Skip to content
AgentsIndex

Coveo

Unifies search, recommendations and generative answers across many enterprise systems behind one permission-aware index.

Coveo is a hosted enterprise search and retrieval platform that unifies content from business systems into one permission-aware index. It serves search, recommendations, generative answers and an MCP server that AI agents query for grounded enterprise content.

Best for
Large commerce, support and workplace teams unifying search across many enterprise systems
Look elsewhere if
  • you want to use it for real without paying
  • you want any plan without talking to sales
  • you need to cancel any time without a fee
  • your data must stay out of model training without asking

What we checked

Pages last read
Facts checked
22 factsFrom 18 sources

One index behind search, recommendations and agent retrieval

Coveo indexes content from business systems into a single hosted index and then serves it four ways: search interfaces, recommendations, generative answers, and tool calls from AI agents. The indexing side is connector work. Coveo counts more than 30 native and universal connectors covering Salesforce, SAP, ServiceNow, Shopify, Sitecore, Adobe, Zendesk, SharePoint, Slack, Jira, Confluence and Dropbox, plus Push, REST, GraphQL, database and sitemap connectors for anything without a native one.

Permissions travel with the content. Coveo mirrors source permissions at the document level, so an authenticated user sees only what they are entitled to see in the originating system, and the same filter applies when an agent queries through the MCP server. Index data is stored as a binary representation of your content, compressed and encrypted at rest, which matters at exit time: the index is not a copy you take with you, and Coveo's position is that your original content stays accessible from its original sources.

The MCP server is a configured object, not a toggle

The Coveo MCP Server is hosted by Coveo and created per organization in the Administration Console. Each configuration names a query pipeline, which decides the available tools: Search and Fetch are available for any pipeline, Answer and Passage Retrieval only where the matching models exist. Authentication is either OAuth, recommended for private sources needing per-user authentication, or an anonymous API key.

Coveo publishes a client reference table of MCP clients it has tested, with the authentication methods each supports: Agentforce, Amazon Bedrock AgentCore, Amazon Quick Suite, ChatGPT Enterprise, Claude.ai, Claude Desktop, Cursor, Microsoft Copilot Studio, Microsoft 365 Copilot and more. The granularity is useful and also a limit worth reading: Claude Desktop and Cursor are listed as API key only, while ChatGPT Enterprise and Claude.ai support OAuth through a workspace admin creating a custom app or connector. Coveo's own caveat is that the client list and supported methods change, since the clients are third-party software.

Pricing is entitlement-based and never printed

The pricing page enumerates features across eight groups and four add-on groups, and prints no number for any of them. Packaging splits in two: entitlement-based pricing for Service and Website, seat-based plans for Workplace, and modular pricing with a base package for Commerce. The metering unit is stated in a footnote: each pricing unit includes 100k queries per month, counted as Generative Queries per Month for generative answering and Passage Queries per Month for the Passage Retrieval API.

Terms are annual or three-year, quoted in USD by default with CAD, EUR, GBP and AUD available. Generative AI is an add-on rather than standard, which the pricing FAQ says plainly: Relevance Generative Answering and Generative Product Discovery are add-ons. The Customer Agreement states that no right of termination is granted and waives statutory termination rights, leaving breach, insolvency and an uncorrected warranty failure as the ways out mid-term.

Security documentation is unusually complete

Coveo publishes a detailed security posture rather than a badge strip. It completes an AICPA SOC 2 Type II examination annually, maintains an ISO 27001 certified management system, and holds ISO 27017, ISO 27018 and ISO 27701 certifications. HIPAA is a separate hosting environment with biennial audits, and Coveo states its Business Associate Agreement is available for execution. Controls are documented in the Cloud Security Alliance STAR registry, there is a bug bounty program through Intigriti, and the SOC 2 report plus penetration tests are available under NDA through the Trust Center.

Data handling is documented at the same level. Storage regions are the United States, Canada, the European Union and Australia, with logical separation across two regions for multinational customers and an active-active configuration currently limited to US East with US Midwest as secondary, and not available for HIPAA organizations. Encryption is TLS 1.2 in transit and AES-256 at rest. On model training, Coveo names the third-party models it uses, including OpenAI families through Azure, Titan, Nova, Claude and Llama through Bedrock, and Hugging Face models hosted on AWS, and states that customer data routed through Bedrock is not used to train or improve those base models.

Two retention facts matter before signing. Analytics data is retained for three years and that window is described as platform behavior, not a setting. At the end of a subscription there is a 14-day grace period during which organizations are paused and read-only, then a 30-day retention period after which the backup is permanently deleted.

What a buyer still has to build

Coveo's own pages describe a platform assembled by a team. A drag-and-drop interface editor and Coveo-hosted search pages exist, and the integrations FAQ says non-technical users get drag-and-drop UI elements inside native integrations like Salesforce and Sitecore. Anything beyond that is code: search pages created with Coveo's Atomic or Headless libraries are explicitly not hosted by Coveo and you host them yourself. Those libraries are published in the Coveo UI kit under Apache 2.0, which is the only open part of the stack.

One API limitation is stated in the REST reference and easy to miss during architecture review: Coveo does not support VPC peering. For data egress, analytics come out as CSV from the console or through a Snowflake reader account or data share, and after the subscription ends retrieval depends on having enabled one of those Snowflake options beforehand, with a 30-day window to contact support otherwise.

Where it fits, and where it does not

The fit is an organization with content scattered across many systems, strict permission requirements, and more than one surface to feed: a support portal, a storefront, an intranet, and now an assistant. The uptime commitment is contractual at 99.9% on Pro and 99.99% on Enterprise, and single sign-on is included on both plans though Pro restricts it to Salesforce, Google and Office 365 identities.

The poor fit is a small team or a single use case. There is no free plan, only a 14-day trial; no price is published at any tier; terms run one to three years with no termination right; and the connector allowance on the cheaper Pro plan is three cloud connectors with the four most commonly wanted native connectors priced separately. A team that wants an agent-queryable index over a handful of sources will find the commercial shape heavier than the technical requirement.

Coveo price and terms

Terms

Free to start
PartlyPartly14-day full-access trial with no credit card, including 25+ connectors and 15+ machine learning models
The terms in full

no standing free plan is offered.

Card to start
YesNot required
Sign up without sales
PartlySome plans

What needs a higher plan

Enterprise Platform
Self-hosted

For AI agents

MCP server
Yes
API
Yes
Coveo's pricing page

Pricing page, captured

coveo.com/en/pricing, checked

What we checked on Coveo

YesPartlyNo

What it costs to startYes

What the price counts

Priced in units of platform entitlements, mainly queries and indexed items, with seat-based plans for the Workplace use case and no public rate card.

Coveo pricing scales transparently based on your needs—primarily queries and indexed items—offering predictable annual and three-year subscriptions.

coveo.com/en/pricingChecked

What it costs to startPartly

Free tier

Only a 14-day full-access trial is offered; no standing free plan appears anywhere on the pricing or signup pages.

Full access for 14 days

coveo.com/en/free-trialChecked

What it costs to startPartly

Self-serve signup

You can open a trial account yourself with email, Google, Microsoft or Salesforce, but every paid plan routes through a pricing request or a sales conversation.

Request Pricing

coveo.com/en/pricingChecked

What it costs to startNo

Card to start

The trial signup asks only for a business email or a Google, Microsoft or Salesforce identity, and states no card is needed.

No credit card required

coveo.com/en/free-trialChecked

What it costs to startNo

Contract

Subscriptions are sold on annual or three-year terms against a signed Order, not month to month, and entitlements are fixed in that Order.

offering predictable annual and three-year subscriptions. Our standard prices are in USD, but alternate currencies (CAD, EUR, GBP, AUD) and terms are…

coveo.com/en/pricingChecked

What it costs to startNo

Cancel any time

The Customer Agreement grants no general right to terminate; exit mid-term is limited to breach, insolvency or an uncured warranty failure.

The Parties recognize and agree that no right of termination is granted under this Agreement and hereby waive the application of any statutory…

coveo.com/en/company/legal/terms-and-ag…Checked

What it works withYes

Works with

Named native connectors cover Salesforce, SAP, ServiceNow, Shopify, Sitecore, Adobe and Zendesk, but the Pro plan limits you to three cloud connectors and the four big native ones are sold separately.

Coveo offers native connectors for major platforms like Salesforce, SAP, Shopify, ServiceNow, and more, plus APIs for custom integrations.

coveo.com/en/pricingChecked

What it works withYes

Public API

A full public REST reference covers indexing, search, machine learning, analytics and organization management, with an official JavaScript client library.

Under the hood, the Coveo Administration Console uses many of the platform APIs.

docs.coveo.com/en/4Checked

What it works withYes

MCP server

A hosted MCP Server is configured per organization in the Administration Console, exposing Search, Fetch, Answer and Passage Retrieval tools to tested clients including ChatGPT Enterprise, Claude and Copilot.

The Coveo Model Context Protocol (MCP) Server connects AI agents — like ChatGPT, Claude, Copilot or other LLM copilots — to your Coveo index.

coveo.com/en/developers/mcp-serverChecked

What it does on its ownPartly

Acts on its own

Generative answering and the MCP tools return answers without a person approving each step, but the platform supplies grounded retrieval to the customer's agents rather than executing multi-step tasks itself.

Centralizes access to and retrieves enterprise-wide data in one secure, searchable index, so AI agents always ground answers in trusted, relevant…

coveo.com/en/platform/agentic-aiChecked

What it does on its ownYes

Limits on what it may do

Each MCP Server configuration picks a query pipeline that fixes which tools are exposed, chooses OAuth or anonymous API key authentication, and inherits document-level index permissions.

The query pipeline you select determines which tools are available in your Hosted MCP Server configuration.

docs.coveo.com/en/q1mb0212Checked

What it does on its ownPartly

No code needed

A drag-and-drop editor and Coveo-hosted search pages get an interface running without code, while custom interfaces use the Atomic and Headless libraries and a developer.

With our drag-and-drop interface editor, you can modify these elements and get AI-powered search up and running quickly.

coveo.com/en/integrationsChecked

What happens to your dataPartly

No training on your data

Customer data sent to third-party foundation models through AWS Bedrock is excluded from training those models, while Coveo's own machine learning models are trained on your organization's content and behavior by design.

Customer data used through AWS Bedrock isn't used to train or improve any original third-party foundation or base models.

docs.coveo.com/en/pb7d0331Checked

What happens to your dataPartly

Retention you control

Analytics retention is fixed at three years rather than configurable, though deletion APIs, user ID masking and the option to disable analytics let you limit what is kept.

Analytics data is retained for a period of three years.

docs.coveo.com/en/1682Checked

What happens to your dataYes

Data stays in your region

You pick one storage region from the United States, Canada, the European Union or Australia, with logical separation across two regions for multinationals and multi-region hosting as a paid add-on.

Customers can choose one of the listed regions to store their data.

docs.coveo.com/en/3141Checked

What happens to your dataPartly

Self-hosted

The platform itself runs only as Coveo-hosted cloud software; what you can run on your own servers is the on-premises crawling module and other Enterprise connectors that feed the hosted index.

Coveo Platform is an enterprise-class native cloud SaaS/PaaS solution that provides a unified and secure way to search for contextually relevant…

docs.coveo.com/en/186Checked

What happens to your dataPartly

Open source

The front-end UI kit holding the Headless and Atomic libraries is published under Apache 2.0, while the index, connectors and machine learning services stay proprietary and hosted.

Apache-2.0 license

github.com/coveo/ui-kitChecked

What happens to your dataYes

Take your data out

Analytics data exports as CSV from the console or through a Snowflake reader account or data share, and index content stays available from your original sources after the term ends.

Coveo provides the following tools to access and retrieve Coveo Analytics data in structured and commonly used formats

docs.coveo.com/en/p9ae0206Checked

Whether a company can buy itYes

Security audits

SOC 2 Type II annually, ISO 27001 certification with 27017, 27018 and 27701, a HIPAA environment with a BAA, and a Data Processing Addendum published on the legal page.

Successfully passed SOC 2 Type II Examination; Maintains an ISO 27001 certified Information Security Management System (ISMS) and is ISO 27018:2019…

docs.coveo.com/en/1944Checked

Whether a company can buy itYes

Single sign-on

Single sign-on is included on both platform plans, but the Pro plan restricts it to Salesforce, Google and Office 365 identities while Enterprise is unrestricted.

Salesforce, Google & Office 365 only

docs.coveo.com/en/l2590456Checked

Whether a company can buy itYes

Audit log

An Activity Browser in the Administration Console records resource events with the triggering user's email, timestamp and resource, and an Activity API exposes the same records.

Details may include the email address of the user who triggered the activity, the date and time which it was triggered, the resource ID, error…

docs.coveo.com/en/1969Checked

Whether a company can buy itYes

Uptime promise

The entitlements documentation commits to a 99.9% uptime guarantee on Pro and 99.99% on Enterprise, with 99.999% and active-active resiliency sold as a US-only add-on.

On the page: Platform Plans table, Uptime guarantee row

docs.coveo.com/en/l2590456Checked

Coveo alternatives

Questions about Coveo

How much does Coveo cost?
Coveo gives its price on request. From coveo.com/en/pricing, checked 28 October 2026.
Does Coveo have an API or an MCP server?
It has an API. It has an MCP server.
Is Coveo open source, and can you host it yourself?
Part of it is open source. You can host it yourself on Enterprise Platform.
What have we checked on Coveo?
22 facts, under these headings: What it costs to start, what it works with, what it does on its own, what happens to your data, whether a company can buy it.
How do we check Coveo?
We hold 22 facts on Coveo, quoted from 18 pages. Facts and price last checked 28 October 2026.

How we check every listing

Is this yours?

AI assistants like ChatGPT, Claude and Perplexity opened AgentsIndex pages 1,131 times from 17 October to 29 October. Claim it free, then see who reads this page and fix any fact we got wrong. You confirm it with an email at coveo.com.