Spend controls, budgets and approvals for AI agents
Stage
Not given
MVP
Founded
Not given
Not given
Based in
US
Not given
Pricing model
Freemium
Freemium
Pricing
Free for one developer with up to 25 source-built services, 50,000 tool calls a month, then $0.20 per thousand. Team plan is $25 per developer per month with 100,000 tool calls per developer a month, pooled, then $0.20 per thousand. Enterprise from $1,500 per month.
Free plan: $0 during early access with 2 seats and 3 agents. Planned paid plans: Builder at $49/month with 5 seats and 25 agents; Scale at $199/month with 25 seats and 250 agents. Self-hosting is free.
Key features
Source-built servers with TypeScript or Python projects
Remote MCP, OpenAPI, npm package, and container image support
Per-tool and per-argument access control policies
Tool definition review and approval workflow
Content scanning with literal and regex detectors
Activity tracking and audit trails
OIDC and SAML 2.0 single sign-on
SCIM 2.0 provisioning
Workspace-specific data encryption
Custom domain publishing with DNS and Cloudflare certification
Onchain allowances and epoch budgets
Escalation through reporting tree
Session keys with automatic expiration
Constitutional governance with veto windows
Declared flows and human gates
Slack and Telegram supervision
Visual org builder and workspace
Apache-2.0 open source contracts and SDK
Inference budgets for model and API calls
Integration with Coinbase AgentKit and Safe
What makes it different
One endpoint replaces every client config, eliminating need for each client to store every server and secret
Coding agent builds the server automatically with no adapter needed
Credentials held once by Rayrun instead of distributed across clients
Built-in security review with published controls and audit trails for compliance teams
Support for multiple service types without writing adapters
Bounded blast radius: compromised agents can only spend remaining epoch allowance on whitelisted targets
Passkey root stays on user's device; cloud holds only scoped, expiring session keys
Fully self-hostable open protocol with Apache-2.0 licensing
Approval workflows follow real organizational structure, not smart contract code
No token or cryptocurrency knowledge required to use the cloud platform
Rayrun
LaCrew