# Coveo — Unifies search, recommendations and generative answers across many enterprise systems behind one permission-aware index. > Source: AgentsIndex — https://agentsindex.ai/coveo (structured, researched, re-verified) Coveo is a hosted enterprise search and retrieval platform that unifies content from business systems into one permission-aware index. It serves search, recommendations, generative answers and an MCP server that AI agents query for grounded enterprise content. **Best for:** Large commerce, support and workplace teams unifying search across many enterprise systems **Look elsewhere if:** - you want to use it for real without paying - you want any plan without talking to sales - you need to cancel any time without a fee - your data must stay out of model training without asking | Fact | Value | | --- | --- | | Website | https://coveo.com | | Category | AI enterprise search | | API | Yes | | Open source | Partly | | Price | Price on request | | Price source | https://www.coveo.com/en/pricing | | Price checked | 28 October 2026 | | MCP server | Yes | | Self-host | Partly, on Enterprise Platform | | Facts | 22 facts from 18 sources | | Facts checked | 28 October 2026 | **What we checked** - Pages last read: 28 October 2026 - Facts checked: 22 facts (From 18 sources) ## One index behind search, recommendations and agent retrieval Coveo indexes content from business systems into a single hosted index and then serves it four ways: search interfaces, recommendations, generative answers, and tool calls from AI agents. The indexing side is connector work. Coveo counts [more than 30 native and universal connectors](https://www.coveo.com/en/integrations) covering Salesforce, SAP, ServiceNow, Shopify, Sitecore, Adobe, Zendesk, SharePoint, Slack, Jira, Confluence and Dropbox, plus Push, REST, GraphQL, database and sitemap connectors for anything without a native one. Permissions travel with the content. Coveo mirrors source permissions at the document level, so an authenticated user sees only what they are entitled to see in the originating system, and the same filter applies when an agent queries through the MCP server. [Index data](https://docs.coveo.com/en/3135/) is stored as a binary representation of your content, compressed and encrypted at rest, which matters at exit time: the index is not a copy you take with you, and Coveo's position is that your original content stays accessible from its original sources. ## The MCP server is a configured object, not a toggle The [Coveo MCP Server](https://www.coveo.com/en/developers/mcp-server) is hosted by Coveo and created per organization in the Administration Console. Each configuration names a query pipeline, which decides the available tools: Search and Fetch are available for any pipeline, Answer and Passage Retrieval only where the matching models exist. Authentication is either OAuth, recommended for private sources needing per-user authentication, or an anonymous API key. Coveo publishes a [client reference table](https://docs.coveo.com/en/pbog0163/) of MCP clients it has tested, with the authentication methods each supports: Agentforce, Amazon Bedrock AgentCore, Amazon Quick Suite, ChatGPT Enterprise, Claude.ai, Claude Desktop, Cursor, Microsoft Copilot Studio, Microsoft 365 Copilot and more. The granularity is useful and also a limit worth reading: Claude Desktop and Cursor are listed as API key only, while ChatGPT Enterprise and Claude.ai support OAuth through a workspace admin creating a custom app or connector. Coveo's own caveat is that the client list and supported methods change, since the clients are third-party software. ## Pricing is entitlement-based and never printed The [pricing page](https://www.coveo.com/en/pricing) enumerates features across eight groups and four add-on groups, and prints no number for any of them. Packaging splits in two: entitlement-based pricing for Service and Website, seat-based plans for Workplace, and modular pricing with a base package for Commerce. The metering unit is stated in a footnote: each pricing unit includes 100k queries per month, counted as Generative Queries per Month for generative answering and Passage Queries per Month for the Passage Retrieval API. Terms are annual or three-year, quoted in USD by default with CAD, EUR, GBP and AUD available. Generative AI is an add-on rather than standard, which the pricing FAQ says plainly: Relevance Generative Answering and Generative Product Discovery are add-ons. The [Customer Agreement](https://www.coveo.com/en/company/legal/terms-and-agreements/customer-agreement) states that no right of termination is granted and waives statutory termination rights, leaving breach, insolvency and an uncorrected warranty failure as the ways out mid-term. ## Security documentation is unusually complete Coveo publishes a detailed security posture rather than a badge strip. It completes an [AICPA SOC 2 Type II](https://docs.coveo.com/en/1944/) examination annually, maintains an ISO 27001 certified management system, and holds ISO 27017, ISO 27018 and ISO 27701 certifications. HIPAA is a separate hosting environment with biennial audits, and Coveo states its Business Associate Agreement is available for execution. Controls are documented in the Cloud Security Alliance STAR registry, there is a bug bounty program through Intigriti, and the SOC 2 report plus penetration tests are available under NDA through the Trust Center. Data handling is documented at the same level. Storage regions are the [United States, Canada, the European Union and Australia](https://docs.coveo.com/en/3141/), with logical separation across two regions for multinational customers and an active-active configuration currently limited to US East with US Midwest as secondary, and not available for HIPAA organizations. Encryption is TLS 1.2 in transit and AES-256 at rest. On model training, Coveo names the [third-party models](https://docs.coveo.com/en/pb7d0331/) it uses, including OpenAI families through Azure, Titan, Nova, Claude and Llama through Bedrock, and Hugging Face models hosted on AWS, and states that customer data routed through Bedrock is not used to train or improve those base models. Two retention facts matter before signing. Analytics data is retained for three years and that window is described as platform behavior, not a setting. At the end of a subscription there is a 14-day grace period during which organizations are paused and read-only, then a 30-day retention period after which the backup is permanently deleted. ## What a buyer still has to build Coveo's own pages describe a platform assembled by a team. A drag-and-drop interface editor and Coveo-hosted search pages exist, and the [integrations FAQ](https://www.coveo.com/en/integrations) says non-technical users get drag-and-drop UI elements inside native integrations like Salesforce and Sitecore. Anything beyond that is code: search pages created with Coveo's Atomic or Headless libraries are explicitly [not hosted by Coveo](https://docs.coveo.com/en/1656/) and you host them yourself. Those libraries are published in the [Coveo UI kit](https://github.com/coveo/ui-kit) under Apache 2.0, which is the only open part of the stack. One API limitation is stated in the [REST reference](https://docs.coveo.com/en/4/) and easy to miss during architecture review: Coveo does not support VPC peering. For data egress, analytics come out as CSV from the console or through a [Snowflake reader account or data share](https://docs.coveo.com/en/p9ae0206/), and after the subscription ends retrieval depends on having enabled one of those Snowflake options beforehand, with a 30-day window to contact support otherwise. ## Where it fits, and where it does not The fit is an organization with content scattered across many systems, strict permission requirements, and more than one surface to feed: a support portal, a storefront, an intranet, and now an assistant. The uptime commitment is contractual at [99.9% on Pro and 99.99% on Enterprise](https://docs.coveo.com/en/l2590456/), and single sign-on is included on both plans though Pro restricts it to Salesforce, Google and Office 365 identities. The poor fit is a small team or a single use case. There is no free plan, only a 14-day trial; no price is published at any tier; terms run one to three years with no termination right; and the connector allowance on the cheaper Pro plan is three cloud connectors with the four most commonly wanted native connectors priced separately. A team that wants an agent-queryable index over a handful of sources will find the commercial shape heavier than the technical requirement. ## Coveo price and terms **Terms** - Free to start: Partly — 14-day full-access trial with no credit card, including 25+ connectors and 15+ machine learning models — no standing free plan is offered. - Card to start: Not required - Sign up without sales: Some plans **What needs a higher plan** - Enterprise Platform: Self-hosted ## For AI agents - MCP server: Yes - API: Yes Pricing page as we captured it: https://agentsindex.ai/img/1920/screenshots/coveo/pricing.webp, captured 30 October 2026 Read on https://www.coveo.com/en/pricing, 28 October 2026. ## What we checked on Coveo ### What it costs to start **What the price counts** · Yes — Priced in units of platform entitlements, mainly queries and indexed items, with seat-based plans for the Workplace use case and no public rate card. > Coveo pricing scales transparently based on your needs—primarily queries and indexed items—offering predictable annual and three-year subscriptions. > — https://www.coveo.com/en/pricing · Frequently asked questions, "How does Coveo pricing work for enterprise deployments?", checked 28 October 2026 **Free tier** · Partly — Only a 14-day full-access trial is offered; no standing free plan appears anywhere on the pricing or signup pages. > Full access for 14 days > — https://www.coveo.com/en/free-trial · Signup page, benefit list beside the email form, checked 28 October 2026 **Self-serve signup** · Partly — You can open a trial account yourself with email, Google, Microsoft or Salesforce, but every paid plan routes through a pricing request or a sales conversation. > Request Pricing > — https://www.coveo.com/en/pricing · Pricing hero, business email form button, checked 28 October 2026 **Card to start** · No — The trial signup asks only for a business email or a Google, Microsoft or Salesforce identity, and states no card is needed. > No credit card required > — https://www.coveo.com/en/free-trial · Signup page, benefit list beside the email form, checked 28 October 2026 **Contract** · No — Subscriptions are sold on annual or three-year terms against a signed Order, not month to month, and entitlements are fixed in that Order. > offering predictable annual and three-year subscriptions. Our standard prices are in USD, but alternate currencies (CAD, EUR, GBP, AUD) and terms are available. > — https://www.coveo.com/en/pricing · Frequently asked questions, enterprise pricing answer, checked 28 October 2026 **Cancel any time** · No — The Customer Agreement grants no general right to terminate; exit mid-term is limited to breach, insolvency or an uncured warranty failure. > The Parties recognize and agree that no right of termination is granted under this Agreement and hereby waive the application of any statutory termination rights > — https://www.coveo.com/en/company/legal/terms-and-agreements/customer-agreement · Section 16.4, Entire Agreement and Order of Precedence, checked 28 October 2026 ### What it works with **Works with** · Yes — Named native connectors cover Salesforce, SAP, ServiceNow, Shopify, Sitecore, Adobe and Zendesk, but the Pro plan limits you to three cloud connectors and the four big native ones are sold separately. > Coveo offers native connectors for major platforms like Salesforce, SAP, Shopify, ServiceNow, and more, plus APIs for custom integrations. > — https://www.coveo.com/en/pricing · Frequently asked questions, "Can I integrate Coveo with existing enterprise applications and platforms?", checked 28 October 2026 **Public API** · Yes — A full public REST reference covers indexing, search, machine learning, analytics and organization management, with an official JavaScript client library. > Under the hood, the Coveo Administration Console uses many of the platform APIs. > — https://docs.coveo.com/en/4/ · REST API reference, opening paragraph, checked 28 October 2026 **MCP server** · Yes — A hosted MCP Server is configured per organization in the Administration Console, exposing Search, Fetch, Answer and Passage Retrieval tools to tested clients including ChatGPT Enterprise, Claude and Copilot. > The Coveo Model Context Protocol (MCP) Server connects AI agents — like ChatGPT, Claude, Copilot or other LLM copilots — to your Coveo index. > — https://www.coveo.com/en/developers/mcp-server · Page intro under "Coveo MCP Server", checked 28 October 2026 ### What it does on its own **Acts on its own** · Partly — Generative answering and the MCP tools return answers without a person approving each step, but the platform supplies grounded retrieval to the customer's agents rather than executing multi-step tasks itself. > Centralizes access to and retrieves enterprise-wide data in one secure, searchable index, so AI agents always ground answers in trusted, relevant content. > — https://www.coveo.com/en/platform/agentic-ai · Agentic AI page, "What it does" line, checked 28 October 2026 **Limits on what it may do** · Yes — Each MCP Server configuration picks a query pipeline that fixes which tools are exposed, chooses OAuth or anonymous API key authentication, and inherits document-level index permissions. > The query pipeline you select determines which tools are available in your Hosted MCP Server configuration. > — https://docs.coveo.com/en/q1mb0212/ · Add an MCP Server, step 2 on tools, checked 28 October 2026 **No code needed** · Partly — A drag-and-drop editor and Coveo-hosted search pages get an interface running without code, while custom interfaces use the Atomic and Headless libraries and a developer. > With our drag-and-drop interface editor, you can modify these elements and get AI-powered search up and running quickly. > — https://www.coveo.com/en/integrations · FAQ, "Does Coveo offer prepackaged UI elements?", checked 28 October 2026 ### What happens to your data **No training on your data** · Partly — Customer data sent to third-party foundation models through AWS Bedrock is excluded from training those models, while Coveo's own machine learning models are trained on your organization's content and behavior by design. > Customer data used through AWS Bedrock isn't used to train or improve any original third-party foundation or base models. > — https://docs.coveo.com/en/pb7d0331/ · Customer data handling with AWS Bedrock callout, checked 28 October 2026 **Retention you control** · Partly — Analytics retention is fixed at three years rather than configurable, though deletion APIs, user ID masking and the option to disable analytics let you limit what is kept. > Analytics data is retained for a period of three years. > — https://docs.coveo.com/en/1682/ · Retention during the subscription, checked 28 October 2026 **Data stays in your region** · Yes — You pick one storage region from the United States, Canada, the European Union or Australia, with logical separation across two regions for multinationals and multi-region hosting as a paid add-on. > Customers can choose one of the listed regions to store their data. > — https://docs.coveo.com/en/3141/ · Data residency section, checked 28 October 2026 **Self-hosted** · Partly — The platform itself runs only as Coveo-hosted cloud software; what you can run on your own servers is the on-premises crawling module and other Enterprise connectors that feed the hosted index. > Coveo Platform is an enterprise-class native cloud SaaS/PaaS solution that provides a unified and secure way to search for contextually relevant content across many enterprise systems. > — https://docs.coveo.com/en/186/ · Coveo Platform glossary entry, first sentence, checked 28 October 2026 **Open source** · Partly — The front-end UI kit holding the Headless and Atomic libraries is published under Apache 2.0, while the index, connectors and machine learning services stay proprietary and hosted. > Apache-2.0 license > — https://github.com/coveo/ui-kit · Repository About panel, license line, checked 28 October 2026 **Take your data out** · Yes — Analytics data exports as CSV from the console or through a Snowflake reader account or data share, and index content stays available from your original sources after the term ends. > Coveo provides the following tools to access and retrieve Coveo Analytics data in structured and commonly used formats > — https://docs.coveo.com/en/p9ae0206/ · Data retrieval during your subscription, Analytics data, checked 28 October 2026 ### Whether a company can buy it **Security audits** · Yes — SOC 2 Type II annually, ISO 27001 certification with 27017, 27018 and 27701, a HIPAA environment with a BAA, and a Data Processing Addendum published on the legal page. > Successfully passed SOC 2 Type II Examination; Maintains an ISO 27001 certified Information Security Management System (ISMS) and is ISO 27018:2019 certified; Offers a HIPAA-Compliant version of its Hosted Services. > — https://docs.coveo.com/en/1944/ · Security certifications list, checked 28 October 2026 **Single sign-on** · Yes — Single sign-on is included on both platform plans, but the Pro plan restricts it to Salesforce, Google and Office 365 identities while Enterprise is unrestricted. > Salesforce, Google & Office 365 only > — https://docs.coveo.com/en/l2590456/ · Platform Plans, Security table, SSO row, checked 28 October 2026 **Audit log** · Yes — An Activity Browser in the Administration Console records resource events with the triggering user's email, timestamp and resource, and an Activity API exposes the same records. > Details may include the email address of the user who triggered the activity, the date and time which it was triggered, the resource ID, error messages, etc. > — https://docs.coveo.com/en/1969/ · Review resource activity, intro, checked 28 October 2026 **Uptime promise** · Yes — The entitlements documentation commits to a 99.9% uptime guarantee on Pro and 99.99% on Enterprise, with 99.999% and active-active resiliency sold as a US-only add-on. > Uptime guarantee | 99.9% | 99.99% > — https://docs.coveo.com/en/l2590456/ · Platform Plans table, Uptime guarantee row, checked 28 October 2026 ## Coveo alternatives - [Glean](https://agentsindex.ai/glean) · Price on request: Permission-mirroring search and agents over 275+ enterprise connectors, sold per seat with pooled usage credits. - [Bloomfire](https://agentsindex.ai/bloomfire) · Price on request: Keeps a persistent semantic memory of connected systems, so AI answers from governed company knowledge. - [Algolia](https://agentsindex.ai/algolia) · Free plan, then $0.50 per 1k search requests: Hosted search and retrieval API with keyword, neural and agent layers, metered per 1K requests. - [Moveworks](https://agentsindex.ai/moveworks) · Price on request: Enterprise AI assistant that answers from connected systems and runs IT, HR and finance tasks in chat. ## Questions about Coveo ### How much does Coveo cost? Coveo gives its price on request. From coveo.com/en/pricing, checked 28 October 2026. ### Does Coveo have an API or an MCP server? It has an API. It has an MCP server. ### Is Coveo open source, and can you host it yourself? Part of it is open source. You can host it yourself on Enterprise Platform. ### What have we checked on Coveo? 22 facts, under these headings: What it costs to start, what it works with, what it does on its own, what happens to your data, whether a company can buy it. ### How do we check Coveo? We hold 22 facts on Coveo, quoted from 18 pages. Facts and price last checked 28 October 2026. How we check every listing: https://agentsindex.ai/methodology/ ## Sources and changes **Sources** (18) - https://www.coveo.com/en/pricing, read 28 October 2026 - https://www.coveo.com/en/free-trial, read 28 October 2026 - https://docs.coveo.com/en/l2590456/, read 28 October 2026 - https://github.com/coveo/ui-kit, read 28 October 2026 - https://docs.coveo.com/en/1682/, read 28 October 2026 - https://docs.coveo.com/en/186/, read 28 October 2026 - https://docs.coveo.com/en/1944/, read 28 October 2026 - https://docs.coveo.com/en/1969/, read 28 October 2026 - https://docs.coveo.com/en/3141/, read 28 October 2026 - https://docs.coveo.com/en/4/, read 28 October 2026 - https://www.coveo.com/en/company/legal/terms-and-agreements/customer-agreement, read 28 October 2026 - https://www.coveo.com/en/developers/mcp-server, read 28 October 2026 - https://www.coveo.com/en/integrations, read 28 October 2026 - https://docs.coveo.com/en/p9ae0206/, read 28 October 2026 - https://docs.coveo.com/en/pb7d0331/, read 28 October 2026 - https://www.coveo.com/en/platform/agentic-ai, read 28 October 2026 - https://www.coveo.com/en/platform/security, read 28 October 2026 - https://docs.coveo.com/en/q1mb0212/, read 28 October 2026 **Updates** (1) - 28 October 2026: Free tier, Price, What it does ## Is this yours? AI assistants like ChatGPT, Claude and Perplexity opened AgentsIndex pages 1,131 times from 17 October to 29 October. Claim Coveo to edit it from your dashboard: https://agentsindex.ai/claim/coveo