{"license":"CC BY 4.0","attribution":"AI Dispatch — https://aidispatch.news","methodology":"https://aidispatch.news/methodology","generated_at":"2026-10-14T13:49:28.572Z","entity":{"name":"Melaya","slug":"melaya","type":"agent","subtype":"ai agents platform","developer":null,"homepage_url":"https://melaya.org","summary":"AI agent platform spanning business-tool integration, browser control and Android device control, built around human-approval gates - OAuth-scoped permissions, platform-enforced pauses on posting, sending or paying, and full run-level audit logging. Supports multiple model providers (Claude, GPT-4o, Gemini, Ollama, LM Studio) with explicit model-swapping and an MCP server for external AI assistants. Independently security-audited (TAC Security), aligned to OWASP ASVS. Tiered subscription pricing from $0 to $490+/mo. No public claims of insurance, liability cover, outcome-based pricing, or regulatory alignment.","description":"AI agent platform spanning business-tool integration, browser control and Android device control, built around human-approval gates - OAuth-scoped permissions, platform-enforced pauses on posting, sending or paying, and full run-level audit logging. Supports multiple model providers (Claude, GPT-4o, Gemini, Ollama, LM Studio) with explicit model-swapping and an MCP server for external AI assistants. Independently security-audited (TAC Security), aligned to OWASP ASVS. Tiered subscription pricing from $0 to $490+/mo. No public claims of insurance, liability cover, outcome-based pricing, or regulatory alignment.","description_source":"summary","url":"https://aidispatch.news/agents/melaya/","published_at":"2026-10-14T08:48:22.004324+00:00","updated_at":"2026-10-14T08:48:22.004324+00:00"},"fields":[{"key":"pricing_model","label":"Pricing model","category":"practicality","status":"present","value":"Tiered subscription plans distinguished by usage limits","not_yet_interpreted":false,"quote":"Scale from first pipeline to institutional operator. One platform. Same 8,455+ tools, same 111+ subagents, same visual builder, same HITL guards. Pick the limits that match your team.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"action_space","label":"Action space","category":"agency","status":"present","value":"Reads business tools (CRM, inbox, documents) and can send/write/post, gated by human approval","not_yet_interpreted":false,"quote":"It reads your CRM, your inbox and your documents with shared context, and whenever it needs to send, write or post, it stops and asks for your approval first.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"autonomy_level","label":"Autonomy level","category":"agency","status":"present","value":"Configurable modes (Safe / Payments only / Autonomy) with editable approval gates","not_yet_interpreted":false,"quote":"Choose Safe, Payments only, or Autonomy mode, with editable approval gates for consequential actions.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"environment","label":"Operating environment","category":"agency","status":"present","value":"Business tools, browser, and Android phone","not_yet_interpreted":false,"quote":"Melaya is a platform for building and running AI agents across your business tools, browser, and Android phone.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"goal_complexity","label":"Goal complexity","category":"agency","status":"present","value":"Multi-step workflows","not_yet_interpreted":false,"quote":"automate multi-step work with human approval on every consequential action","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"human_oversight","label":"Human oversight","category":"agency","status":"present","value":"Human approval required before consequential actions; every run replayable step by step","not_yet_interpreted":false,"quote":"Before anything consequential happens, a person approves it, and every run can be replayed step by step.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"initiative","label":"Initiative","category":"agency","status":"present","value":"Can self-initiate via cron/webhook triggers, not only on direct prompt","not_yet_interpreted":false,"quote":"TRIGGERS Cron · webhooks · API · SSO","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"audit_trail","label":"Audit trail","category":"assurance","status":"present","value":"Every pipeline run, tool call, and model invocation is recorded","not_yet_interpreted":false,"quote":"Every pipeline run, every tool call, every model invocation is recorded. When something breaks, you see exactly where and why.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"compliance_certs","label":"Compliance certifications","category":"assurance","status":"present","value":"Independent security audit by TAC Security (ESOF AppSec, App Defense Alliance CASA), aligned to OWASP ASVS","not_yet_interpreted":false,"quote":"Independently security-audited by TAC Security — ESOF AppSec, App Defense Alliance CASA, aligned to the OWASP Application Security Verification Standard (ASVS).","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"permission_scopes","label":"Permission scopes","category":"assurance","status":"present","value":"Granular OAuth scopes granted individually; tool list filtered to approved scopes","not_yet_interpreted":false,"quote":"8 OAuth scopes you grant one at a time. The tool list is filtered to what you approved.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"runtime_governance","label":"Runtime governance","category":"assurance","status":"present","value":"Platform-enforced approval pause on posting/sending/paying actions, not prompt-based","not_yet_interpreted":false,"quote":"Every action that posts, sends, or pays can pause for your approval, enforced by the platform rather than requested in a prompt.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"sla_terms","label":"SLA terms","category":"assurance","status":"present","value":"SLA offered on the top (Citadel) enterprise tier; no published terms in this capture","not_yet_interpreted":false,"quote":"Citadel adds private deployment, dedicated solutions engineer for tools or role creation, venues integration, dedicated workflows, and SLA.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"api_access","label":"API access","category":"ecosystem","status":"present","value":"MCP server exposes Melaya to external AI assistants","not_yet_interpreted":false,"quote":"any AI assistant through one MCP server","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"multi_agent","label":"Multi-agent","category":"ecosystem","status":"present","value":"Visual builder for multi-agent crews with shared tools and memory","not_yet_interpreted":false,"quote":"Melaya Agents is a visual builder for teams of AI agents. Give each agent a model, scoped tools and shared memory, then put the whole crew on a schedule.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"protocols_supported","label":"Protocols supported","category":"ecosystem","status":"present","value":"Supports MCP","not_yet_interpreted":false,"quote":"any AI assistant through one MCP server","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"tool_use","label":"Tool use","category":"ecosystem","status":"present","value":"8,455+ tools across web, code, data, ops domains","not_yet_interpreted":false,"quote":"TOOLS 8455+ across web, code, data, ops","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"deployment_options","label":"Deployment options","category":"practicality","status":"present","value":"Private deployment available on the Citadel enterprise tier (SaaS is the default)","not_yet_interpreted":false,"quote":"Citadel adds private deployment, dedicated solutions engineer for tools or role creation, venues integration, dedicated workflows, and SLA.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"integrations","label":"Integrations","category":"practicality","status":"present","value":"300+ connected apps including Odoo, Stripe, Google, Zoho, Slack","not_yet_interpreted":false,"quote":"Work across 300+ connected apps, from Odoo, Stripe, Google, Zoho and Slack to your own tools, without exposing raw credentials to the model.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"price_point","label":"Price point","category":"practicality","status":"present","value":"Tiers: Sandbox $0/mo, Outpost $20/mo, Forge $49/mo ($469/yr), Bastion $129/mo ($1,239/yr), Citadel from $490/mo","not_yet_interpreted":false,"quote":"Sandbox $0 /mo Get started // Launch Outpost $20 /mo Get started Popular // Build Forge $49 /mo $469/yr · save 20% Get started // Operate Bastion $129 /mo $1,239/yr · save 20% Get started // Orchestrate Citadel From $490 /mo","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"data_handling","label":"Data handling","category":"safety","status":"present","value":"Per-workflow RAG data stores, stated as under customer control","not_yet_interpreted":false,"quote":"RAG Per workflow stores · your data, your control","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"safety_policy","label":"Safety policy","category":"safety","status":"present","value":"Publishes a six-principle operating manifesto agents must not violate","not_yet_interpreted":false,"quote":"Six lines we don't cross","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"third_party_evals","label":"Third-party evaluations","category":"safety","status":"present","value":"Independent security audit by TAC Security, aligned to OWASP ASVS","not_yet_interpreted":false,"quote":"Independently security-audited by TAC Security — ESOF AppSec, App Defense Alliance CASA, aligned to the OWASP Application Security Verification Standard (ASVS).","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"base_models","label":"Base models","category":"models","status":"present","value":"Ollama, LM Studio, Claude, GPT-4o, Gemini","not_yet_interpreted":false,"quote":"MODELS Ollama · LM Studio · Claude · GPT 4o · Gemini","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"availability","label":"Availability","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"model_provider","label":"Model provider","category":"models","status":"present","value":"28 cloud and local providers; bring-your-own model, no lock-in","not_yet_interpreted":false,"quote":"Bring your own AI. Melaya works with 28 cloud and local providers, including Claude, GPT, and Gemini, or local models through Ollama and LM Studio, so you avoid provider lock-in and can run open-weight models.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"model_swappable","label":"Model swappable","category":"models","status":"present","value":"Explicit model-swapping; agents are model-agnostic by design","not_yet_interpreted":false,"quote":"Swap the brains, keep the tools.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"open_weights","label":"Open weights","category":"models","status":"present","value":"Supports running open-weight models yourself","not_yet_interpreted":false,"quote":"from any lab or as open weights you run yourself, point your agents at it without rebuilding a thing.","source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"asset_custody","label":"Asset custody","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"audit_trail_immutable","label":"Tamper-evident log","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"coverage_limits","label":"Coverage limits","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"dispute_process","label":"Dispute process","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"eval_coverage","label":"Evaluation coverage","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"explainability","label":"Explainability","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"indemnification","label":"Indemnification","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"insurance_available","label":"Insurance available","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"insurance_carriers","label":"Insurance carriers","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"liability_cap","label":"Liability cap","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"outcome_based_pricing","label":"Outcome-based pricing","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"own_liability_cover","label":"Own liability cover","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"regulatory_alignment","label":"Regulatory alignment","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"self_reported_performance","label":"Self-reported performance","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"settlement_mechanism","label":"Settlement mechanism","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"marketplace_presence","label":"Marketplace presence","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"open_source","label":"Open source","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"deployment_scale","label":"Deployment scale","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"documented_incidents","label":"Documented incidents","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"high_risk_domains","label":"High-risk domains","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"market_recognition","label":"Market recognition","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"target_sectors","label":"Target sectors","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"user_base","label":"User base","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"context_window","label":"Context window","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"fine_tuning","label":"Fine-tuning","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"support_model","label":"Support model","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"supported_regions","label":"Supported regions","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"incident_reporting","label":"Incident reporting","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"model_card","label":"Model or system card","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"red_teaming","label":"Red teaming","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"safety_evaluations","label":"Safety evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null},{"key":"usage_restrictions","label":"Usage restrictions","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://melaya.org","retrieved_at":"2026-10-06T16:24:28.295163+00:00","review":null,"superseded_quote":null}],"trust_gap_scores":[{"dimension":"runtime_governance","score":2,"rationale":"Scope and authority enforced at run time: OAuth scopes granted one at a time, tool list filtered to approved scopes, approval pause enforced by the platform rather than prompted. No spend limit published, so not a 3.","rubric_version":"v1","scored_by":"fact-checker-2026-10-14","judged":true,"scored_at":"2026-10-14T08:47:02.380267+00:00","superseded_scores":[{"score":2,"rationale":"Scored from 2 evidenced field(s): runtime_governance, permission_scopes. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-10-14T08:00:00.208376+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"audit_trail","score":2,"rationale":"Every pipeline run, tool call and model invocation is recorded and each run is replayable step by step, so the record is customer-reviewable. No tamper-evidence or hash-chaining is claimed, so not a 3.","rubric_version":"v1","scored_by":"fact-checker-2026-10-14","judged":true,"scored_at":"2026-10-14T08:47:06.885032+00:00","superseded_scores":[{"score":1,"rationale":"Scored from 1 evidenced field(s): audit_trail. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-10-14T08:00:00.208376+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"compliance","score":1,"rationale":"Publishes an independent security audit (TAC Security ESOF AppSec, App Defense Alliance CASA) aligned to OWASP ASVS. No SOC 2 or ISO certification and no per-engagement schedules, so above nothing-published but well short of certified.","rubric_version":"v1","scored_by":"fact-checker-2026-10-14","judged":true,"scored_at":"2026-10-14T08:47:10.525192+00:00","superseded_scores":[{"score":1,"rationale":"Scored from 1 evidenced field(s): compliance_certs. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-10-14T08:00:00.208376+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"outcome_settlement","score":0,"rationale":"Billed as flat monthly subscription tiers regardless of result. outcome_based_pricing and settlement_mechanism are both no_public_information on the page checked.","rubric_version":"v1","scored_by":"fact-checker-2026-10-14","judged":true,"scored_at":"2026-10-14T08:47:13.839126+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"insurance_indemnity","score":0,"rationale":"No public evidence found. insurance_available and own_liability_cover are both no_public_information on the page checked; no carrier, limit or customer indemnity is named.","rubric_version":"v1","scored_by":"fact-checker-2026-10-14","judged":true,"scored_at":"2026-10-14T08:47:17.195516+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null}]}