Cloud agent sandbox with persistent filesystem and on-demand compute
One endpoint for every MCP tool
Stage
MVP
Not given
Founded
Not given
Not given
Based in
US
US
Pricing model
Paid
Freemium
Pricing
Compute: $0.015 per GiB-hour (approximately $0.000004167 per GiB-second, billed by the second). Storage: $0.02 per GiB-month for retained incremental RootFS data and memory checkpoints. Network ingress and egress currently free. Object-store GET and PUT requests free. New users receive $5 free credi
Free for one developer with up to 25 source-built services, 50,000 tool calls a month, then $0.20 per thousand. Team plan is $25 per developer per month with 100,000 tool calls per developer a month, pooled, then $0.20 per thousand. Enterprise from $1,500 per month.
Key features
Automatic filesystem growth as storage fills
Pause compute without losing work or paying compute charges
Resume to same environment on demand
Access files while paused without waking compute
Public HTTP services with auto-resume capability
Command-line interface (s0 CLI) for agent-native workflows
Incremental checkpoints to avoid full filesystem copies
Scoped API keys and team-based access controls
On-demand file reads without downloading entire filesystem
Source-built servers with TypeScript or Python projects
Remote MCP, OpenAPI, npm package, and container image support
Per-tool and per-argument access control policies
Tool definition review and approval workflow
Content scanning with literal and regex detectors
Activity tracking and audit trails
OIDC and SAML 2.0 single sign-on
SCIM 2.0 provisioning
Workspace-specific data encryption
Custom domain publishing with DNS and Cloudflare certification
What makes it different
Persistent filesystem across pause/resume without duplicating data
Pay only for compute time used; paused sandboxes have zero compute charges
Automatic filesystem growth so agents can install and persist unlimited tools
Same API for both human users and AI agents
One endpoint replaces every client config, eliminating need for each client to store every server and secret
Coding agent builds the server automatically with no adapter needed
Credentials held once by Rayrun instead of distributed across clients
Built-in security review with published controls and audit trails for compliance teams
Support for multiple service types without writing adapters
Rayrun