Pricing and tokens
Which commands consume Workspace tokens, how much, who pays, and how to retry a paid command safely.
Reading is free. Running an Audit or checking one Control consumes the same Workspace tokens as the app. A verified platform administrator is exempt by identity, including when using the Workspace route.
What costs tokens
| Command | Tokens | When |
|---|---|---|
audit run BUILD_SLUG --confirm | 0 | the Workspace's first First Look run, once |
audit run BUILD_SLUG --confirm | 900 | every later full First Look run |
audit run BUILD_SLUG --area AREA_ID --confirm | 100 to 400 | a later First Look run limited to one area |
audit run BUILD_SLUG security --confirm | 300 | every run |
audit run BUILD_SLUG costs --confirm | 150 | every run |
audit run BUILD_SLUG shipping --confirm | 600 | every run |
audit run BUILD_SLUG rights-licenses --confirm | 300 | every run |
audit reevaluate BUILD_SLUG CONTROL_ID --confirm | 20 or 100 | one First Look Control, after a fix |
control run BUILD_SLUG CONTROL_ID --confirm | 20, 100, or 150 | one Control of any available Audit |
A First Look area run costs 400 tokens for security, 200 for operations or legal-compliance, and 100 for code-quality. A single Control costs 20 tokens when a deterministic check settles it, 100 when an agent inspects the live app, and 150 when an agent reads the repository.
Everything else is free: Build info, Findings, Dossier, telemetry, personal token management, and repository operations. Repository pushes cost no tokens and still change the Builder's repository, so they need their own authorization.
How the charge works
- The server checks the Workspace balance before starting. If it cannot cover the run, the command stops with exit code
7and nothing is charged. - An Audit run is debited when it starts successfully. The CLI cannot request an exemption; the server derives it from the authenticated identity.
- Only First Look has a free run: the first First Look of the Workspace, full or limited to one area. No other Audit, Build, or repository gets a free run.
- A single-Control check is debited only when it settles on
passorfail. A check that errors, or that the Builder's answer settles, costs nothing. - The Audit detail exposes
runCostTokens; the server recomputes the amount from the registered manifest and requested area. build infoshows the balance asToken balance.
Retrying a paid command
Every paid command carries a request ID. The CLI prints it on standard error and includes it in the JSON result. If the response is lost, repeat the exact command with the same ID. The server returns the run it already started and never debits twice.
bworlds audit run BUILD_SLUG AUDIT_SLUG \
--confirm \
--request-id 74862134-91e4-41e1-a682-496efae67e18 \
--json