Debuly
Runlayer logo

Runlayer

Control plane for enterprise AI that governs MCP servers, skills and agents, with discovery of unsanctioned AI use.

Contact sales

What is Runlayer?

Runlayer is a platform that lets companies approve, secure and monitor how employees use AI tools. It places an MCP gateway between AI clients such as Cursor, Claude Code and VS Code and the servers they connect to, so identity, policy and audit logs apply before company systems are reached. A catalog of scanned MCP servers, reusable skills and plugins gives employees approved capabilities, and Runlayer Agents runs hosted background agents on Runlayer infrastructure. Watch finds unsanctioned MCP servers and client configurations on devices through existing device-management tools, and Runtime Security checks risky tool behavior inline. Access can be mapped to users, groups, roles and agents, with SSO and SCIM. It can be hosted by Runlayer or self-hosted on your AWS account or Kubernetes cluster. Pricing is not published; you book a demo.

Use cases

  • Route MCP requests through a governed gateway
  • Discover unsanctioned AI tools on devices
  • Publish approved skills and plugins
  • Block risky agent tool calls
  • Set access policies for agents and users
  • Track AI adoption and cost
  • Run hosted background agents

Who it's for

  • IT and security teams
  • AI platform teams
  • AI transformation leads
  • Engineering managers

Why use Runlayer

  • Gives security teams visibility into AI tools and MCP servers employees use outside approved channels.
  • Employees get approved tools in one place, rather than configuring MCP servers by hand.
  • Policies tie access to your existing identity stack and can be audited afterwards.
  • Choose Runlayer-hosted or self-host the platform in your own cloud.

Runlayer features

  • MCP gateway with identity, policy and audit
  • Catalog of security-scanned MCP servers
  • Reusable skills and plugins for agents
  • Hosted background agents
  • Shadow AI discovery of MCP servers and client configs
  • Runtime security checks on tool use
  • Policy model covering users, groups, roles, agents and tools
  • SSO and SCIM support
  • ROI and observability dashboards
  • Self-hosted deployment on AWS ECS or Kubernetes

Runlayer integrations

  • Cursor
  • Claude Code
  • VS Code
  • GitHub Copilot
  • ChatGPT
  • Claude Desktop
  • Windsurf
  • Slack
  • Linear
  • GitHub
  • Google Drive
  • HubSpot
  • Gmail
  • Jamf
  • Intune
  • Kandji

How to get started with Runlayer

  1. Deploy Runlayer hosted by the vendor, or self-host it on AWS or Kubernetes.
  2. Connect your identity provider and define who can use which tools and resources.
  3. Roll out approved client configurations and shadow AI detection through your device-management tool.
  4. Employees install approved MCP servers, skills and plugins from the catalog.
  5. Review requests, findings and usage in the observability views.

Runlayer limitations

  • Pricing is not published; you book a demo.
  • Self-hosting requires your own AWS or Kubernetes setup and updates.

Runlayer pricing

Runlayer is sold on custom quotes, so its prices aren't published.

Prices can change and may vary by country or exclude tax. Check the official pricing page.

Runlayer alternatives

The main Runlayer alternatives listed on Debuly are Natoma, Portkey, Kong AI Gateway, Orq.ai, Tuning Engines and Speakeasy AI Control Plane. The table compares pricing and platforms; order is A–Z.

Runlayer compared with its alternatives
ToolPricingStarting pricePlatforms
RunlayerContact sales—Web, API, Self-hosted
Kong AI GatewayContact sales—Web, API, Self-hosted
NatomaFreemium—Web, Self-hosted
Orq.aiFreemium—API, Web
PortkeyFreemium$49/moWeb, API, Self-hosted
Speakeasy AI Control PlanePaid$0.35, usage-basedWeb, API, Self-hosted
Tuning EnginesContact sales—Web, API
  1. Kong AI Gateway

    Gateway and control layer for LLM, MCP and agent traffic, with usage metering, billing and cost limits built in.

  2. Natoma

    Enterprise MCP gateway that connects AI agents to company tools with identity, policy and audit controls.

  3. Orq.ai

    AI gateway and control layer that routes requests to 500+ models, with observability, guardrails, budgets and an MCP Gateway.

  4. Portkey

    AI gateway with observability, guardrails, caching and prompt management for teams running LLM apps in production.

  5. Speakeasy AI Control Plane

    Governance layer between AI agents and company systems that connects MCP servers, filters risky data, scopes access by role and logs every tool call.

  6. Tuning Engines

    Control plane that credentials, governs and tracks software AI agents and robots, with an OpenAI-compatible gateway.

Runlayer FAQ

How much does Runlayer cost?

The vendor does not publish prices. Visitors are directed to book a demo.

Is there a free plan for Runlayer?

The vendor does not advertise a free plan.

Who is Runlayer for?

It targets AI platform teams, AI transformation leads and IT and security teams in organizations that need to control AI tool access.

Can Runlayer be self-hosted?

Yes. Documentation covers self-hosting on AWS ECS with Terraform or on a Kubernetes cluster, as well as a hosted single-tenant deployment.

Does Runlayer have an API?

Runlayer Embed is described as exposing the catalog and governance layer as a headless API, and documentation is available at docs.runlayer.com.

What are alternatives to Runlayer?

Alternatives include Natoma, Portkey, Kong AI Gateway, Obot and Docker MCP Gateway.

Sources & verification

Facts on this page come from the official sources below, each with the date we read it. Written by Debuly; the vendor did not review this page.

SourceTypeAccessed
runlayer.com/official
runlayer.com/pricingpricing
runlayer.com/llms/runlayer-vs-natomaofficial
runlayer.com/platformofficial
docs.runlayer.com/deployment/overviewdocs

Image credits

  • Logo: from runlayer.com · fetched · Vendor trademark, used only to identify the product; removed on request
  • Cover: none collected yet, so a generated tile is shown.

Spot an error? Report an issue with this listing. We also remove a logo or image on the owner's request.