AI ToolAI Agents

Rayrun

Rayrun hosts MCP servers behind a single endpoint, eliminating the need for clients to store and manage upstream API credentials.

Rayrun is an AI agent, priced at $25/month on the Team plan, integrating with Linear, Stripe, Notion, and Claude. InnovaAI scores it 5.5/10 for agency resale.

Consider5.5/10

Agency Audit

Rayrun hosts MCP servers behind a single endpoint, centralizing upstream credentials and enforcing per-client access policies so agencies don't distribute secrets across client environments. It records every tool call, supports deploying from source, remote MCP, OpenAPI, npm, or container images, and integrates with Claude, Cursor, VS Code, and Windsurf. Best for agencies building AI agent tooling or deploying MCP servers across multiple clients. Resale potential exists for agencies serving clients that require security review or multi-tenant credential management, though pricing scales per tool call rather than per-client retainer.

ConsiderNo WLFreemium
Fit

5.5/10

Typical Margin

34%

Time-to-Value

2d 1-2 days

Complexity
Low
Consider
Fit55
Visit Rayrun
Best For
  • You're building AI agent tooling for clients and need to deploy MCP servers without distributing API keys or secrets to each client.
  • Your clients require security review and you need signed audit streaming to their SIEM (Enterprise plan includes OIDC/SAML and SCIM 2.0 provisioning).
  • You manage 5+ client accounts and need per-client, per-tool access policies enforced in one place rather than scattered across client configs.
Not For
  • Your clients are price-sensitive and you cannot absorb or pass through per-tool-call overage costs beyond the Team plan's 100,000 monthly pooled calls.
  • You need a white-labeled portal or dashboard to present to clients under your agency brand.
  • Your clients require HIPAA compliance or FedRAMP certification; Rayrun does not publish these compliance certifications.

Profit Path

Your Cost (USD)

$25/mo

Market Range

$600–$1.5K/project

Revenue Model

Hybrid

From 242 published agency rates in USA, 25th to 75th percentile x 20h of assumed delivery time. Rates are self-reported directory profiles, not observed transactions.

Platform Features

Core capabilities of Rayrun

Central credential vault with per-client access policies

Agencies store upstream service credentials once in Rayrun, then enforce allow/ask/block policies per service, tool, and argument for each client. Clients never handle raw API keys, reducing secret sprawl and compliance risk.

Deploy MCP servers from multiple source types

Connect remote MCP endpoints, OpenAPI specs, npm packages, or container images as upstream services without writing adapters. Rayrun discovers tools and exposes them over a single endpoint.

Scaffold and deploy agent-built MCP projects

Hand a scaffolded TypeScript or Python project to Claude or Codex, let the agent build and test the server, then deploy with one command. Rayrun streams build status and manages releases with automatic rollback on failure.

Complete audit trail with signed SIEM streaming

Every tool call is recorded with caller identity and applied policy. Enterprise plan supports signed audit streaming to a SIEM for compliance-heavy clients.

Secret and injection scanning

Rayrun scans tool definitions and payloads for exposed secrets, personal data, and prompt injection patterns before execution, reducing data leakage risk in multi-client environments.

Shared credential vault and team roles

Team plan enables credential sharing across developers and role-based access control, so agencies can onboard new team members without duplicating secrets or access setup.

What Makes Rayrun Different

Unique advantages vs similar tools in this niche

One endpoint replaces every client's per-server config and stored secret

vs Distributing mcp.json files with embedded API keys to each client

Each client stores one URL and no secrets, while Rayrun holds the upstream credentials.

Per-argument access decisions with human approval for destructive calls

vs Blanket tool access with no per-call policy

A call that needs a person waits for one, and refund_charge can be set to Ask while list_charges is Allow.

Changed tool definitions are held for review and scanned for prompt injection

vs Silently accepting updated tool definitions from upstream services

Content scanning checks both directions for secrets, personal data, and prompt injection before a definition goes live.

Latest Updates

Recent releases and improvements for Rayrun

Build and host MCP servers from source

New

New feature allowing users to build and host MCP servers from source via Rayrun Deploy.

Investment ROI Calculator

Value equation analysis for Rayrun, based on the Hormozi framework

What is the Hormozi framework? A four-factor score: (what the service delivers × how reliably it delivers) divided by (how long it takes × how much effort it requires). A higher Value Multiplier means a better return on the time and money invested: faster, easier, and more proven results.

Value MultiplierStrong

2.1× value multiple: invest $25/mo and agencies typically charge $600–$1.5K/project for the work it powers.

Outcome25
÷
Friction12

Why This Succeeds

Higher is better

Implementation Challenges

Lower is better

Viable opportunity. Rayrun returns 2.1× on investment. Focus on the highest-margin service packages to maximize return.

Best if:You're building AI agent tooling for clients and need to deploy MCP servers without distributing API keys or secrets to each client.Your clients require security review and you need signed audit streaming to their SIEM (Enterprise plan includes OIDC/SAML and SCIM 2.0 provisioning).You manage 5+ client accounts and need per-client, per-tool access policies enforced in one place rather than scattered across client configs.Your agents use Linear, Stripe, or Notion and you want those integrations available without writing adapters.You want to scaffold MCP projects with Claude or Codex and deploy them without manual credential management.

Pricing

Rayrun platform cost to your agency

~34% margin

Team: $25/mo

Free

$0/mo
Free forever
  • Up to 25 source-built services
  • 50 isolated builds a day and 5 GiB of retained images
  • Encrypted build logs and 30 days of rollback images
  • Persistent storage for hosted services

Team

$25/mo
  • Everything in Free
  • Shared credential vault across the team
  • Roles and client-specific access
  • 100,000 tool calls per developer a month, pooled
Enterprise

Enterprise

Custom
  • Everything in Team
  • OIDC or SAML 2.0 single sign-on
  • SCIM 2.0 provisioning
  • Access granted by directory group

No verified white-label program for Rayrun: client-facing delivery runs under the platform's native branding.

Market Intelligence

How agencies monetize Rayrun: real offer economics and market positioning

Service Applications
Automation & IntegrationsDelivery & ProductionSupport & HelpdeskReporting & Analytics
Best For
  • Agencies building AI agent tooling for clients
  • Teams deploying MCP servers for multiple clients
  • Organizations that must pass a security review
Not Ideal For
  • Agencies with no engineering or coding-agent capability
  • Solo users who only need a single local MCP config

Project-Based

ai-tools

Agency charges per-project fee for implementation. Ongoing optimization as optional retainer.

Offer Economics: What You Charge vs. What It Costs

Margin includes platform cost + agency labor at $75/hr.

Rayrun Starter MCP Deploylocal smb

Local service businesses (salons, clinics, contractors) needing a single AI tool integration with secure credential management

$1.8K
Tool: $25/mo (2 mo = $50)Labor: 16h setup × $75 = $1.2KMargin: 31%Benchmark: $600–$1.5K/project
Deploy one MCP server from client's existing tool or OpenAPI spec behind a Rayrun endpointConfigure encrypted credential vault so client never exposes API keys directlySet up per-tool access policy and activity logging for the client's use caseDocument handoff guide and record a walkthrough video for client self-management
Rayrun Multi-Tool Agent Buildgrowth smb

Funded startups and regional brands integrating multiple SaaS tools into a unified AI agent layer with team access controls

$5.8K
Tool: $25/mo (2 mo = $50)Labor: 52h setup × $75 = $3.9KMargin: 32%Benchmark: $1.5K–$3.7K/project
Deploy up to five MCP servers from npm packages, remote MCP, or container images behind a single Rayrun endpointConfigure shared credential vault with role-based, per-client access policies for the client's teamBuild versioned Workspace Skills delivered over MCP for the client's core workflowsIntegrate activity history audit trail and train client team on access management and rollback procedures
Rayrun Enterprise MCP Platformmid market

Mid-market companies (50–500 employees) standardizing AI tool access across departments with compliance and audit requirements

$18K
Tool: $25/mo (2 mo = $50)Labor: 160h setup × $75 = $12KMargin: 33%Benchmark: $3.6K–$8.8K/project
Deploy and configure up to 20 MCP servers across departments from source, OpenAPI specs, and container images on RayrunBuild granular per-department, per-tool access policies with isolated credential vaults for each business unitIntegrate activity log streaming into client's existing SIEM or logging infrastructure for complianceOptimize tool call routing and document full architecture with runbooks for client's internal IT team
Rayrun Enterprise AI Governanceenterprise

Enterprise organizations (500+ employees) requiring SSO, SCIM provisioning, directory-group access, and signed audit streaming for AI tool governance at scale

$55K
Tool: $25/mo (2 mo = $50)Labor: 480h setup × $75 = $36KMargin: 34%Benchmark: $7.8K–$19.2K/project
Deploy full Rayrun Enterprise environment with OIDC or SAML 2.0 SSO and SCIM 2.0 directory provisioning integrated into client's identity providerConfigure directory-group-based access policies mapping org structure to per-tool, per-client MCP permissions across all business unitsBuild and migrate all existing AI tool integrations onto Rayrun's unified endpoint with encrypted credential vaulting and rollback coverageSet up signed audit log streaming into client's SIEM and deliver governance documentation, runbooks, and admin training program

Scale Economics: Based on Starter Offer

Using Rayrun Starter MCP Deploy at $1.8K/client. Platform: $25/mo. Labor: 4h/client × $75/hr.

5 clients
$9K
MRR
$7.5K net (83%)
10 clients
$18K
MRR
$15.0K net (83%)
20 clients
$36K
MRR
$30.0K net (83%)

Net = MRR - platform cost - labor (4h/client × $75/hr).

Weighted Avg Margin
34%
Across all offer tiers, incl. labor at $75/hr
Run your agency audit

Investment Decision Framework

Strategic vetting analysis for Rayrun

Vetting Verdict

Consider

Favorable fit, worth a closer look

Agency Fit(white-label + resell pathway)
55/100
0255075100
Resell Friction(WL + mode + complexity)
60/100
0255075100

Buy If

5
STRATEGIC DRIVER

Your clients require security review and you need signed audit streaming to their SIEM (Enterprise plan includes OIDC/SAML and SCIM 2.0 provisioning).

OPERATIONAL FIT

You're building AI agent tooling for clients and need to deploy MCP servers without distributing API keys or secrets to each client.

OPERATIONAL FIT

You manage 5+ client accounts and need per-client, per-tool access policies enforced in one place rather than scattered across client configs.

OPERATIONAL FIT

Your agents use Linear, Stripe, or Notion and you want those integrations available without writing adapters.

OPERATIONAL FIT

You want to scaffold MCP projects with Claude or Codex and deploy them without manual credential management.

Skip If

5
DEAL BREAKER

You're reselling to non-technical clients who cannot integrate an MCP endpoint into their existing Claude or Cursor workflows.

CAUTION

Your clients are price-sensitive and you cannot absorb or pass through per-tool-call overage costs beyond the Team plan's 100,000 monthly pooled calls.

CAUTION

You need a white-labeled portal or dashboard to present to clients under your agency brand.

CAUTION

Your clients require HIPAA compliance or FedRAMP certification; Rayrun does not publish these compliance certifications.

CAUTION

You need support for legacy API integrations that are not available as MCP, OpenAPI, npm, or container images.

Bottom Line

Rayrun hosts MCP servers behind a single endpoint, centralizing upstream credentials and enforcing per-client access policies so agencies don't distribute secrets across client environments. It records every tool call, supports deploying from source, remote MCP, OpenAPI, npm, or container images, and integrates with Claude, Cursor, VS Code, and Windsurf. Best for agencies building AI agent tooling or deploying MCP servers across multiple clients. Resale potential exists for agencies serving clients that require security review or multi-tenant credential management, though pricing scales per tool call rather than per-client retainer.

Reality Check

Trade-offs & Gotchas

Rayrun's per-tool-call pricing model (USD 0.2 per 1,000 calls) means agency margins depend on predicting client usage; high-volume agent deployments can exceed the Team plan's 100,000 pooled calls per developer per month. No verified white-label offering means clients see Rayrun branding in their MCP configuration.

Implementation Reality

Moderate effort: standard configuration with some customization needed

Effort: 3/10Time: 4/10

Academy for Rayrun

Work through it in order: the course for this service first, then the modules behind it.

Course for this service

Rayrun Agency Implementation, Secure Multi-Tenant AI Agent Delivery

Learn how to deploy and manage MCP servers for multiple clients using Rayrun's central credential vault and per-client access policies. This course covers server deployment from source code and OpenAPI specs, credential isolation workflows, audit trail setup, and productized agent services that clients can't replicate without your infrastructure.

Open the course

Core concepts

The mental model you need to price and scope the work.

  1. Rayrun Credential Blast RadiusConcept

    Rayrun collapses credential exposure to a single hosted endpoint: upstream keys live in its vault, and each client receives only a token. The framework asks one question per engagement: how many environments would hold that secret without Rayrun? A salon with one OpenAPI integration has a blast radius of one, so the $1,800 Starter MCP Deploy at 16 hours is a clean fit. A five-client agency running separate MCP servers across Claude, Cursor, VS Code, and Windsurf has a blast radius of five or more, and the Team plan at $25 monthly, with its shared credential vault and client-specific access roles, pays for itself the first time a client rotates a key. Model the radius before quoting: the wider it is, the more of the retainer Rayrun's per-tool-call pricing at USD 0.2 per 1,000 calls can absorb without eroding delivery margin.

  2. Wiring Over WidgetsConcept

    The AI agent itself is a commodity, but the value for agencies lies in the integration layer: connecting a pre-built agent to a client's CRM, calendar, and review cycle. This framework shifts focus from selecting the 'best' agent to mastering the wiring process. For example, an agency using Vendasta's white-label AI receptionist for a local business must configure it to match the client's booking rules and follow-up cadence, turning a generic tool into a tailored service. As agentic AI adoption grows (77% of decision-makers now run agents in production), clients expect this customization. Agencies that treat agents as components and invest in repeatable wiring processes can charge retainers for ongoing optimization, rather than one-off setup fees.

  3. Wiring Over WidgetsConcept

    The AI agent market sells finished workers, but the strategic value for agencies lies not in the agent itself, which is increasingly a commodity, but in the wiring that connects it to a specific client's CRM, calendar, and review cycle. This framework, 'Wiring Over Widgets,' argues that agencies that treat agents as components rather than products win. The agent is the widget; the wiring is the integration, customization, and ongoing optimization that turns a generic tool into a tailored solution. For example, a white-label platform like Vendasta provides AI employees, but the agency's role is to configure them for each local business's unique lead flow and follow-up process. This wiring is where retainer pricing originates, as it requires ongoing maintenance and adjustment. Recent research shows that 88% of B2B marketers face foundational gaps, meaning clients need help not just deploying agents, but ensuring their operations can support them. Agencies that master the wiring can charge a premium for the irreducible value they add.

Decision and risk

How to judge the fit, and the ways it goes wrong.

  1. Rayrun Rule: Adopt When Client Tool Calls Stay Under 100,000 Per DeveloperEvaluation Rule

    Adopt Rayrun when per-client credential isolation and per-tool access policies are contractually required and projected tool calls fit inside the pooled 100,000-per-developer Team allowance; otherwise stay on the free tier until a paying client justifies the $25 seat.

  2. AI Agents Rule: Wire the Agent, Not the ProductEvaluation Rule

    Treat the AI agent as a commodity component and focus your value on the integration into the client's specific workflows, systems, and review processes.

  3. Rayrun: Buy vs Skip (Multi-Client MCP Credential Control)Decision Framework

    IF your agency runs MCP servers for two or more clients and needs upstream credentials held centrally with per-client, per-tool allow/ask/block policies, THEN start on the Free tier (USD 0/mo, 25 source-built services, 50,000 tool calls a month) and move to Team at $25/mo per developer once you need the shared credential vault, roles, and 100,000 pooled tool calls per developer. IF client volume stays under roughly 50,000 calls a month and one developer owns delivery, the Free tier covers the work and a paid plan is premature. IF projected usage is unpredictable or clients resist per-call billing, DEFER, because Rayrun charges USD 0.2 per 1,000 calls and margin depends on forecasting client consumption.

  4. The Rayrun Credential Sprawl Trap: Why Agencies Fail With MCP HostingFailure Pattern
  5. The Productized Agent Trap: Why AI Agent Services Stall Without Client-Specific WiringFailure Pattern

11 modules selected for Rayrun

Frequently Asked Questions

Answers about pricing, setup, implementation, and more

Rayrun hosts MCP servers behind a single endpoint, holding upstream service credentials centrally so clients never store secrets. It enforces per-client, per-tool access policies, records every tool call with caller identity and applied policy, and supports deploying servers from source, remote MCP, OpenAPI, npm packages, or container images. Agencies can scaffold MCP projects for Claude or Codex to build, then deploy with one command.

Rayrun offers 3 pricing tiers, at $25/mo (Team). Agencies typically achieve 34% profit margins when reselling to clients.

No verified white-label program. Client-facing MCP configurations and activity surfaces display the Rayrun brand. Agencies can deploy Rayrun infrastructure for clients but cannot rebrand the endpoint or dashboard as their own.

Yes. Rayrun supports Linear as a remote MCP integration (https://mcp.linear.app/mcp) and Stripe as an OpenAPI integration (https://api.stripe.com/openapi.json). Both are available as upstream services in the Rayrun dashboard with no adapter code required.

Initial agency account setup takes 5-10 minutes (sign up, add upstream services). Per-client onboarding depends on policy complexity; a basic setup with Linear and Stripe access takes 10-15 minutes. Clients themselves only need to add one MCP endpoint URL to their config, replacing multiple server entries and secrets.

Agencies building AI agent tooling for clients, teams deploying MCP servers across multiple clients, and organizations that must pass a security review. Best suited for clients running Claude or Cursor with MCP support and needing centralized credential management or audit compliance.

Overage calls are billed at USD 0.2 per 1,000 calls. Agencies can monitor usage in the activity dashboard and either upgrade to Enterprise (custom pricing) or implement client-side rate limits via Rayrun's per-tool access policies.

Rayrun does not publish HIPAA or FedRAMP certifications. Enterprise plan includes OIDC/SAML, SCIM 2.0, and signed audit streaming to a SIEM, which support compliance workflows, but healthcare or government clients should confirm compliance requirements directly with Rayrun sales.