment remains fully operational. -[Learn more about our product offerings](#product-offerings). +[Learn more about the product offerings](#product-offerings).
@@ -290,7 +290,7 @@ Stacklok works directly with your platform team, and every Enterprise license includes dedicated engineering support throughout the process. You will need an existing Kubernetes environment to get started. Timelines are scoped to your environment, so if your situation is more -complex we will work at your pace. [Learn about our proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +complex we will work at your pace. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
@@ -335,15 +335,14 @@ on the enterprise release cadence, signed, attested, and qualified for your targ security team does not have to validate them independently. Custom Connectors are servers you bring yourself, which ToolHive can run and govern, but which remain your responsibility to maintain and secure. Enterprise Connectors are sold per connector on an annual basis. -[See Enterprise Connectors in our Product Offerings](#product-offerings). +[See Enterprise Connectors in the product offerings](#product-offerings).
Is Stacklok Enterprise available on AWS or Azure Marketplace? -Stacklok Enterprise is not currently available on AWS or Azure Marketplace. We -are actively exploring cloud marketplace availability and welcome your input on +Stacklok Enterprise is not currently available on AWS or Azure Marketplace. Stacklok is actively exploring cloud marketplace availability and welcomes your input on procurement requirements. [Get in touch](#schedule-a-demo) to share your use case.
From 4234cedeb7243485326b01287f244f652b5d5059 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 14:03:47 -0700 Subject: [PATCH 14/26] secondary issues resolved per STYLES-GUIDE.md --- docs/toolhive/enterprise/index.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index d3706e08..725af068 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -1,7 +1,7 @@ --- title: Stacklok Enterprise description: Stacklok Enterprise offerings for ToolHive -hide_title: True +hide_title: true --- import HubSpotForm from '@site/src/components/HubSpotForm'; @@ -196,7 +196,7 @@ Stacklok Enterprise secures MCP servers across your organization through its reg | Build composite tools that orchestrate multiple tools in parallel or sequential chains | | Customize and filter tools and descriptions | | Reduce context bloat and token usage | -| Connect with local clients like Claude Desktop, Cursor, and VS Code | +| Connect with local clients like Claude Desktop, Cursor, and Visual Studio Code (VS Code) | ### Portal: Self-service with guardrails From dc2708df1b2f26c1c51a3ef75cdc6ad007ffbd0f Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 14:15:14 -0700 Subject: [PATCH 15/26] final compliance issues with STYLES-GUIDE.md --- docs/toolhive/enterprise/index.mdx | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 725af068..dc6dcd1d 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -150,7 +150,7 @@ Seen enough to want a closer look? [Schedule a demo](#schedule-a-demo) to walk through the capabilities that matter most to your team. --- -## Product Offerings +## Product offerings Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and its Enterprise Connectors are licensed as an annual subscription. Professional services are priced based on time and materials. @@ -245,7 +245,7 @@ Stacklok helps you validate Stacklok Enterprise in your environment at your pace
How does Stacklok Enterprise relate to ToolHive Community? -ToolHive Community is an open-source distribution optimized for individual developers +ToolHive Community is an open source distribution optimized for individual developers and pre-production use, making it the right tool for evaluating MCP and building a proof of concept. Stacklok Enterprise is a separate, hardened distribution built for production: semantically versioned, with IdP integration, centralized governance, @@ -253,7 +253,7 @@ and SLA-backed support. Moving from Community to Enterprise is a supported migra where Stacklok provides the enterprise binaries and dedicated engineering support to take you from proof of concept to production. [See the full comparison](#toolhive-community-vs-stacklok-enterprise) -or [learn about our proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +or [learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
@@ -265,7 +265,7 @@ but every Enterprise license includes dedicated engineering support to make it s In practice, most customers use Community for evaluation and have not built significant production configuration before engaging with Stacklok, so the migration is typically straightforward. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment) -to understand how we support the transition. +to understand how Stacklok supports the transition. @@ -290,7 +290,7 @@ Stacklok works directly with your platform team, and every Enterprise license includes dedicated engineering support throughout the process. You will need an existing Kubernetes environment to get started. Timelines are scoped to your environment, so if your situation is more -complex we will work at your pace. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +complex, Stacklok will work at your pace. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
From 256125d431da4558f9b4435f94297075d5a30aa4 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 19:11:09 -0700 Subject: [PATCH 16/26] Address Dark mode changes --- docs/toolhive/enterprise/index.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index dc6dcd1d..1f190f7f 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -21,8 +21,8 @@ Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by
Date: Sun, 15 Mar 2026 19:22:37 -0700 Subject: [PATCH 17/26] Addressed valid secondary issues (all except 2nd and 6th issues) --- docs/toolhive/enterprise/index.mdx | 12 ++++++------ src/components/HubSpotForm/index.tsx | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 1f190f7f..44bf71f5 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -12,10 +12,12 @@ import HubSpotForm from '@site/src/components/HubSpotForm';
-

A hardened and production-ready distribution of ToolHive Community

-Securely scale MCP servers across your enterprise with Stacklok Enterprise's signed binaries, hardened images, formal semantic versioning, backported security patches, -and turnkey identity provider integrations. -Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in. +

A hardened and production-ready distribution of ToolHive Community

+Securely scale MCP servers across your enterprise with Stacklok Enterprise's +signed binaries, hardened images, formal semantic versioning, backported +security patches, and turnkey identity provider integrations. Kubernetes +native and LLM agnostic. Self-hosted in your environment, governed by your +policies, no vendor lock-in.
@@ -26,7 +28,6 @@ Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by padding: '1.5rem', borderRadius: '24px', display: 'inline-block', - width: 'auto', scrollMarginTop: '7rem' }}> @@ -223,7 +224,6 @@ Stacklok helps you validate Stacklok Enterprise in your environment at your pace padding: '1.5rem', borderRadius: '24px', display: 'inline-block', - width: 'auto' }}> Learn about the proof of concept diff --git a/src/components/HubSpotForm/index.tsx b/src/components/HubSpotForm/index.tsx index f5db5fc6..e8450dba 100644 --- a/src/components/HubSpotForm/index.tsx +++ b/src/components/HubSpotForm/index.tsx @@ -57,7 +57,7 @@ export default function HubSpotForm({ if (submitted) { return (
- {/*

We will be in touch by email within one business day to schedule your demo.

*/} + {/* This div is intentionally empty to trigger HubSpot form confirmation message */}
); } From a5effbe31ff3472617305286ce0585ed3de1e7ff Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 19:25:22 -0700 Subject: [PATCH 18/26] Address primary issue 1 by removing logo all together --- docs/toolhive/enterprise/index.mdx | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 44bf71f5..c2941f70 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -1,16 +1,11 @@ --- title: Stacklok Enterprise description: Stacklok Enterprise offerings for ToolHive -hide_title: true +hide_title: false --- import HubSpotForm from '@site/src/components/HubSpotForm'; -
- Stacklok -

Stacklok Enterprise

-
-

A hardened and production-ready distribution of ToolHive Community

Securely scale MCP servers across your enterprise with Stacklok Enterprise's From 788de41f7894616f9cccd7e9549c15dd0cf01022 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 22:16:02 -0700 Subject: [PATCH 19/26] Addressed primary issue 3: CTA improvements --- docs/toolhive/enterprise/index.mdx | 62 ++++++++-------------------- src/components/HubSpotForm/index.tsx | 53 ++++++++++++++++++++++-- 2 files changed, 66 insertions(+), 49 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index c2941f70..c5e7cf5a 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -15,29 +15,15 @@ native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in.
-
-
- - Schedule a Demo - - - See how teams go from evaluation to production in under 60 days - -
- -
-
-
+ ---

@@ -211,28 +197,14 @@ Ready to see how the platform works in your environment? ## Validate Stacklok Enterprise in your environment Stacklok helps you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support. -

-
- - Learn about the proof of concept - - - Scoped to your environment. Hands-on support throughout. - -
- -
-
-
+ --- ## Frequently asked questions diff --git a/src/components/HubSpotForm/index.tsx b/src/components/HubSpotForm/index.tsx index e8450dba..5156118c 100644 --- a/src/components/HubSpotForm/index.tsx +++ b/src/components/HubSpotForm/index.tsx @@ -8,6 +8,9 @@ interface HubSpotFormProps { formId: string; region: string; instanceId: string; + title?: string; + subtitle?: string; + anchorId?: string; } const SCRIPT_SRC = '//js-na2.hsforms.net/forms/embed/v2.js'; @@ -17,6 +20,9 @@ export default function HubSpotForm({ formId, region, instanceId, + title, + subtitle, + anchorId, }: HubSpotFormProps): React.ReactElement { const containerRef = useRef(null); const [submitted, setSubmitted] = useState(false); @@ -54,13 +60,52 @@ export default function HubSpotForm({ document.body.appendChild(script); }, [portalId, formId, region]); - if (submitted) { + const formContent = submitted ? ( +
+ {/* This div is intentionally empty to trigger HubSpot form confirmation message */} +
+ ) : ( +
+ ); + + if (title) { return ( -
- {/* This div is intentionally empty to trigger HubSpot form confirmation message */} +
+
+ + {title} + + {subtitle && ( + + {subtitle} + + )} +
+ {formContent} +
+
); } - return
; + return formContent; } From 48f8247402ab1cea2cad9f0189a3293657837333 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 22:20:54 -0700 Subject: [PATCH 20/26] Addressed primary issue 4 content, keeps tables for visual clarity --- docs/toolhive/enterprise/index.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index c5e7cf5a..19db8bb7 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -147,8 +147,8 @@ Ready to discuss what the right package looks like for your organization? [Schedule a demo](#schedule-a-demo) to talk through your requirements. --- -## Enterprise feature deep-dive -Stacklok Enterprise secures MCP servers across your organization through its registry, runtime, gateway, and portal. +## Enterprise Platform Components +Stacklok Enterprise Platform secures MCP servers across your organization through its registry, runtime, gateway, and portal. ### Registry: No more fighting shadow AI | The source of truth for approved MCP servers within the enterprise. | From 3b01923be3fd20e063b4e379c91b9d5bae4afd23 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Sun, 15 Mar 2026 22:33:46 -0700 Subject: [PATCH 21/26] Addressed primary issue 5: no raw style props --- docs/toolhive/enterprise/index.mdx | 27 +++++++++------------------ src/css/custom.css | 25 +++++++++++++++++++++++++ 2 files changed, 34 insertions(+), 18 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 19db8bb7..beff9fea 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -6,14 +6,12 @@ hide_title: false import HubSpotForm from '@site/src/components/HubSpotForm'; -

A hardened and production-ready distribution of ToolHive Community

Securely scale MCP servers across your enterprise with Stacklok Enterprise's signed binaries, hardened images, formal semantic versioning, backported security patches, and turnkey identity provider integrations. Kubernetes native and LLM agnostic. Self-hosted in your environment, governed by your policies, no vendor lock-in. -
--- -

+

In production at Fortune 500 financial services, Fortune 500 technology, and Fortune 2000 software companies.

@@ -37,21 +35,14 @@ policies, no vendor lock-in. Teams typically move to Stacklok Enterprise when they hit one of these walls: -
    - {[ - 'Developers are bringing their own MCP servers to work — shadow AI is spreading and there is no central control', - 'Your organization has multiple coding assistants and AI agents that need access to business context', - 'Your security or compliance team is asking how MCP servers are authenticated, audited, and patched', - 'You need SSO and IdP integration (Okta, Entra ID) across your organization', - 'You are running MCP in production and need SLA-backed support for incidents', - 'You need centralized governance and policy enforcement across multiple teams or business units', - 'Your environment requires a semantically versioned, supply-chain-attested distribution rather than continuous rolling release', - ].map((item) => ( -
  • - - {item} -
  • - ))} +
      +
    • Developers are bringing their own MCP servers to work — shadow AI is spreading and there is no central control
    • +
    • Your organization has multiple coding assistants and AI agents that need access to business context
    • +
    • Your security or compliance team is asking how MCP servers are authenticated, audited, and patched
    • +
    • You need SSO and IdP integration (Okta, Entra ID) across your organization
    • +
    • You are running MCP in production and need SLA-backed support for incidents
    • +
    • You need centralized governance and policy enforcement across multiple teams or business units
    • +
    • Your environment requires a semantically versioned, supply-chain-attested distribution rather than continuous rolling release
    Recognizing these challenges in your organization? diff --git a/src/css/custom.css b/src/css/custom.css index 3644853b..9410e78b 100644 --- a/src/css/custom.css +++ b/src/css/custom.css @@ -443,6 +443,31 @@ details summary:hover { color: var(--ifm-color-primary); } +/* Icon bullet list using the Stacklok brand symbol as a custom bullet */ +.stacklok-icon-list { + list-style: none; + padding-left: 0; +} + +.stacklok-icon-list li { + display: flex; + align-items: flex-start; + gap: 0.5rem; + margin-bottom: 0.75rem; +} + +.stacklok-icon-list li::before { + content: ''; + background-image: url('/img/logos/stacklok-symbol-light-green.svg'); + background-size: contain; + background-repeat: no-repeat; + height: 1rem; + width: 1rem; + margin-top: 0.2rem; + flex-shrink: 0; + display: inline-block; +} + /* HubSpot form styling for Enterprise page */ .hs-form-private .hs-input { From 7ec8cf4db39c465c5c60a1622562dff6cd94a79f Mon Sep 17 00:00:00 2001 From: aaortiz <47966439+aaortiz@users.noreply.github.com> Date: Mon, 16 Mar 2026 10:18:59 -0700 Subject: [PATCH 22/26] Update src/css/custom.css Co-authored-by: Dan Barr --- src/css/custom.css | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/css/custom.css b/src/css/custom.css index 9410e78b..5fb12c5c 100644 --- a/src/css/custom.css +++ b/src/css/custom.css @@ -468,6 +468,10 @@ details summary:hover { display: inline-block; } +[data-theme='light'] .stacklok-icon-list li::before { + background-image: url('/img/logos/stacklok-symbol-dark-green.svg'); +} + /* HubSpot form styling for Enterprise page */ .hs-form-private .hs-input { From b7e3b96b05342a56decc9ae89a60c7d2b959c408 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Mon, 16 Mar 2026 10:37:18 -0700 Subject: [PATCH 23/26] prettier CI updates --- docs/toolhive/enterprise/index.mdx | 389 +++++++++++++++------------ src/components/HubSpotForm/index.tsx | 16 +- src/css/custom.css | 4 +- 3 files changed, 230 insertions(+), 179 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index beff9fea..0503a55b 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -9,24 +9,24 @@ import HubSpotForm from '@site/src/components/HubSpotForm';

    A hardened and production-ready distribution of ToolHive Community

    Securely scale MCP servers across your enterprise with Stacklok Enterprise's signed binaries, hardened images, formal semantic versioning, backported -security patches, and turnkey identity provider integrations. Kubernetes -native and LLM agnostic. Self-hosted in your environment, governed by your -policies, no vendor lock-in. - +security patches, and turnkey identity provider integrations. Kubernetes native +and LLM agnostic. Self-hosted in your environment, governed by your policies, no +vendor lock-in. --- -

    - In production at Fortune 500 financial services, Fortune 500 technology, - and Fortune 2000 software companies. + +

    + In production at Fortune 500 financial services, Fortune 500 technology, and + Fortune 2000 software companies.

    --- @@ -35,194 +35,229 @@ policies, no vendor lock-in. Teams typically move to Stacklok Enterprise when they hit one of these walls: -
      -
    • Developers are bringing their own MCP servers to work — shadow AI is spreading and there is no central control
    • -
    • Your organization has multiple coding assistants and AI agents that need access to business context
    • -
    • Your security or compliance team is asking how MCP servers are authenticated, audited, and patched
    • -
    • You need SSO and IdP integration (Okta, Entra ID) across your organization
    • -
    • You are running MCP in production and need SLA-backed support for incidents
    • -
    • You need centralized governance and policy enforcement across multiple teams or business units
    • -
    • Your environment requires a semantically versioned, supply-chain-attested distribution rather than continuous rolling release
    • +
        +
      • + Developers are bringing their own MCP servers to work — shadow AI is + spreading and there is no central control +
      • +
      • + Your organization has multiple coding assistants and AI agents that need + access to business context +
      • +
      • + Your security or compliance team is asking how MCP servers are + authenticated, audited, and patched +
      • +
      • + You need SSO and IdP integration (Okta, Entra ID) across your organization +
      • +
      • + You are running MCP in production and need SLA-backed support for incidents +
      • +
      • + You need centralized governance and policy enforcement across multiple teams + or business units +
      • +
      • + Your environment requires a semantically versioned, supply-chain-attested + distribution rather than continuous rolling release +
      -Recognizing these challenges in your organization? -[Schedule a demo](#schedule-a-demo) to see how Stacklok Enterprise addresses them. +Recognizing these challenges in your organization? +[Schedule a demo](#schedule-a-demo) to see how Stacklok Enterprise addresses +them. ----- +--- ## ToolHive Community vs. Stacklok Enterprise ### Distribution & packaging -| Capability | Community | Enterprise | -| :--- | :---: | :---: | -| ToolHive core platform | ✓ | ✓ | -| Release model | Continuous | Semantically versioned (MAJOR.MINOR.PATCH) | -| SigStore Cosign package signing with SBOM | ✓ | ✓ | -| Patch versions retained for bugfixes and security updates | — | ✓ | -| Scanning attestations | — | ✓ | -| SLSA build provenance | — | ✓ | +| Capability | Community | Enterprise | +| :-------------------------------------------------------- | :--------: | :----------------------------------------: | +| ToolHive core platform | ✓ | ✓ | +| Release model | Continuous | Semantically versioned (MAJOR.MINOR.PATCH) | +| SigStore Cosign package signing with SBOM | ✓ | ✓ | +| Patch versions retained for bugfixes and security updates | — | ✓ | +| Scanning attestations | — | ✓ | +| SLSA build provenance | — | ✓ | ### Security and supply chain -| Capability | Community | Enterprise | -| :--- | :---: | :---: | -| Basic scanning (Trivy, unit tests, integration tests) | ✓ | ✓ | -| Static analysis on every release (attested via SigStore) | — | ✓ | -| Autonomous pen testing on every minor release | — | ✓ | -| Hardened container base images (Chainguard or equiv.) | — | ✓ | -| Proactive notification of vulnerabilities | — | ✓ | -| CVEs addressed within SLO with responsible disclosure | — | ✓ | -| All Sev 0–3 vulnerabilities backported as patch updates | — | ✓ | + +| Capability | Community | Enterprise | +| :------------------------------------------------------- | :-------: | :--------: | +| Basic scanning (Trivy, unit tests, integration tests) | ✓ | ✓ | +| Static analysis on every release (attested via SigStore) | — | ✓ | +| Autonomous pen testing on every minor release | — | ✓ | +| Hardened container base images (Chainguard or equiv.) | — | ✓ | +| Proactive notification of vulnerabilities | — | ✓ | +| CVEs addressed within SLO with responsible disclosure | — | ✓ | +| All Sev 0–3 vulnerabilities backported as patch updates | — | ✓ | ### Auth, identity & governance -| Capability | Community | Enterprise | -| :--- | :---: | :---: | -| Basic authentication | ✓ | ✓ | -| Policy-as-code engine (CEDAR) | ✓ | ✓ | -| Audit logging & compliance reporting | ✓ | ✓ | -| Built-in IdP integration (Okta, Entra ID) | — | ✓ | -| IdP group → ToolHive role mapping | — | ✓ | -| Canonical policy packs (read-only, full CRUD, custom) | — | ✓ | -| Token exchange & credential brokering | — | ✓ | +| Capability | Community | Enterprise | +| :---------------------------------------------------- | :-------: | :--------: | +| Basic authentication | ✓ | ✓ | +| Policy-as-code engine (CEDAR) | ✓ | ✓ | +| Audit logging & compliance reporting | ✓ | ✓ | +| Built-in IdP integration (Okta, Entra ID) | — | ✓ | +| IdP group → ToolHive role mapping | — | ✓ | +| Canonical policy packs (read-only, full CRUD, custom) | — | ✓ | +| Token exchange & credential brokering | — | ✓ | ### Enterprise UI & management -| Capability | Community | Enterprise | -| :--- | :---: | :---: | -| ToolHive CLI | ✓ | ✓ | -| Usage telemetry & analytics (OpenTelemetry) | ✓ | ✓ | -| Enterprise MCP registry server and catalog | ✓ | ✓ | -| Enterprise Cloud UI (full CRUD management console) | — | ✓ | -| Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | +| Capability | Community | Enterprise | +| :------------------------------------------------- | :-------: | :--------: | +| ToolHive CLI | ✓ | ✓ | +| Usage telemetry & analytics (OpenTelemetry) | ✓ | ✓ | +| Enterprise MCP registry server and catalog | ✓ | ✓ | +| Enterprise Cloud UI (full CRUD management console) | — | ✓ | +| Hardened Desktop UI (enterprise lockdown controls) | — | ✓ | ### Versioning, maintenance & support -| Capability | Community | Enterprise | -| :--- | :---: | :---: | -| Latest release | ✓ | ✓ | -| Supported versions: LATEST, LATEST-1, LATEST-2 | — | ✓ | -| Community support (GitHub) | ✓ | ✓ | -| Dedicated support with SLA | — | ✓ | -| Proactive security advisories | — | ✓ | -| Onboarding & integration assistance | — | ✓ | + +| Capability | Community | Enterprise | +| :--------------------------------------------- | :-------: | :--------: | +| Latest release | ✓ | ✓ | +| Supported versions: LATEST, LATEST-1, LATEST-2 | — | ✓ | +| Community support (GitHub) | ✓ | ✓ | +| Dedicated support with SLA | — | ✓ | +| Proactive security advisories | — | ✓ | +| Onboarding & integration assistance | — | ✓ | ### Enterprise Connectors (MCP Servers) -| Attribute | Community | Enterprise | -| :--- | :---: | :---: | -| Base image | Open source | Chainguard or equivalent | -| Signing & attestations | — | SigStore signed with SLSA provenance | -| Customized tools (tuned to agent workflows) | — | ✓ | -| Streamable HTTP transport | — | ✓ | -| SBOM & dependency vetting | — | ✓ | -| Qualified for target workload | — | ✓ | -| Maintained on enterprise release cadence | — | ✓ | -| Backported security patches | — | ✓ | +| Attribute | Community | Enterprise | +| :------------------------------------------ | :---------: | :----------------------------------: | +| Base image | Open source | Chainguard or equivalent | +| Signing & attestations | — | SigStore signed with SLSA provenance | +| Customized tools (tuned to agent workflows) | — | ✓ | +| Streamable HTTP transport | — | ✓ | +| SBOM & dependency vetting | — | ✓ | +| Qualified for target workload | — | ✓ | +| Maintained on enterprise release cadence | — | ✓ | +| Backported security patches | — | ✓ | -Seen enough to want a closer look? -[Schedule a demo](#schedule-a-demo) to walk through the capabilities that matter most to your team. +Seen enough to want a closer look? [Schedule a demo](#schedule-a-demo) to walk +through the capabilities that matter most to your team. --- + ## Product offerings -Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and its Enterprise Connectors are licensed as an annual subscription. -Professional services are priced based on time and materials. +Stacklok aims to keep pricing and licensing simple. Stacklok Enterprise and its +Enterprise Connectors are licensed as an annual subscription. Professional +services are priced based on time and materials. -| SKU | Description | Pricing Model | -| :--- | :--- | :---: | -| **Stacklok Enterprise Platform** | Enterprise licensed distribution of ToolHive with Cloud UI, Desktop UI, IdP integration, policy engine, and SLA-backed support | Annual subscription | -| **Enterprise Connectors** | Production-ready connectors, maintained on enterprise release cadence | Annual subscription (per connector) | -| **Professional Services** | Extended integration, policy configuration, additional IdP onboarding, connector development | Time & materials | +| SKU | Description | Pricing Model | +| :------------------------------- | :----------------------------------------------------------------------------------------------------------------------------- | :---------------------------------: | +| **Stacklok Enterprise Platform** | Enterprise licensed distribution of ToolHive with Cloud UI, Desktop UI, IdP integration, policy engine, and SLA-backed support | Annual subscription | +| **Enterprise Connectors** | Production-ready connectors, maintained on enterprise release cadence | Annual subscription (per connector) | +| **Professional Services** | Extended integration, policy configuration, additional IdP onboarding, connector development | Time & materials | -Ready to discuss what the right package looks like for your organization? +Ready to discuss what the right package looks like for your organization? [Schedule a demo](#schedule-a-demo) to talk through your requirements. --- -## Enterprise Platform Components -Stacklok Enterprise Platform secures MCP servers across your organization through its registry, runtime, gateway, and portal. + +## Enterprise Platform Components + +Stacklok Enterprise Platform secures MCP servers across your organization +through its registry, runtime, gateway, and portal. ### Registry: No more fighting shadow AI -| The source of truth for approved MCP servers within the enterprise. | -| :--- | -| Integrate with the official MCP registry | -| Add custom MCP servers and skills | -| Group servers based on role or use case | -| Manage your registry with an API-driven interface | -| Verify provenance and sign servers with built-in security controls | + +| The source of truth for approved MCP servers within the enterprise. | +| :----------------------------------------------------------------------- | +| Integrate with the official MCP registry | +| Add custom MCP servers and skills | +| Group servers based on role or use case | +| Manage your registry with an API-driven interface | +| Verify provenance and sign servers with built-in security controls | | Preset configurations and permissions for a frictionless user experience | ### Runtime: Kubernetes-native deployment | Deploy, run, and manage MCP servers in Kubernetes with security guardrails. | -| :--- | -| Deploy MCP servers in the cloud via Kubernetes | -| Run MCP servers locally via Docker or Podman | -| Proxy remote MCP servers securely for unified management | -| Kubernetes Operator for fleet and resource management | -| Leverage OpenTelemetry for centralized monitoring and audit logging | +| :-------------------------------------------------------------------------- | +| Deploy MCP servers in the cloud via Kubernetes | +| Run MCP servers locally via Docker or Podman | +| Proxy remote MCP servers securely for unified management | +| Kubernetes Operator for fleet and resource management | +| Leverage OpenTelemetry for centralized monitoring and audit logging | ### Gateway: Single endpoint, full control -| Intelligent MCP gateway for authentication, authorization, and policy enforcement. | -| :--- | -| Integrate with your IdP for SSO (OIDC/OAuth compatible) | -| Build composite tools that orchestrate multiple tools in parallel or sequential chains | -| Customize and filter tools and descriptions | -| Reduce context bloat and token usage | +| Intelligent MCP gateway for authentication, authorization, and policy enforcement. | +| :--------------------------------------------------------------------------------------- | +| Integrate with your IdP for SSO (OIDC/OAuth compatible) | +| Build composite tools that orchestrate multiple tools in parallel or sequential chains | +| Customize and filter tools and descriptions | +| Reduce context bloat and token usage | | Connect with local clients like Claude Desktop, Cursor, and Visual Studio Code (VS Code) | ### Portal: Self-service with guardrails | Custom UI for teams to discover, deploy and manage approved MCP servers. | -| :--- | -| Cross-platform desktop app and web-based cloud UI | -| Make it easy for admins to curate MCP servers and tools | -| Automate server discovery | -| Install MCP servers with a single click | -| Compatible with hundreds of AI clients | +| :----------------------------------------------------------------------- | +| Cross-platform desktop app and web-based cloud UI | +| Make it easy for admins to curate MCP servers and tools | +| Automate server discovery | +| Install MCP servers with a single click | +| Compatible with hundreds of AI clients | -Ready to see how the platform works in your environment? -[Start a proof of concept](#validate-stacklok-enterprise-in-your-environment) to take the next step. +Ready to see how the platform works in your environment? +[Start a proof of concept](#validate-stacklok-enterprise-in-your-environment) to +take the next step. --- + ## Validate Stacklok Enterprise in your environment -Stacklok helps you validate Stacklok Enterprise in your environment at your pace with forward-deployed engineering support. + +Stacklok helps you validate Stacklok Enterprise in your environment at your pace +with forward-deployed engineering support. --- + ## Frequently asked questions
      How does Stacklok Enterprise relate to ToolHive Community? -ToolHive Community is an open source distribution optimized for individual developers -and pre-production use, making it the right tool for evaluating MCP and building a -proof of concept. Stacklok Enterprise is a separate, hardened distribution built for -production: semantically versioned, with IdP integration, centralized governance, -and SLA-backed support. Moving from Community to Enterprise is a supported migration -where Stacklok provides the enterprise binaries and dedicated engineering support to -take you from proof of concept to production. -[See the full comparison](#toolhive-community-vs-stacklok-enterprise) -or [learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +ToolHive Community is an open source distribution optimized for individual +developers and pre-production use, making it the right tool for evaluating MCP +and building a proof of concept. Stacklok Enterprise is a separate, hardened +distribution built for production: semantically versioned, with IdP integration, +centralized governance, and SLA-backed support. Moving from Community to +Enterprise is a supported migration where Stacklok provides the enterprise +binaries and dedicated engineering support to take you from proof of concept to +production. +[See the full comparison](#toolhive-community-vs-stacklok-enterprise) or +[learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
      Can I migrate my existing ToolHive Community setup to Enterprise? -Yes. Enterprise uses different binaries from Community, so migration is a manual process, -but every Enterprise license includes dedicated engineering support to make it seamless. -In practice, most customers use Community for evaluation and have not built significant -production configuration before engaging with Stacklok, so the migration is typically -straightforward. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment) +Yes. Enterprise uses different binaries from Community, so migration is a manual +process, but every Enterprise license includes dedicated engineering support to +make it seamless. In practice, most customers use Community for evaluation and +have not built significant production configuration before engaging with +Stacklok, so the migration is typically straightforward. +[Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment) to understand how Stacklok supports the transition.
      @@ -230,35 +265,36 @@ to understand how Stacklok supports the transition.
      What happens to my data if I end my Enterprise contract? -Your data never leaves your environment. Stacklok Enterprise is self-hosted, -so you retain full control of your data and your deployment regardless of -your contract status. If you end your contract, your existing Enterprise -binary continues to run. There is no vendor lock-in. You lose access to -new releases, backported security patches, and dedicated support, but your -deployment remains fully operational. -[Learn more about the product offerings](#product-offerings). +Your data never leaves your environment. Stacklok Enterprise is self-hosted, so +you retain full control of your data and your deployment regardless of your +contract status. If you end your contract, your existing Enterprise binary +continues to run. There is no vendor lock-in. You lose access to new releases, +backported security patches, and dedicated support, but your deployment remains +fully operational. [Learn more about the product offerings](#product-offerings).
      How long does a typical deployment take? -Most deployments reach production within 60 days of contract signing. -Stacklok works directly with your platform team, and every Enterprise -license includes dedicated engineering support throughout the process. -You will need an existing Kubernetes environment to get started. -Timelines are scoped to your environment, so if your situation is more -complex, Stacklok will work at your pace. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +Most deployments reach production within 60 days of contract signing. Stacklok +works directly with your platform team, and every Enterprise license includes +dedicated engineering support throughout the process. You will need an existing +Kubernetes environment to get started. Timelines are scoped to your environment, +so if your situation is more complex, Stacklok will work at your pace. +[Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment). +
      Why should I use an MCP platform instead of running MCP servers directly? -Running MCP servers directly gives you no isolation, no access controls, and no visibility -into what those servers are doing. ToolHive addresses this by running each server in its -own container with least-privilege permissions, encrypting credentials at rest, and tracing -every tool call via OpenTelemetry. Stacklok Enterprise adds centralized governance, IdP-backed -authentication, and audit logging for teams running MCP at scale across their organization. +Running MCP servers directly gives you no isolation, no access controls, and no +visibility into what those servers are doing. ToolHive addresses this by running +each server in its own container with least-privilege permissions, encrypting +credentials at rest, and tracing every tool call via OpenTelemetry. Stacklok +Enterprise adds centralized governance, IdP-backed authentication, and audit +logging for teams running MCP at scale across their organization. [Explore the core concepts](../concepts) to dig deeper into how ToolHive works.
      @@ -266,42 +302,49 @@ authentication, and audit logging for teams running MCP at scale across their or
      What AI clients work with Stacklok Enterprise? -Stacklok Enterprise works with any AI coding assistant or agent that supports MCP. -This includes Claude Code, GitHub Copilot, Cursor, Windsurf, VS Code, Zed, Cline, -Continue, Roo Code, Goose, LM Studio, OpenAI Codex, and many more. Most clients -support automatic configuration so developers can connect without manual setup. -[See the full client compatibility reference](../reference/client-compatibility) for the complete list. +Stacklok Enterprise works with any AI coding assistant or agent that supports +MCP. This includes Claude Code, GitHub Copilot, Cursor, Windsurf, VS Code, Zed, +Cline, Continue, Roo Code, Goose, LM Studio, OpenAI Codex, and many more. Most +clients support automatic configuration so developers can connect without manual +setup. +[See the full client compatibility reference](../reference/client-compatibility) +for the complete list.
      Can I run custom MCP servers outside the Stacklok registry? -Yes. Stacklok Enterprise starts with a base registry of vetted, hardened MCP servers -maintained by Stacklok. From there, you have full control to add your own servers from -public package managers, Docker images, remote URLs, or build a private registry -tailored to your organization. You are never limited to Stacklok's catalog. [See how to -run MCP servers in Kubernetes](../guides-k8s/run-mcp-k8s) for the full details. +Yes. Stacklok Enterprise starts with a base registry of vetted, hardened MCP +servers maintained by Stacklok. From there, you have full control to add your +own servers from public package managers, Docker images, remote URLs, or build a +private registry tailored to your organization. You are never limited to +Stacklok's catalog. +[See how to run MCP servers in Kubernetes](../guides-k8s/run-mcp-k8s) for the +full details.
      What is the difference between Enterprise Connectors and Custom Connectors? -Enterprise Connectors are production-ready MCP servers built, hardened, and maintained by Stacklok -on the enterprise release cadence, signed, attested, and qualified for your target workload so your -security team does not have to validate them independently. Custom Connectors are servers you bring -yourself, which ToolHive can run and govern, but which remain your responsibility to maintain and -secure. Enterprise Connectors are sold per connector on an annual basis. -[See Enterprise Connectors in the product offerings](#product-offerings). +Enterprise Connectors are production-ready MCP servers built, hardened, and +maintained by Stacklok on the enterprise release cadence, signed, attested, and +qualified for your target workload so your security team does not have to +validate them independently. Custom Connectors are servers you bring yourself, +which ToolHive can run and govern, but which remain your responsibility to +maintain and secure. Enterprise Connectors are sold per connector on an annual +basis. [See Enterprise Connectors in the product offerings](#product-offerings).
      Is Stacklok Enterprise available on AWS or Azure Marketplace? -Stacklok Enterprise is not currently available on AWS or Azure Marketplace. Stacklok is actively exploring cloud marketplace availability and welcomes your input on -procurement requirements. [Get in touch](#schedule-a-demo) to share your use case. +Stacklok Enterprise is not currently available on AWS or Azure Marketplace. +Stacklok is actively exploring cloud marketplace availability and welcomes your +input on procurement requirements. [Get in touch](#schedule-a-demo) to share +your use case.
      @@ -316,4 +359,4 @@ moving to production. [Get started with ToolHive Community →](/toolhive) -::: \ No newline at end of file +::: diff --git a/src/components/HubSpotForm/index.tsx b/src/components/HubSpotForm/index.tsx index 5156118c..b51e50d1 100644 --- a/src/components/HubSpotForm/index.tsx +++ b/src/components/HubSpotForm/index.tsx @@ -61,7 +61,7 @@ export default function HubSpotForm({ }, [portalId, formId, region]); const formContent = submitted ? ( -
      +
      {/* This div is intentionally empty to trigger HubSpot form confirmation message */}
      ) : ( @@ -70,7 +70,7 @@ export default function HubSpotForm({ if (title) { return ( -
      +
      - + {title} {subtitle && ( @@ -99,7 +101,13 @@ export default function HubSpotForm({ {subtitle} )} -
      +
      {formContent}
      diff --git a/src/css/custom.css b/src/css/custom.css index 5fb12c5c..e3098738 100644 --- a/src/css/custom.css +++ b/src/css/custom.css @@ -504,7 +504,7 @@ details summary:hover { resize: vertical; } -.hs-form-private input[type="submit"], +.hs-form-private input[type='submit'], .hs-form-private .hs-button { background-color: var(--stacklok-white); color: var(--stacklok-green-leaf); @@ -516,7 +516,7 @@ details summary:hover { margin-top: 0.5rem; } -.hs-form-private input[type="submit"]:hover, +.hs-form-private input[type='submit']:hover, .hs-form-private .hs-button:hover { background-color: var(--stacklok-cookie); } From c2307f3df268f3ff9bdd557a36d23feae2f30353 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Mon, 16 Mar 2026 11:04:49 -0700 Subject: [PATCH 24/26] Address Derek comments --- docs/toolhive/enterprise/index.mdx | 51 +++++++----------------------- 1 file changed, 11 insertions(+), 40 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 0503a55b..a2bd22a4 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -25,8 +25,8 @@ vendor lock-in. ---

      - In production at Fortune 500 financial services, Fortune 500 technology, and - Fortune 2000 software companies. + Running in production at major financial services, technology, and + software companies,
      including Fortune 500 and Global 2000 enterprises

      --- @@ -249,35 +249,22 @@ production.
-
-Can I migrate my existing ToolHive Community setup to Enterprise? - -Yes. Enterprise uses different binaries from Community, so migration is a manual -process, but every Enterprise license includes dedicated engineering support to -make it seamless. In practice, most customers use Community for evaluation and -have not built significant production configuration before engaging with -Stacklok, so the migration is typically straightforward. -[Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment) -to understand how Stacklok supports the transition. - -
-
What happens to my data if I end my Enterprise contract? -Your data never leaves your environment. Stacklok Enterprise is self-hosted, so -you retain full control of your data and your deployment regardless of your -contract status. If you end your contract, your existing Enterprise binary -continues to run. There is no vendor lock-in. You lose access to new releases, -backported security patches, and dedicated support, but your deployment remains -fully operational. [Learn more about the product offerings](#product-offerings). +Your data never leaves your environment. Stacklok Enterprise is fully self-hosted: +you retain complete control over your data and infrastructure, regardless of +contract status. If you end your subscription, you can downgrade to the open-source +version at any time. The only things you lose are access to Enterprise features, +forward-deployed engineers, backported security patches, and dedicated support. +There is zero vendor lock-in. [Learn more about the product offerings](#product-offerings).
How long does a typical deployment take? -Most deployments reach production within 60 days of contract signing. Stacklok +Most customers begin to see value in less than 2 weeks of contract signing. Stacklok works directly with your platform team, and every Enterprise license includes dedicated engineering support throughout the process. You will need an existing Kubernetes environment to get started. Timelines are scoped to your environment, @@ -290,7 +277,7 @@ so if your situation is more complex, Stacklok will work at your pace. Why should I use an MCP platform instead of running MCP servers directly? Running MCP servers directly gives you no isolation, no access controls, and no -visibility into what those servers are doing. ToolHive addresses this by running +visibility into what those servers are doing. Stacklok Enterprise addresses this by running each server in its own container with least-privilege permissions, encrypting credentials at rest, and tracing every tool call via OpenTelemetry. Stacklok Enterprise adds centralized governance, IdP-backed authentication, and audit @@ -325,26 +312,10 @@ full details.
-
-What is the difference between Enterprise Connectors and Custom Connectors? - -Enterprise Connectors are production-ready MCP servers built, hardened, and -maintained by Stacklok on the enterprise release cadence, signed, attested, and -qualified for your target workload so your security team does not have to -validate them independently. Custom Connectors are servers you bring yourself, -which ToolHive can run and govern, but which remain your responsibility to -maintain and secure. Enterprise Connectors are sold per connector on an annual -basis. [See Enterprise Connectors in the product offerings](#product-offerings). - -
-
Is Stacklok Enterprise available on AWS or Azure Marketplace? -Stacklok Enterprise is not currently available on AWS or Azure Marketplace. -Stacklok is actively exploring cloud marketplace availability and welcomes your -input on procurement requirements. [Get in touch](#schedule-a-demo) to share -your use case. +[Get in touch](#schedule-a-demo) to share your use case.
From 2c62c0ffa1b5d59b7c0c47c7b33ef7829d89a36c Mon Sep 17 00:00:00 2001 From: Alejandro Date: Mon, 16 Mar 2026 11:08:16 -0700 Subject: [PATCH 25/26] prettier CI fixes --- docs/toolhive/enterprise/index.mdx | 39 ++++++++++++++++-------------- 1 file changed, 21 insertions(+), 18 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index a2bd22a4..0478c658 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -25,8 +25,9 @@ vendor lock-in. ---

- Running in production at major financial services, technology, and - software companies,
including Fortune 500 and Global 2000 enterprises + Running in production at major financial services, technology, and software + companies,
+ including Fortune 500 and Global 2000 enterprises

--- @@ -252,23 +253,25 @@ production.
What happens to my data if I end my Enterprise contract? -Your data never leaves your environment. Stacklok Enterprise is fully self-hosted: -you retain complete control over your data and infrastructure, regardless of -contract status. If you end your subscription, you can downgrade to the open-source -version at any time. The only things you lose are access to Enterprise features, -forward-deployed engineers, backported security patches, and dedicated support. -There is zero vendor lock-in. [Learn more about the product offerings](#product-offerings). +Your data never leaves your environment. Stacklok Enterprise is fully +self-hosted: you retain complete control over your data and infrastructure, +regardless of contract status. If you end your subscription, you can downgrade +to the open-source version at any time. The only things you lose are access to +Enterprise features, forward-deployed engineers, backported security patches, +and dedicated support. There is zero vendor lock-in. +[Learn more about the product offerings](#product-offerings).
How long does a typical deployment take? -Most customers begin to see value in less than 2 weeks of contract signing. Stacklok -works directly with your platform team, and every Enterprise license includes -dedicated engineering support throughout the process. You will need an existing -Kubernetes environment to get started. Timelines are scoped to your environment, -so if your situation is more complex, Stacklok will work at your pace. +Most customers begin to see value in less than 2 weeks of contract signing. +Stacklok works directly with your platform team, and every Enterprise license +includes dedicated engineering support throughout the process. You will need an +existing Kubernetes environment to get started. Timelines are scoped to your +environment, so if your situation is more complex, Stacklok will work at your +pace. [Learn about the proof of concept engagement](#validate-stacklok-enterprise-in-your-environment).
@@ -277,11 +280,11 @@ so if your situation is more complex, Stacklok will work at your pace. Why should I use an MCP platform instead of running MCP servers directly? Running MCP servers directly gives you no isolation, no access controls, and no -visibility into what those servers are doing. Stacklok Enterprise addresses this by running -each server in its own container with least-privilege permissions, encrypting -credentials at rest, and tracing every tool call via OpenTelemetry. Stacklok -Enterprise adds centralized governance, IdP-backed authentication, and audit -logging for teams running MCP at scale across their organization. +visibility into what those servers are doing. Stacklok Enterprise addresses this +by running each server in its own container with least-privilege permissions, +encrypting credentials at rest, and tracing every tool call via OpenTelemetry. +Stacklok Enterprise adds centralized governance, IdP-backed authentication, and +audit logging for teams running MCP at scale across their organization. [Explore the core concepts](../concepts) to dig deeper into how ToolHive works. From 36d280c6cdc3c0497e0c003875a1c3815a5d4726 Mon Sep 17 00:00:00 2001 From: Alejandro Date: Mon, 16 Mar 2026 13:59:36 -0700 Subject: [PATCH 26/26] Removed AWS Azure Cloud FAQ --- docs/toolhive/enterprise/index.mdx | 7 ------- 1 file changed, 7 deletions(-) diff --git a/docs/toolhive/enterprise/index.mdx b/docs/toolhive/enterprise/index.mdx index 0478c658..003e3546 100644 --- a/docs/toolhive/enterprise/index.mdx +++ b/docs/toolhive/enterprise/index.mdx @@ -315,13 +315,6 @@ full details. -
-Is Stacklok Enterprise available on AWS or Azure Marketplace? - -[Get in touch](#schedule-a-demo) to share your use case. - -
- --- ## Explore ToolHive Community