specification: API Commons Plans
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/Plans
provider: McAfee (Trellix)
providerId: mcafee
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Antivirus
  - Cybersecurity
  - Endpoint Protection
  - Security
  - Threat Intelligence
description: The McAfee enterprise security business was rebranded as Trellix following the 2022 merger
  with FireEye, while McAfee Corp focuses on consumer security. Neither side publishes per-API or per-call
  pricing. Enterprise APIs (ePO, MVISION / Trellix XDR, Threat Intelligence Exchange, Data Exchange Layer,
  Web Gateway, ESM) ship inside the underlying product license — they are not metered separately. Consumer
  McAfee subscriptions (Total Protection, Internet Security) are seat-based product licenses, not API
  products.
notes: |
  No public per-API price list exists. APIs are bundled into the relevant Trellix / McAfee product license,
  most of which are sold per-seat or per-node under enterprise contracts. Set reconciled=true only if a
  metered API SKU is published.
sources:
  - https://www.trellix.com/
  - https://www.mcafee.com/
plans:
  - id: mcafee-product-license
    name: Bundled with Product License
    type: enterprise
    description: API access is bundled with the underlying product license (Trellix Endpoint Security
      / ePO, Trellix XDR / MVISION, Network Security, ESM SIEM, Web Gateway). There is no separate API
      SKU; pricing is per-seat or per-node under enterprise agreements brokered through sales / channel
      partners.
    entries:
      - label: Endpoint License
        description: Per-endpoint license for Trellix Endpoint Security / McAfee ENS managed via ePO.
        name: endpoint_license
        type: subscription
        metric: seat
        limit: -1
        timeFrame: year
        geo: global
        domains:
          - https://your-epo-server:8443/remote
          - https://api.mvision.mcafee.com
        unit: 1
        price: 'contact sales'
        userMultiplied: true
      - label: SIEM Capacity License
        description: ESM SIEM license priced per events-per-second (EPS) and stored capacity.
        name: siem_capacity
        type: subscription
        metric: eps
        limit: -1
        timeFrame: year
        geo: global
        domains:
          - https://your-esm-server/rs/esm
        unit: 1
        price: 'contact sales'
        userMultiplied: false
      - label: Web Gateway / Network License
        description: Per-user / per-throughput license for Web Gateway and network security appliances.
        name: web_gateway_license
        type: subscription
        metric: seat
        limit: -1
        timeFrame: year
        geo: global
        domains:
          - https://your-mwg-server/Konfigurator/REST
        unit: 1
        price: 'contact sales'
        userMultiplied: true
    elements:
      - name: McAfee ePO API
      - name: McAfee MVISION API
      - name: McAfee Threat Intelligence Exchange (TIE) API
      - name: McAfee Data Exchange Layer (DXL) API
      - name: McAfee Web Gateway API
      - name: McAfee ESM API
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
x-canonical:
  generated: '2026-10-08'
  vocabulary: all/0-working/economics/plans-canonical.yml
  models:
  - seat
  units:
  - seat
  plans:
  - name: Bundled with Product License
    access: enterprise
    model: seat
    model_how: derived
    units:
    - other
    - seat
    periods:
    - year