{ "data": { "a": { "slug": "arcade", "name": "Arcade.dev", "vendor": "Arcade.dev", "vendorUrl": "https://www.arcade.dev", "kind": "http-api", "category": "agent-auth", "summary": "MCP runtime built around per-user authorisation.", "url": "https://www.anchorterminal.com/tools/arcade", "markdownUrl": "https://www.anchorterminal.com/tools/arcade.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/arcade.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/arcade.json", "repo": "https://github.com/ArcadeAI/arcade-mcp", "license": "MIT (arcade-mcp framework and SDKs), platform closed", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.arcade.dev", "packages": [ { "registry": "npm", "name": "@arcadeai/arcadejs" }, { "registry": "pypi", "name": "arcadepy" }, { "registry": "pypi", "name": "arcade-mcp" } ], "auth": "mixed", "authNotes": "REST calls take the project key as `Authorization: Bearer $ARCADE_API_KEY` and name the end user with `user_id`. MCP gateways sign end users in with OAuth, either Arcade Auth (project members only) or a User Source pointing at your own OIDC provider. Clients that can't run OAuth can send the API key plus an `Arcade-User-ID` header instead.", "pricing": "freemium", "pricingNotes": "Free is $0 with 2,000 auth events and 2,000 tool calls a month, no card, community support. Team is a $25 a month platform fee plus $0.10 per auth event and $0.01 per tool call, with next-business-day email support. Enterprise is custom, with annual bundles, deployment in your VPC or air-gapped, SSO, RBAC and a dedicated forward-deployed engineer (https://www.arcade.dev/pricing). The pricing page doesn't define an auth event.", "priceSummary": "$25 / mo", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1043, "npmWeekly": 124858, "pypiWeekly": 70222, "asOf": "2026-09-30" }, "docsUrl": "https://docs.arcade.dev", "llmsTxt": "https://docs.arcade.dev/llms.txt", "openapi": "https://api.arcade.dev/v1/swagger", "capabilities": [ "auth.oauth", "auth.tokens", "auth.consent", "auth.audit", "agent.tools" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "mcp", "llms-txt", "openapi", "oauth", "python", "typescript", "enterprise", "self-hosted" ], "lastRelease": "2026-09-25", "graded": true, "anchor": { "graded": true, "score": 67, "grade": "B", "agentReady": false, "rank": 147, "ranked": true, "rankOf": 452, "categoryRank": 5, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 74, "payments": 40, "reliability": 63, "schema": 82, "security": 71, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -2, "negativeNotes": [ "2025-12-02, CVE-2025-66454 (GHSA-g2jx-37x6-6438, CVSS 6.5). The HTTP worker in arcade-mcp shipped a hardcoded default worker secret, so anyone could forge a token and list or call every tool on a self-hosted worker set up by the official guide. Fixed in 1.9.1 and disclosed in public, so we deduct 2 of a possible 15 (https://github.com/ArcadeAI/arcade-mcp/security/advisories/GHSA-g2jx-37x6-6438)" ], "verdict": "Consent flow, token storage and refresh, and tool execution in one service, so the model never holds a provider token. The terms of 15 July 2025 call the service an early version provided as is, with no uptime commitment below Enterprise.", "strengths": [ "Consent flow, token storage and refresh, and tool execution in one service, so the model never holds a provider token", "33 built-in auth providers plus generic OAuth 2.0, and hosted MCP gateways that sign users in through your own OIDC provider", "OpenAPI 3.0 file with 39 paths, llms.txt and a typed tool error hierarchy with retry hints", "Per-call prices in public, $0.01 a tool call and $0.10 an auth event, with 2,000 of each free and no card", "Valid security.txt, a SOC 2 Type 2 report and a CVE fixed through a public advisory" ], "weaknesses": [ "The terms of 15 July 2025 call the service an early version provided as is, with no uptime commitment below Enterprise", "Tool inputs and results are training data for up to 5 years unless the organisation opts out", "No published rate limits for the authorise or execute calls, and no 429 in the OpenAPI file", "The public changelog's latest entry is 26 July 2026 and arcadepy hasn't been released since 6 November 2025", "Hosting in the United States only outside Enterprise" ], "agentNotes": [ "Call `POST /v1/tools/authorize` first and send the user the returned URL when the status isn't completed", "Pass a stable user ID from your own database as user_id, never a shared value", "Read retry_after_ms on an UpstreamRateLimitError and wait that long before calling again", "Register your own OAuth app and a custom user verifier before real users sign in, because the default apps only accept members of your Arcade project", "Revoke a user's access with `DELETE /v1/admin/user_connections/{id}`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67 } ], "editorialScores": { "ergonomics": 79, "maintenance": 74, "payments": 40, "reliability": 63, "schema": 82, "security": 71, "transparency": 47 }, "provenanceScore": 96 }, "connect": { "install": "npm install @arcadeai/arcadejs", "http": "curl -X POST https://api.arcade.dev/v1/tools/authorize -H \"Authorization: Bearer $ARCADE_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"tool_name\":\"Gmail.ListEmails\",\"user_id\":\"user-123\"}'", "claudeCode": "claude mcp add --transport http arcade https://api.arcade.dev/mcp/\u003cyour-gateway-slug\u003e", "config": { "mcpServers": { "arcade": { "url": "https://api.arcade.dev/mcp/\u003cyour-gateway-slug\u003e" } } } }, "letme": { "capability": "https://letme.dev/auth.oauth", "tool": "https://letme.dev/arcade" }, "area": "agent-runtime", "unitPrices": [ { "item": "Team plan platform fee", "unit": "month", "usd": 25, "note": "Usage billed on top" }, { "item": "Tool call on Team", "unit": "call", "usd": 0.01, "note": "After the included allowance. Auth events are $0.10 each" } ], "provenance": { "legalEntity": "Arcade AI, Inc.", "domain": "arcade.dev", "domainRegistered": "2019-03-26", "endpointOnVendorDomain": true, "terms": "https://www.arcade.dev/terms-of-service", "privacy": "https://www.arcade.dev/privacy-policy", "statusPage": "https://status.arcade.dev", "changelog": "https://docs.arcade.dev/en/references/changelog", "securityTxt": "valid", "checked": "2026-09-30", "notes": [ "The terms (effective 15 July 2025) name Arcade AI, Inc. and California law." ], "score": 96 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/arcade.json", "live": { "slug": "arcade", "probe": { "target": "https://api.arcade.dev", "method": "get", "lastAt": "2026-10-05T03:17:21.828682862Z", "lastOk": true, "lastStatus": 200, "lastMs": 886, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 600, "p95ms24h": 921, "samples24h": 273, "samples30d": 938, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 38, "ok": 38 } ] }, "vendorStatus": { "page": "https://status.arcade.dev", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T03:18:55.28634685Z" }, "versions": [ { "registry": "npm", "name": "@arcadeai/arcadejs", "version": "2.4.1", "seenAt": "2026-10-04T16:20:45.579808808Z" }, { "registry": "pypi", "name": "arcade-mcp", "version": "1.16.1", "released": "2026-09-25", "seenAt": "2026-10-04T16:20:46.731244096Z" }, { "registry": "pypi", "name": "arcadepy", "version": "1.10.0", "released": "2025-11-06", "seenAt": "2026-10-04T16:20:46.538925772Z" } ], "githubStars": 1044, "npmWeekly": 147047, "pypiWeekly": 89070, "securityTxt": { "url": "https://arcade.dev/.well-known/security.txt", "state": "valid", "expires": "2027-07-20T00:00:00Z", "checkedAt": "2026-10-04T15:15:42.588411925Z" }, "llmsTxt": { "url": "https://docs.arcade.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:15.279748511Z" }, "domain": { "domain": "arcade.dev", "registered": "2019-03-26", "source": "https://pubapi.registry.google/rdap/domain/arcade.dev", "checkedAt": "2026-10-04T13:09:09.815000281Z" }, "pages": [ { "url": "https://docs.arcade.dev/en/references/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:43:12.967090689Z", "changedAt": "2026-10-03T15:31:20.862139392Z", "fingerprint": "fed6349730bd" }, { "url": "https://www.arcade.dev/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:49:11.688685765Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0965f63267b5" }, { "url": "https://www.arcade.dev/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:49:13.767168196Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "03308f7a2c1b" }, { "url": "https://www.arcade.dev/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:49:15.77318424Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "afaf24fae3e3" } ], "updatedAt": "2026-10-05T03:18:55.28634685Z" } }, "b": { "slug": "nango", "name": "Nango", "vendor": "Nango", "vendorUrl": "https://www.nango.dev", "kind": "http-api", "category": "agent-auth", "summary": "Source-available integration platform that handles OAuth, API keys and token refresh for 1,000+ APIs on behalf of your users.", "url": "https://www.anchorterminal.com/tools/nango", "markdownUrl": "https://www.anchorterminal.com/tools/nango.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/nango.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/nango.json", "repo": "https://github.com/NangoHQ/nango", "license": "Elastic License 2.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.nango.dev", "packages": [ { "registry": "npm", "name": "@nangohq/node" }, { "registry": "npm", "name": "@nangohq/frontend" } ], "auth": "mixed", "authNotes": "Backend calls take an environment secret key as `Authorization: Bearer $NANGO_SECRET_KEY`, and API keys can be scoped (agent sessions need `environment:agent_sessions:write`). End users connect through a short-lived connect session token in the Connect UI. An agent session returns its own MCP URL and `session_token`, sent as a Bearer token. The Management MCP at mcp.nango.dev signs in with OAuth.", "pricing": "freemium", "pricingNotes": "Three plans since 2 September 2026. Free is $0 with 10 connections, 10 compute hours and 10 GB of data transfer a month and no card. Pay-as-you-go is $50 a month returned as $50 of usage credits, then $0.29 per connection a month, $0.72 per compute hour and $0.50 per GB. The Growth add-on is $450 a month and adds faster integration delivery (5 days instead of 20) and a private Slack channel, and the changelog of 2 September also puts RBAC, OpenTelemetry export, Connect UI branding, SAML SSO for your team and a HIPAA BAA under it. Enterprise is custom, with connections from $0.01 at volume, 2-day integration delivery, BYOC and self-hosting, dedicated SLAs, and the pricing page lists HIPAA, SAML SSO, SCIM and the audit trail there (https://www.nango.dev/pricing, https://nango.dev/docs/updates/changelog). Free self-hosting covers auth and proxy only, with no MCP server, syncs or webhooks (https://nango.dev/docs/guides/platform/free-self-hosting).", "priceSummary": "$50 / mo", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 469086, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://nango.dev/docs", "llmsTxt": "https://nango.dev/docs/llms.txt", "openapi": "https://raw.githubusercontent.com/NangoHQ/nango/master/docs/spec.yaml", "capabilities": [ "auth.oauth", "auth.tokens", "auth.consent", "auth.audit", "agent.tools", "automation.embedded" ], "tags": [ "hosted", "self-hosted", "freemium", "free-tier", "mcp", "llms-txt", "openapi", "oauth", "typescript", "webhooks", "source-available", "enterprise" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.9, "grade": "B", "agentReady": false, "rank": 135, "ranked": true, "rankOf": 452, "categoryRank": 4, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 90, "payments": 40, "reliability": 78, "schema": 85, "security": 67, "transparency": 78 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "2026-09-04, CVE-2026-9317 (CVSS 9.2). The runner's tRPC server in Nango before 0.71.6 didn't enforce RUNNER_SECRET_KEY, so anyone who could reach the runner port could run arbitrary JavaScript. Fixed in 0.71.6. Recent and critical, though it needs network access to the runner (https://github.com/advisories/GHSA-9cph-w8mv-q56r)", "2026-09-16, CVE-2026-92804 (high). Nango through 0.70.4 didn't validate caller-supplied connection configuration values. Fixed in later releases. Together with the runner flaw we deduct 5, less than the maximum because both are fixed and disclosed (https://github.com/advisories/GHSA-29mm-6vmq-g8cg)" ], "verdict": "1,000+ APIs with OAuth, API key and client-credentials auth handled. Audit trail only on Enterprise, and logs kept 15 days on every plan.", "strengths": [ "1,000+ APIs with OAuth, API key and client-credentials auth handled", "Per-tenant agent sessions served as an MCP server, credentials never shown to the agent", "Encryption, retention and deletion rules published in the docs", "Per-unit prices in public ($0.29 a connection a month) and a free plan with no card", "Source on GitHub under ELv2, 31 open issues against more than 7,000 filed" ], "weaknesses": [ "Audit trail only on Enterprise, and logs kept 15 days on every plan", "Two CVEs fixed in September 2026, one critical, neither on Nango's own advisory page", "Status page tracks a single component", "No prompt-injection guidance for content agent sessions pass through", "ELv2 bars offering Nango itself as a hosted service" ], "agentNotes": [ "Create one agent session per tenant from your backend and pass only the mcp_url and session_token to the agent", "Tag connections with your own user and organisation IDs so sessions can select them", "Listen for the refresh-failure webhook and send the user a reconnect link instead of retrying", "Read the rate-limit headers on a 429 and wait for the reset before resuming", "Run 0.71.6 or later when self-hosting, and keep the runner port off the network" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.9 } ], "editorialScores": { "ergonomics": 74, "maintenance": 90, "payments": 40, "reliability": 78, "schema": 85, "security": 67, "transparency": 63 }, "provenanceScore": 92 }, "connect": { "install": "npm install @nangohq/node", "http": "curl -X POST https://api.nango.dev/connect/sessions -H \"Authorization: Bearer $NANGO_SECRET_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"tags\":{\"end_user_id\":\"user-123\"}}'", "claudeCode": "claude mcp add --transport http nango-management --scope user https://mcp.nango.dev/mcp", "config": { "mcpServers": { "nango-management": { "url": "https://mcp.nango.dev/mcp" } } } }, "letme": { "capability": "https://letme.dev/auth.oauth", "tool": "https://letme.dev/nango" }, "area": "agent-runtime", "unitPrices": [ { "item": "Pay-as-you-go subscription", "unit": "month", "usd": 50, "note": "Returned as $50 of usage credits each month" }, { "item": "Connection on Pay-as-you-go", "unit": "account-month", "usd": 0.29, "note": "Per connected end-user account per month" }, { "item": "Data transfer on Pay-as-you-go", "unit": "gb", "usd": 0.5, "note": "10 GB a month free. Compute is $0.72 an hour" }, { "item": "Growth add-on", "unit": "month", "usd": 450, "note": "Faster integration delivery, private Slack, RBAC, branding, SAML SSO, HIPAA BAA" } ], "provenance": { "legalEntity": "Nango Inc", "domain": "nango.dev", "domainRegistered": "2022-05-31", "endpointOnVendorDomain": true, "terms": "https://www.nango.dev/terms", "privacy": "https://www.nango.dev/privacy-policy", "statusPage": "https://status.nango.dev", "changelog": "https://nango.dev/docs/updates/changelog", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The legal entity comes from the copyright line in the repository's LICENSE_SHORT, because we couldn't read the terms page on 2026-09-30.", "SECURITY.md asks for reports to security@nango.dev or a private GitHub advisory. The Trust Center at trust.nango.dev holds the SOC 2 report.", "status.nango.dev is a Better Stack page with one component, Nango Cloud Health." ], "score": 92 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/nango.json", "live": { "slug": "nango", "probe": { "target": "https://api.nango.dev", "method": "get", "lastAt": "2026-10-05T03:17:29.320131841Z", "lastOk": true, "lastStatus": 200, "lastMs": 426, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 449, "p95ms24h": 527, "samples24h": 273, "samples30d": 938, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 38, "ok": 38 } ] }, "vendorStatus": { "page": "https://status.nango.dev", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-04T21:40:15.983421149Z" }, "versions": [ { "registry": "github", "name": "NangoHQ/nango", "version": "v0.71.12", "released": "2026-10-02", "seenAt": "2026-10-04T16:34:17.295643211Z" }, { "registry": "npm", "name": "@nangohq/frontend", "version": "0.71.12", "seenAt": "2026-10-04T16:34:15.84943577Z" }, { "registry": "npm", "name": "@nangohq/node", "version": "0.71.12", "seenAt": "2026-10-04T16:34:15.032017504Z" } ], "githubStars": 12512, "npmWeekly": 605062, "securityTxt": { "url": "https://nango.dev/.well-known/security.txt", "state": "valid", "expires": "2027-12-31T23:59:59.000Z", "checkedAt": "2026-10-04T15:15:47.082341179Z" }, "llmsTxt": { "url": "https://nango.dev/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:18:02.723630139Z" }, "domain": { "domain": "nango.dev", "registered": "2022-05-31", "source": "https://pubapi.registry.google/rdap/domain/nango.dev", "checkedAt": "2026-10-04T13:09:24.044829714Z" }, "pages": [ { "url": "https://nango.dev/docs/updates/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:46:08.862094314Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5d603945f9f6" }, { "url": "https://www.nango.dev/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-04T15:51:25.76214842Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "de303d4e1a64" }, { "url": "https://www.nango.dev/privacy-policy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-04T15:51:28.18451084Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2b1d4741bc37" }, { "url": "https://www.nango.dev/terms", "kind": "terms", "status": 304, "checkedAt": "2026-10-04T15:51:30.200662946Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b8fadd3f9456" } ], "updatedAt": "2026-10-05T03:17:29.320131841Z" } }, "summary": "Nango has a score of 67.9 (B) against Arcade.dev's 67 (B). Both do auth oauth. The largest gap is maintenance \u0026 community, 16 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/arcade-vs-nango", "json": "https://www.anchorterminal.com/compare/arcade-vs-nango.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/arcade-vs-nango.md", "slim": "https://www.anchorterminal.com/compare/arcade-vs-nango.min.md" }, "markdown": "Nango has a score of 67.9 (B) against Arcade.dev's 67 (B). Both do auth oauth. The largest gap is maintenance \u0026 community, 16 points.\n\n- Arcade.dev: grade B, 67/100, rank #147 of 452. Markdown https://www.anchorterminal.com/tools/arcade.md · JSON https://www.anchorterminal.com/api/v1/tools/arcade.json\n- Nango: grade B, 67.9/100, rank #135 of 452. Markdown https://www.anchorterminal.com/tools/nango.md · JSON https://www.anchorterminal.com/api/v1/tools/nango.json\n\n## Which one, for what\n\nPick Arcade.dev for agent ergonomics (+5).\n\nPick Nango for reliability (+15), maintenance \u0026 community (+16), transparency \u0026 trust (+6).\n\n## Score by category\n\n| Category | Weight | Arcade.dev | Nango | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 63 | 78 | Nango +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 85 | Nango +3 |\n| Agent ergonomics | 13% (16.2 this run) | 79 | 74 | Arcade.dev +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 67 | Arcade.dev +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 90 | Nango +16 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 78 | Nango +6 |\n| Negative events | ≤15 | -2 | -5 | |\n| **Total** | | **67 · B** | **67.9 · B** | |\n\n## Facts side by side\n\n| Fact | Arcade.dev | Nango |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Arcade.dev | Nango |\n| Hosted endpoint | `https://api.arcade.dev` | `https://api.nango.dev` |\n| Transports | HTTP, Streamable HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT (arcade-mcp framework and SDKs), platform closed | Elastic License 2.0 |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | not listed |\n| Last release | 2026-09-25 | 2026-09-30 |\n| Popularity | 1k stars, 125k npm/wk, 70k PyPI/wk | 469k npm/wk |\n| Agent reviews | 2.5/5 (2) | 3.5/5 (2) |\n\n## Verdicts\n\n**Arcade.dev.** Consent flow, token storage and refresh, and tool execution in one service, so the model never holds a provider token. The terms of 15 July 2025 call the service an early version provided as is, with no uptime commitment below Enterprise.\n\n**Nango.** 1,000+ APIs with OAuth, API key and client-credentials auth handled. Audit trail only on Enterprise, and logs kept 15 days on every plan.\n\n## Before you call either\n\n### Arcade.dev\n\n1. Call `POST /v1/tools/authorize` first and send the user the returned URL when the status isn't completed\n2. Pass a stable user ID from your own database as user_id, never a shared value\n3. Read retry_after_ms on an UpstreamRateLimitError and wait that long before calling again\n4. Register your own OAuth app and a custom user verifier before real users sign in, because the default apps only accept members of your Arcade project\n5. Revoke a user's access with `DELETE /v1/admin/user_connections/{id}`\n\n### Nango\n\n1. Create one agent session per tenant from your backend and pass only the mcp_url and session_token to the agent\n2. Tag connections with your own user and organisation IDs so sessions can select them\n3. Listen for the refresh-failure webhook and send the user a reconnect link instead of retrying\n4. Read the rate-limit headers on a 429 and wait for the reset before resuming\n5. Run 0.71.6 or later when self-hosting, and keep the runner port off the network\n\n## Other comparisons with Arcade.dev or Nango\n\n- [Arcade.dev vs Auth0 for AI Agents (Token Vault)](https://www.anchorterminal.com/compare/arcade-vs-auth0-ai-agents.md)\n- [Arcade.dev vs Descope Agentic Identity Hub](https://www.anchorterminal.com/compare/arcade-vs-descope-agentic-identity.md)\n- [Arcade.dev vs Keycard](https://www.anchorterminal.com/compare/arcade-vs-keycard.md)\n- [Arcade.dev vs Scalekit AgentKit](https://www.anchorterminal.com/compare/arcade-vs-scalekit-agentkit.md)\n- [Arcade.dev vs Stytch Connected Apps](https://www.anchorterminal.com/compare/arcade-vs-stytch-connected-apps.md)\n- [Arcade.dev vs WorkOS Pipes and Agents](https://www.anchorterminal.com/compare/arcade-vs-workos-pipes.md)\n- [Auth0 for AI Agents (Token Vault) vs Nango](https://www.anchorterminal.com/compare/auth0-ai-agents-vs-nango.md)\n- [Descope Agentic Identity Hub vs Nango](https://www.anchorterminal.com/compare/descope-agentic-identity-vs-nango.md)\n- [Keycard vs Nango](https://www.anchorterminal.com/compare/keycard-vs-nango.md)\n- [Nango vs Scalekit AgentKit](https://www.anchorterminal.com/compare/nango-vs-scalekit-agentkit.md)\n- [Nango vs Stytch Connected Apps](https://www.anchorterminal.com/compare/nango-vs-stytch-connected-apps.md)\n- [Nango vs WorkOS Pipes and Agents](https://www.anchorterminal.com/compare/nango-vs-workos-pipes.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Arcade.dev vs Nango", "url": "" } ], "description": "Nango has a score of 67.9 (B) against Arcade.dev's 67 (B). Both do auth oauth. The largest gap is maintenance \u0026 community, 16 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Arcade.dev B 67", "Nango B 67.9", "scores" ], "h1": "Arcade.dev vs Nango", "image": "https://www.anchorterminal.com/assets/og/compare-arcade-vs-nango.png", "path": "/compare/arcade-vs-nango", "published": "2026-10-01", "section": "tools", "title": "Arcade.dev vs Nango for AI agents, B 67 vs B 67.9 | Anchor Terminal", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/arcade-vs-nango" }, "tokens": { "markdown": 1450, "slim": 330 }, "version": 1 }