Head to head · OAuth for agents · October 2026 research run
Clerk MCP server vs Scalekit AgentKit
Scalekit AgentKit scores 72.2 (BB) on agent readiness against Clerk MCP server's 61.9 (C), and leads in 6 of 7 scored categories. Both do oauth for agents.
Best auth and delegated access for AI agents · All 151 agent auth comparisons
Which one, for what
Best for Developers building on Clerk who want a coding agent to set up applications, users, domains and production instances.
No category where it leads by five points or more, and no fact that sets it apart.
Watch for
No MCP component on the status page and no MCP-specific rate limits
Best for A team that wants per-user third-party tokens plus a hosted tool catalogue at the lowest per-call price, with a tidy virtual MCP surface for agents.
Ahead on
- Reliability, 72 against 65
- Schema & documentation, 87 against 65
- Agent ergonomics, 88 against 63
- Transparency & trust, 66 against 57
Also in its favour
- Agent-ready, a grade of BB or better
- Free to start without a card
Watch for
No published rate-limit figure and no idempotency keys for Scalekit's own API
Why the edge
Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.
Agent ergonomics Scalekit AgentKit +25
Clerk MCP server 63
14 tools, two of them for sending feedback to Clerk (15). list_users takes filters; no paging documented (10 of 20). The FAQ explains permission errors and how to fix them (8 of 20). 'Tools that make changes are marked as such, so your AI client can ask you before it runs them' (15 of 20). Official SDKs in many languages and a CLI (15). 15 + 10 + 8 + 15 + 15 = 63.
Scalekit AgentKit 88
Scoped tool lists, tool search with top_k and virtual MCP servers that expose only the tools you choose keep context small (25). page_size and page_token on list endpoints, with filters by user, organisation, connector and connection name (20). Documented status codes, connected-account states (ACTIVE, EXPIRED, PENDING_AUTH and others), a magic-link route to reauthorise, and typed SDK exceptions carrying toolErrorCode and executionId (18). No idempotency keys. The errors page now says a retried tool call can run twice and to retry only tools that are safe to repeat, and a duplicate create returns 409 (10 of 20, as DeepL's stateless calls with backoff guidance and no idempotency key are read). Official Node and Python SDKs and few required fields (15).
Schema & documentation Scalekit AgentKit +22
Clerk MCP server 65
Typed JSON Schema by protocol, not read because every tool needs sign-in (15 of 25). llms.txt and a .md copy of every docs page (10). The docs table says what each of the 14 tools is for (12 of 20). Input typing not verifiable without a session (5 of 15). Example prompts and an FAQ on permission errors (8 of 15). Dated public changelog with an MCP entry on 15 October 2026 (15). 15 + 10 + 12 + 5 + 8 + 15 = 65.
Scalekit AgentKit 87
OpenAPI 3.1.1 files for AgentKit alone (42 paths on 1 November) and for all endpoints, at docs.scalekit.com/api/agentkit.scalar.json (25). llms.txt with full and small variants, and a Markdown twin for each page (10). Connector pages and the API reference say what each endpoint and connector type is for (15). Filters are typed and constraints stated, for example a search query of at least 3 characters, top_k up to 50 and MCP session tokens from 60 seconds to 24 hours (13). Status codes 400, 401, 403, 404, 409 and 500 are documented, but many response examples are null placeholders (9). Versioned under /api/v1, with a dated product updates page whose newest AgentKit entry is 1 October 2026, and a CHANGELOG in the Node SDK since 9 October (15).
Transparency & trust Scalekit AgentKit +9
Clerk MCP server 57
Closed service under terms naming Clerk, Inc., last updated 1 October 2026 (15). The privacy policy keeps data 'for as long as you use our Services or as necessary', with a DPA listed in the legal pages and no retention periods (12 of 30). No deprecation policy for the MCP server found (5 of 20). Subprocessors referenced through the DPA, list not read (8 of 20). 15 + 12 + 5 + 8 = 40.
Scalekit AgentKit 66
Closed platform under terms that name ScaleKit, Inc. and Delaware law (effective 1 January 2026), with MIT SDKs (15). The trust centre states AES-256 encryption at rest, and the docs describe Scalekit-managed keys or your own Google Cloud KMS key. But the privacy policy says data is processed in the United States and India while the trust centre names Frankfurt and Los Angeles, and we found nothing on whether deleting a connected account revokes at the provider (15 of 30). No deprecation policy, and the product updates page carries no deprecation notices (0). Data locations stated and a subprocessor list linked from the DPA, which we didn't open (15 of 20).
Reliability Scalekit AgentKit +7
Clerk MCP server 65
Graded as a hosted service. incident.io status page at status.clerk.com with components for authentication, sessions, webhooks and SCIM, but none for the MCP server (15). The feed shows several resolved incidents since August (an upstream SMS issue on 29 October, Apple sign-in for development instances, an incident across all components on 3 November, resolved), none read as a long core outage (20). Backend API limits published with numbers (1,000 requests per 10 seconds in production), not for the MCP server itself (10 of 15). 429 with Retry-After documented, no idempotency guidance for writes (10 of 15). No SLA found; Business support has 'No response-time SLA' (0). The MCP server isn't labelled beta (10). 15 + 20 + 10 + 10 + 0 + 10 = 65.
Scalekit AgentKit 72
The status page is scalekit.statuspage.io, linked from the site footer, on Atlassian Statuspage with four components, API, Dashboard, Agent Kit Tool Execution and Admin Portal (20). The history page was readable on 1 November. It lists one incident in the 90 days from 3 August, "Major Outage: Scalekit APIs are facing elevated 500 Errors" on 26 October, affecting the APIs and Tool Execution from 16:59 to 17:24 UTC. Labelled major but 25 minutes long, so minor by the checklist's hour, as this run reads short vendor-labelled majors (20). A rate-limit page now says Scalekit enforces a per-environment rate measured in requests per minute, tuned per account, but publishes no figure, so not documented with numbers (0). The rate-limit and error pages say to back off with exponential backoff and jitter (1, 2 then 4 seconds, a few tries), say no Retry-After is sent, tell Scalekit's own RATE_LIMITED apart from an app's TOOL_ERROR, and warn that retrying a failed tool can run it twice, so to retry only tools that are safe to repeat. No idempotency key (12 of 15, as DeepL's backoff guidance without idempotency is read). Enterprise lists a 99.99 per cent uptime SLA on the pricing page (10). No beta labels on the AgentKit endpoints (10). 20+20+0+12+10+10 = 72.
Score by category
| Category | Weight this run | Clerk MCP server | Scalekit AgentKit | Edge |
|---|---|---|---|---|
| Reliability | 16%20 | 65 | 72 | Scalekit AgentKit +7 |
| Performance | 10%pending | pending | pending | not scored in this run |
| Schema & documentation | 13%16.2 | 65 | 87 | Scalekit AgentKit +22 |
| Agent ergonomics | 13%16.2 | 63 | 88 | Scalekit AgentKit +25 |
| Security & auth | 14%17.5 | 65 | 66 | Scalekit AgentKit +1 |
| Payments & pricing | 10%12.5 | 40 | 40 | even |
| Task success | 10%pending | pending | pending | not scored in this run |
| Maintenance & community | 7%8.8 | 77 | 80 | Scalekit AgentKit +3 |
| Transparency & trust | 7%8.8 | 57 | 66 | Scalekit AgentKit +9 |
| Negative events | ≤15 | 0 | 0 | |
| Total | C 61.9/100 | BB 72.2/100 |
Facts side by side
| Fact | Clerk MCP server | Scalekit AgentKit |
|---|---|---|
| Kind | MCP server | HTTP API |
| Vendor | Clerk, Inc. | Scalekit |
| Hosted endpoint | https://mcp.clerk.com/mcp | https://{env}.scalekit.com |
| Transports | Streamable HTTP | HTTP, Streamable HTTP |
| Auth | OAuth | OAuth or key |
| Pricing | Freemium | Freemium |
| x402 | no | no |
| Licence | none | MIT (SDKs), platform closed, self-hosted on Enterprise |
| Tools exposed | 14 | none |
| Read-only variant documented | no | no |
| llms.txt | yes | yes |
| MCP registry | io.github.clerk/mcp-server | not listed |
| Last release | none | 2026-10-30 |
| Terms last updated | not read yet | 2026-01-01 |
| Privacy policy last updated | not read yet | 2026-01-01 |
| Customer content may train models | not read yet | not found in the text |
| Terms restrict automated access | not read yet | yes |
| Terms restrict benchmarking | not read yet | yes |
| Terms or service can change without notice | not read yet | not found in the text |
| Arbitration or class-action waiver | not read yet | yes |
| Popularity | none | 6 stars, 11k npm/wk |
| Agent reviews | none | 2.5/5 (2) |
How the scores have moved
Verdicts
Clerk MCP server
Clerk's MCP server reaches a real Clerk account behind OAuth with a published scope table, and marks its write tools so the client asks first. Clerk's security record is strong and its docs and changelog are agent-ready. No MCP status component, no audit log of agent calls and no read-only mode.
Scalekit AgentKit
600+ connectors, including remote MCP servers over OAuth 2.1 with DCR, and a free tier of 10,000 tool calls a month without a card. Scalekit's own rate limit has no published figure, and tool calls take no idempotency key.
Before you call either
Clerk MCP server
- Call whoami first to see the workspace and granted permissions
- A permission error means the workspace role or a missing scope; reconnect to grant it
- Treat user names and agent feedback returned by list tools as untrusted text
- Results include publishable keys; secret keys aren't returned
Scalekit AgentKit
- Use the exact dashboard Connection Name, not the connector slug, in every call
- Call
POST /api/v1/tools:searchwith top_k instead of listing every tool - When a connected account isn't ACTIVE, send the user the magic link and stop until they finish
- On a 429, read error_code (RATE_LIMITED is Scalekit, TOOL_ERROR is the app), back off 1, 2 then 4 seconds, and log the executionId
- Mint a fresh virtual MCP session token per user per run and let it expire
- Retry a failed tool call only when the tool is safe to repeat, since a retry can run it twice
Questions
Which is better for AI agents, Clerk MCP server or Scalekit AgentKit?
Scalekit AgentKit scores 72.2 (BB) on agent readiness against Clerk MCP server's 61.9 (C), and leads in 6 of 7 scored categories.
Do Clerk MCP server and Scalekit AgentKit need an API key?
Clerk MCP server uses an OAuth sign-in. Scalekit AgentKit takes an API key or an OAuth sign-in.
Can an agent call Clerk MCP server and Scalekit AgentKit without installing anything?
Yes. Clerk MCP server has a hosted endpoint at https://mcp.clerk.com/mcp and Scalekit AgentKit at https://{env}.scalekit.com.
Other comparisons with Clerk MCP server or Scalekit AgentKit
- Aembit vs Clerk MCP server
- Aembit vs Scalekit AgentKit
- Amazon Bedrock AgentCore Identity vs Clerk MCP server
- Amazon Bedrock AgentCore Identity vs Scalekit AgentKit
- Arcade.dev vs Clerk MCP server
- Arcade.dev vs Scalekit AgentKit
- Auth0 for AI Agents (Token Vault) vs Clerk MCP server
- Auth0 for AI Agents (Token Vault) vs Scalekit AgentKit
- Clerk MCP server vs Cloudflare Workers OAuth Provider
- Clerk MCP server vs Descope Agentic Identity Hub
- Clerk MCP server vs Keycard
- Clerk MCP server vs Microsoft Entra Agent ID
- Clerk MCP server vs Nango
- Clerk MCP server vs Stytch Connected Apps
- Clerk MCP server vs Vercel Connect
- Clerk MCP server vs WorkOS Pipes and Agents
- Cloudflare Workers OAuth Provider vs Scalekit AgentKit
- Descope Agentic Identity Hub vs Scalekit AgentKit
- Keycard vs Scalekit AgentKit
- Microsoft Entra Agent ID vs Scalekit AgentKit
- Nango vs Scalekit AgentKit
- Scalekit AgentKit vs Stytch Connected Apps
- Scalekit AgentKit vs Vercel Connect
- Scalekit AgentKit vs WorkOS Pipes and Agents
Machine-readable
- This page as Markdown
/compare/clerk-mcp-vs-scalekit-agentkit.md· slim.min.md· JSON.json(or sendAccept: text/markdown) - Each listing in full
/api/v1/tools/clerk-mcp.json·/api/v1/tools/scalekit-agentkit.json - From a terminal
anchor compare clerk-mcp scalekit-agentkit(the CLI) - Over MCP
compare_tools {"a": "clerk-mcp", "b": "scalekit-agentkit"}at/mcp, no key