Runlayer vs Rippling: The Cautionary Tale That AI Built

When software becomes trivial to build, the customer you demo for can become the competitor who ships first

Published: 2026-08-22 Category: Quick Take Sources: TechCrunch — Runlayer, Rippling drop lawsuits, but the brouhaha is a cautionary tale for founders

What Happened

On Wednesday night, Runlayer and Rippling dropped their respective lawsuits against each other. No settlement. No money changed hands. Not even lawyers' fees, according to court documents seen by TechCrunch.

The public fight started when Rippling, after testing Runlayer's MCP gateway for more than a year — with the two engineering teams working closely together — never signed on as a customer. Instead, according to Runlayer's lawsuit, a Rippling employee texted that Rippling was building its own MCP gateway and planned to release it as a product, one the employee described as a "clone" of Runlayer's. Runlayer sued, claiming Rippling violated contractual agreements covering the product tests. Runlayer dropped its suit after three weeks in discovery; Rippling dropped its own without collecting a settlement.

Why It Matters

The MCP gateway sits in the plumbing of the agentic enterprise. It securely handles an AI agent's requests for data from other software systems — so when a hiring manager asks for details on the top five candidates, the gateway retrieves that data from the recruitment system instead of granting the agent direct access to company software. It layers on role-based access control (managers get different access than interns), observability, and usage trails.

That's a genuinely important piece of infrastructure. It's also, in the age of AI-assisted coding, embarrassingly easy to build. And that's the real story.

The Cautionary Tale

The takeaway TechCrunch draws is sharp and worth repeating to every founder: in the age of AI, when building new software has become almost trivial, you never know who your next competitor will be. It might even be a prospective customer.

Rippling — an HR/payroll company, not an AI security company — now competes with the likes of Runlayer, Docker, and Amazon Bedrock in the AI security business, with an MCP gateway that ties AI access to employee roles. Meanwhile Runlayer's pitch is a broader bundle of agent security services: agent creation, spotting shadow AI agents running unbeknownst to IT.

The Deeper Signal

This is a structural shift in how competition works. Historically, a customer who liked your product but wouldn't pay became a non-event. Today, that same customer can fork your value proposition internally and ship a competing product in months, because the moat isn't the engineering — it's distribution, data, and trust. Rippling had enterprise distribution already. The build was the easy part.

The no-settlement ending matters too. Nobody admitted wrongdoing, nobody paid. The lawsuits were, functionally, a public negotiation that evaporated once discovery got expensive. For founders, the real cost was the lesson: your "evaluation" is often a free research-and-development period for a future competitor. Protect what you show, and understand that in the agentic era, the line between customer and rival is dangerously thin.

Based on reporting by TechCrunch.