Managed services that work as one cloud.
Workflows, observability, OCR, inference, secrets and single sign-on, in one organization with the same IAM policies, the same audit log and one monthly bill. Use the console, the ezgh CLI, the API or your agents.
$ curl -fsSL https://get.ezghcloud.com | shProducts
Everything you run, in one organization.
Each product is its own API, and none of them stands alone: they share your organization, its projects and people, its policies and its bill.
AI and machine learning
Models, documents and agents.Inference
Hosted models behind an OpenAI-compatible API
EZGH Inference serves models behind an OpenAI-compatible API. The stock OpenAI SDKs work with only the base URL and API key changed.
OCR
Text from documents and images
OCR reads the text in PDFs and images, with tables and the position of every block. Save a processor per use, then send it documents from the API, the CLI or the console.
MCP Central
Governed access to MCP servers for AI agents
MCP Central gives your organization one endpoint for every MCP server it uses, signed in through EZGH SSO. Admins approve servers and tools; each person picks the ones their clients see.
Build and run
Durable code, images and telemetry.Workflows
Durable workflows written as code
EZGH Workflows runs durable workflows written as code in your own application. Steps retry, sleeps last minutes or months, and runs survive restarts and deploys.
Observability
Logs, traces and metrics with OpenTelemetry
Observability keeps the logs, traces and metrics your services send with OpenTelemetry. Search logs and traces, query metrics with PromQL, see every service and its dependencies, and chart all three on dashboards.
Container Registry
Private and public container images
Container Registry stores OCI images in your projects. Push with Docker or any OCI client, using an EZGH API key as the login.
Security and identity
Credentials, people and permissions.Secrets
Versioned credentials and configuration
EZGH Secrets stores sensitive values, such as database passwords, API keys, certificates and the contents of a .env file, as named fields in immutable versions.
EZGH SSO
A directory and sign-in for your people
EZGH SSO gives your organization a directory of its people and an identity provider for your own apps and EZGH apps. People sign in once at your portal and reach everything you assign them.
IAM
Users, groups, bots, policies and API keys
IAM decides what each person and program in your organization can do, with policy documents attached to users, groups and bots. There are no roles to untangle.
Management
Audit, limits and spend.Trails
Who did what, and when
Trails is your organization’s audit log. Every change across EZGH Cloud is recorded as an event with who made it, from where and what it touched. Look events up, or query them with SQL.
Billing
Invoices, costs and payment methods
Billing is per organization: every product meters what you use into one monthly invoice in US dollars, with a cost explorer to see where it went.
Service quotas
Limits and how much you’re using
Service quotas limit how much of each service your organization and its projects can have or use, and show how much you’re using.
The platform
Governed the same way, everywhere.
Identity, permissions, audit and billing aren’t features of one product. They’re the platform every product is built on, so a new product is governed on day one.
Resource name
The same shape for a processor, a secret, a dataset or a bot.
- Organization
- Acme
- Projects
- prod, staging, web
- Members
- People, groups and bots
- Region
- us-west-1
{ "statements": [ { "effect": "allow", "actions": ["ocr.processors.*", "ocr.documents.process"], "resources": ["ezgh:*:org_k3f9a0x2m7qp:prj_g7h8i9j0k1l2:*"] }, { "effect": "deny", "actions": ["projects.delete"], "resources": ["*"] } ]}{ "eventTime": "2026-09-28T09:58:02.114Z", "eventSource": "ocr.ezghcloud.com", "eventName": "CreateProcessor", "userIdentity": { "type": "Bot", "userName": "deployer", "sessionContext": { "credential": "apiKey" } }, "sourceIpAddress": "203.0.113.9", "resources": [{ "type": "Processor", "resourceName": "ezgh:us-west-1:org_k3f9…:prc_4k2m…" }], "errorCode": null}September 2026
Acme · monthly invoice
| Product | Usage | Amount |
|---|---|---|
| OCR | 12,480 pages | $15.60 |
| Secrets | 200 field-months | $2.00 |
| Secrets | 3,000,000 reads | $0.30 |
| Secrets | 10,000 writes | $0.00 |
| EZGH SSO | 84 users | $0.00 |
| Total | $17.90 | |
Developers
Use it from wherever you work.
The console, the CLI, the API and CI all go through the same public APIs, with the same permissions and the same audit trail.
The ezgh CLI
One binary for macOS, Linux and Windows, covering every product.
$ curl -fsSL https://get.ezghcloud.com | sh$ ezgh login$ ezgh iam api-keys create my-first-key --expires-in-days 30The API
Plain HTTPS and JSON, with an OpenAPI reference for every product.
$ curl https://orgs.ezghcloud.com/v1/organizations \ -H "Authorization: Bearer $EZGH_API_KEY"{ "organizations": [{ "name": "Acme", … }] }GitHub Actions
Act as a bot from CI with a short-lived key and no stored secret.
permissions: id-token: writesteps: - uses: ezgamehost/setup-ezgh@v1 with: { org: org_k3f9…, bot: bot_8k2l… } - run: ezgh projects listYour agents
Agents call the same APIs with their own bot, policies and Trails events. MCP Central is in preview.
# What did the agent do this week?$ ezgh trails query run \ "SELECT event_time, event_name FROM trails WHERE principal_id = '…' AND NOT read_only" --from 7dPricing
Pay for what you use, nothing to sign.
Published per-unit prices, one monthly invoice per organization, and IAM, Trails and quotas at no charge.
Questions
Frequently asked questions.
Short answers. The documentation has the details.
What is EZGH Cloud?
EZGH Cloud is a cloud platform of managed services, including Workflows, Observability, OCR, Inference, Secrets and EZGH SSO, that share one organization, one IAM policy model, one Trails audit log and one monthly bill. You use it from the console, the ezgh CLI, the HTTPS API or GitHub Actions.
Where does EZGH Cloud run?
Every EZGH Cloud product runs in one region, us-west-1. Regional resources carry it in their names: an OCR processor’s name starts with ezgh:us-west-1.
How is EZGH Cloud billed?
Billing is per organization: one monthly invoice in US dollars, paid by card. Each product meters its own units at published prices, such as $1.25 per 1,000 OCR pages or $0.01 per Secrets field-month. Sign-up saves a card without charging it.
Is there a free tier?
EZGH SSO is free, and Workflows and Inference meters are priced at $0 at launch. IAM, Trails and Service quotas have no charge. Secrets has no free tier.
How do I use EZGH Cloud from CI without storing an API key?
Use the ezgamehost/setup-ezgh GitHub Action. It exchanges the job’s GitHub OIDC token for a short-lived API key that acts as one of your organization’s bots, valid for one hour by default, so no key is stored in GitHub.
Can I see who did what in my organization?
Yes. Trails records every API call in your organization, from people, bots and CI, including refused calls, in one event format. Events are kept for 30 days and can be queried with SQL from the console, the CLI or the API.
Does EZGH Cloud work with OpenTelemetry?
Yes. Observability accepts logs, traces and metrics over OTLP/gRPC or OTLP/HTTP from any OpenTelemetry SDK, language agent or Collector, and metrics by Prometheus remote write, with no EZGH-specific code.
Is the Inference API compatible with OpenAI?
Yes. EZGH Inference serves models behind an OpenAI-compatible API, so the OpenAI SDKs for Python and TypeScript work with only the base URL and API key changed. Inference is in preview while model capacity comes online.
Start building in a few minutes.
One account gets you every product, the console, the CLI and the API.
- 1Create an accountSign up, then name your organization and its first project.
- 2Add a cardIt’s saved, not charged. You pay only for what you use, monthly.
- 3Make your first callCreate an API key in the console or with ezgh, and call any product.