Mycel AI Review: Pricing, Sandbox Security, and Verdict
Key Takeaways
Mycel costs $299 a month and, by default, cannot send a client anything without your sign-off. That restriction is the product.
The agent runs in a sandbox that holds no client credentials. Starter covers 2 businesses and 3 people. Growth costs $899. Self-hosting is free, and the trial charges nothing until day eight.
The catch: the open-source kernel is pre-alpha, there is no SOC 2 report or formal pen test yet, and a single founder builds the whole product.
Best fit: operators who already review every deliverable. Worst fit: anyone handling regulated data.
What Is Mycel AI?
Mycel is an operations layer for service firms. You describe what you sell, upload one past deliverable, and hand it this week's work. It drafts. You approve. You send.
Founder Islam Hachimi launched it on Product Hunt, where it held first place on the daily list when checked. Hosted desks cover invoice chasing, bookkeeping close, recruiting, contracts, outbound, and AI search monitoring. Clients sign in to a portal under your brand.
The kernel underneath is open source under Apache-2.0. The client portal, sign-up, billing, and hosting are the paid layer.
How Mycel's Credential-Free Sandbox Works
Mycel's credential-free sandbox keeps every client secret outside the box where the AI agent runs. The agent holds no Stripe key, no mailbox token, and no database URL. It holds an opaque per-task nonce, a stand-in for the credential rather than the credential itself.
The flow has four stages. The agent drafts inside the sandbox. The harness, Mycel's control layer, shows you a preview. You approve, edit, or reject. Only then does the harness use the real secret to execute the send and write an audit row.
Reads skip the gate but stay scoped: GET only, fixed host, size-capped, budgeted, and traced.
Auto-approval exists, but you define the envelope. One action type, under a set amount, a set number of times a day. Anything outside it stops.
A prompt injection can trick the agent into asking for a send. It cannot steal a credential the agent never held. The audit log is hash-chained, so a verify call names the first broken link if anyone tampers with it.
Is Mycel Safe for Client Work?
Safe enough for routine deliverables. Not yet for regulated data.
The security page lists what is enforced today: AES-256-GCM encryption for stored credentials, tenant isolation that fails closed, and per-client credential isolation.
It also lists what is missing. No SOC 2. No formal pen test. No field-level redaction or data residency, so special-category data is out of scope.
The self-hosting docs add one caveat. By default, the model provider key does enter the sandbox. Setting MYCEL_PROXY_MODE=1 routes model calls back through the harness.
Mycel Pricing vs Traditional Agency Overhead
How Much Does Mycel Cost?
Mycel Starter costs $299 a month. Growth costs $899. Scale is a custom quote. Every hosted plan starts with seven free days, and the card is not charged until day eight. A launch offer halves the first three months, and the pricing page lists 27 September as the last day.
Starter includes 2 businesses, 3 people, and 2,000 jobs a month. A job is one piece of work, such as a message answered or a document produced. Growth raises that to 10 businesses, 10 people, and 10,000 jobs. The AI bills are Mycel's, with no overage charge. When a month's volume runs out, work waits for the next one.
| Option |
Monthly cost |
What you get or give up |
| Mycel self-hosted |
$0 software |
You supply the server and model key |
| Mycel Starter |
$299 |
2 businesses, 3 people, 2,000 jobs |
| Mycel Growth |
$899 |
10 businesses, 10 people, 10,000 jobs |
| Mycel Scale |
Custom quote |
No limits, private cloud, security review |
| Basic chat subscription |
$20 to $30 |
Fast drafts, no approval trail, context rebuilt by you |
| Offshore contractor |
About $1,200 |
You still review every deliverable |
| Account manager |
About $3,750 |
Salary alone, plus six weeks of ramp |
Mycel's own pages supply the chat, contractor, and hire figures, so treat them as vendor estimates. Against a basic chat tool, its pitch is memory and accountability, not smarter drafts. Your corrections persist, and every version carries a dated sign-off.
It does not replace you. It moves you from writer to approver.
Is Mycel Free to Self-Host?
Yes. The kernel is Apache-2.0 with no metering, no seat limit, and no expiry. You supply the server and the model key. On macOS or Linux, one curl command sets it up. Read the script before you pipe it to bash.
Budget for the gaps. Without a database URL, everything sits in memory and vanishes on restart. The docs say the local sandbox mode is not isolation, and a restart fails any task caught mid-run.
What Mycel Does to Your Monthly Margin
The fee is fixed. Revenue is not.
The model below is illustrative. One operator adds one client each month at a $750 retainer. The pricing page does not define whether a business means your own venture or a client account, so I priced the stricter reading. That moves you from Starter to Growth at client three.
| Month |
Clients |
Revenue |
Mycel fee |
Net after fee |
| 1 |
1 |
$750 |
$299 (Starter) |
$451 |
| 2 |
2 |
$1,500 |
$299 (Starter) |
$1,201 |
| 3 |
3 |
$2,250 |
$899 (Growth) |
$1,351 |
| 4 |
4 |
$3,000 |
$899 (Growth) |
$2,101 |
| 5 |
5 |
$3,750 |
$899 (Growth) |
$2,851 |
| 6 |
6 |
$4,500 |
$899 (Growth) |
$3,601 |
Six months produce $15,750 in revenue against $4,194 in Mycel fees. Month three is the stress point. The jump to Growth pushes the fee back to 40% of revenue before it settles near 20% by month six. Price your third retainer with that $899 in mind.
Your review hours are the real cost, and this table leaves them out.
How Mycel Fits an Agency Approval Workflow
Every agency owner knows the ceiling. Reports, updates, and decks cross one desk, and that caps how many clients you can carry. Mycel attacks the drafting step. It leaves approval with you.
Your approval queue becomes your inbox. Throughput depends on how fast you review, not how fast you write. Security shifts too. Your clients' credentials live with Mycel's harness, not in an agent prompt. You trade one exposure for a vendor you must trust.
Run the trial like an audit. Upload one past deliverable. Track minutes to first draft, the share of the draft you rewrite, and approvals cleared per day. One testimonial on the site says a customer changed about a fifth of a client report. Test whether yours matches. Set a reminder for day six. The card is charged on day eight.
Who Should Avoid Mycel
Skip Mycel if you handle regulated or special-category data. The security page says redaction and residency do not exist yet. Skip it if procurement demands SOC 2 or a completed pen test. Neither exists today.
Skip the self-hosted kernel for production work. The repository calls itself pre-alpha, and its APIs still move. At last check it showed nine commits and eleven stars.
Skip it if your work is judgment, not procedure. Mycel's own comparison page concedes that a good account manager reads a client's mood better than software does. And weigh single-founder risk. One person builds the product and fields its security reports.
Is Mycel Worth $299 a Month?
Yes, if one retainer covers the fee and you already burn hours drafting the same deliverables each month. You keep every approval.
No, if your clients require audited controls today, or if your work changes shape every month. Test one deliverable before you commit.
My verdict: a sharp idea with candid documentation and an early-stage risk profile. Start on the free trial, measure your edit rate, and decide from your own numbers.
Recommended Article For You:
Bolt Forge Review: Up to 50X Usage, Paid in Your Code
Click Here to Read
Disclaimer: This article is for informational and educational purposes only and does not constitute financial, legal, tax, or investment advice. Pricing, features, and availability come from public sources at the time of writing and may change without notice. Earnings figures are illustrative models, not forecasts or guarantees of results. Mention of any product is not an endorsement. Verify current terms with the vendor and consult a qualified professional before making business or financial decisions.
Comments
Post a Comment