| What it does | One endpoint for every MCP tool
| Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
|
|---|
| Stage | Not given
| Startup
|
|---|
| Founded | Not given
| 2026
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Freemium
| Free trial
|
|---|
| Pricing | Free for one developer with up to 25 source-built services, 50,000 tool calls a month, then $0.20 per thousand. Team plan is $25 per developer per month with 100,000 tool calls per developer a month, pooled, then $0.20 per thousand. Enterprise from $1,500 per month.
| Free 12 week pilot for card issuing platforms
|
|---|
| Key features | - Source-built servers with TypeScript or Python projects
- Remote MCP, OpenAPI, npm package, and container image support
- Per-tool and per-argument access control policies
- Tool definition review and approval workflow
- Content scanning with literal and regex detectors
- Activity tracking and audit trails
- OIDC and SAML 2.0 single sign-on
- SCIM 2.0 provisioning
- Workspace-specific data encryption
- Custom domain publishing with DNS and Cloudflare certification
| - Passkey-signed spend mandates with purpose, budget, merchants, and time windows
- Real-time authorization decisions with sub-1 second response time at p99
- Human challenge via passkey step-up for exceptional spend
- Fail-closed payment processing if no decision arrives in time
- Hash-chained evidence ledger with tamper-evident records
- Exportable evidence packs for chargebacks and audits
- Supports card, wallet, x402 and stablecoin payment rails
|
|---|
| What makes it different | - One endpoint replaces every client config, eliminating need for each client to store every server and secret
- Coding agent builds the server automatically with no adapter needed
- Credentials held once by Rayrun instead of distributed across clients
- Built-in security review with published controls and audit trails for compliance teams
- Support for multiple service types without writing adapters
| - Human-approved mandates enforce intent, not just static limits or merchant category blocks
- Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
- Creates tamper-evident audit trail linked to agent identity, run, and policy version
- Never holds funds or issues cards; integrates with existing issuer infrastructure
- Single mandate and policy core across multiple payment rails and issuers
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 45 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 12 | 0 |
|---|
| Citation Flow (Majestic) | 36 | 0 |
|---|
| Referring domains (Majestic) | 125 | 0 |
|---|
Rayrun
Levee