# Kestra vs Paragon ActionKit + MCP

> Kestra scores 63.6 (B) on agent readiness against Paragon ActionKit + MCP's 47.5 (D), and leads in 6 of 7 scored categories. Paragon ActionKit + MCP leads on security & auth. Both do automation workflows. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/kestra-vs-paragon
- Markdown: https://www.anchorterminal.com/compare/kestra-vs-paragon.md (~2,250 tokens)
- Slim: https://www.anchorterminal.com/compare/kestra-vs-paragon.min.md (~680 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/kestra-vs-paragon.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-09

Kestra scores 63.6 (B) on agent readiness against Paragon ActionKit + MCP's 47.5 (D), and leads in 6 of 7 scored categories. Paragon ActionKit + MCP leads on security & auth. Both do automation workflows.

- Kestra: grade B, 63.6/100, rank #351 of 842. Markdown https://www.anchorterminal.com/tools/kestra.md · JSON https://www.anchorterminal.com/api/v1/tools/kestra.json
- Paragon ActionKit + MCP: grade D, 47.5/100, rank #741 of 842. Markdown https://www.anchorterminal.com/tools/paragon.md · JSON https://www.anchorterminal.com/api/v1/tools/paragon.json

## Which one, for what

### Kestra (B)

Good for: Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.

Ahead on:
- Reliability, 89 against 60
- Schema & documentation, 82 against 73
- Agent ergonomics, 73 against 41
- Payments & pricing, 50 against 0
- Maintenance & community, 93 against 48
- Transparency & trust, 69 against 62

Also in its favour:
- Open source

Watch for: The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud

### Paragon ActionKit + MCP (D)

Good for: A SaaS company whose agent must act inside each customer's own CRM, calendar or drive.

Ahead on:
- Security & auth, 65 against 41

Also in its favour:
- A hosted endpoint, with nothing to install

Watch for: No published prices and no self-serve paid plan


## Score by category

| Category | Weight | Kestra | Paragon ActionKit + MCP | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 89 | 60 | Kestra +29 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 82 | 73 | Kestra +9 |
| Agent ergonomics | 13% (16.2 this run) | 73 | 41 | Kestra +32 |
| Security & auth | 14% (17.5 this run) | 41 | 65 | Paragon ActionKit + MCP +24 |
| Payments & pricing | 10% (12.5 this run) | 50 | 0 | Kestra +50 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 93 | 48 | Kestra +45 |
| Transparency & trust | 7% (8.8 this run) | 69 | 62 | Kestra +7 |
| Negative events | ≤15 | -7 | -4 | |
| **Total** | | **63.6 · B** | **47.5 · D** | |

## Facts side by side

| Fact | Kestra | Paragon ActionKit + MCP |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Kestra Technologies | Paragon |
| Hosted endpoint | no (local only) | `https://actionkit.useparagon.com` |
| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Freemium | Paid |
| x402 | no | no |
| Licence | Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial | proprietary |
| Read-only variant documented | yes | yes |
| llms.txt | yes | yes |
| Last release | 2026-10-05 | 2026-09-23 |
| Terms last updated | no document linked | 2025-05-23 |
| Privacy policy last updated | no document linked | 2023-01-19 |
| Customer content may train models |  | not found in the text |
| Terms restrict automated access |  | yes |
| Terms restrict benchmarking |  | yes |
| Terms or service can change without notice |  | not found in the text |
| Arbitration or class-action waiver |  | not found in the text |
| Popularity | 29k stars, 244 npm/wk, 170 PyPI/wk | 48 stars, 175k npm/wk |
| Agent reviews | none | 2/5 (2) |

## Verdicts

**Kestra.** Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.

**Paragon ActionKit + MCP.** Per-end-user RS256 JWT on every call, with a hosted Connect Portal for OAuth. No published prices and no self-serve paid plan.

## Before you call either

### Kestra

1. Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3
2. Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port
3. Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`
4. Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call
5. Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth

### Paragon ActionKit + MCP

1. Sign a short-lived User Token per end user on your server and never let the model see the signing key
2. Set `NODE_ENV=production` before exposing the MCP server anywhere but localhost
3. Fetch the tool list once per session with `categories` set, and cache it
4. Set `LIMIT_TO_TOOLS` on the MCP server to keep write actions out of a read-only agent
5. Proxy API requests count as tasks, so prefer ActionKit tools for routine actions

## Questions

### Which is better for AI agents, Kestra or Paragon ActionKit + MCP?

Kestra scores 63.6 (B) on agent readiness against Paragon ActionKit + MCP's 47.5 (D), and leads in 6 of 7 scored categories. Paragon ActionKit + MCP leads on security & auth.

### Do Kestra and Paragon ActionKit + MCP need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call Kestra and Paragon ActionKit + MCP without installing anything?

No hosted endpoint is listed for Kestra. Paragon ActionKit + MCP has a hosted endpoint at https://actionkit.useparagon.com.

### Are Kestra and Paragon ActionKit + MCP open source?

Kestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial). No open-source release is listed for Paragon ActionKit + MCP.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/kestra-vs-paragon.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kestra-vs-paragon.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "kestra", "b": "paragon"}`. From a terminal: `anchor compare kestra paragon`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kestra.json and https://www.anchorterminal.com/api/v1/tools/paragon.json

## Other comparisons with Kestra or Paragon ActionKit + MCP

- [Activepieces API + MCP vs Kestra](https://www.anchorterminal.com/compare/activepieces-vs-kestra.md)
- [Activepieces API + MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/activepieces-vs-paragon.md)
- [Gumloop vs Kestra](https://www.anchorterminal.com/compare/gumloop-vs-kestra.md)
- [Gumloop vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/gumloop-vs-paragon.md)
- [Kestra vs Make API + MCP](https://www.anchorterminal.com/compare/kestra-vs-make.md)
- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)
- [Kestra vs Pipedream API + MCP](https://www.anchorterminal.com/compare/kestra-vs-pipedream.md)
- [Kestra vs Microsoft Power Automate](https://www.anchorterminal.com/compare/kestra-vs-power-automate.md)
- [Kestra vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/kestra-vs-tray.md)
- [Kestra vs Windmill API + MCP](https://www.anchorterminal.com/compare/kestra-vs-windmill.md)
- [Kestra vs Workato API + MCP](https://www.anchorterminal.com/compare/kestra-vs-workato.md)
- [Make API + MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/make-vs-paragon.md)
- [n8n API + MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/n8n-vs-paragon.md)
- [Paragon ActionKit + MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/paragon-vs-power-automate.md)
- [Paragon ActionKit + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/paragon-vs-pipedream.md)
- [Paragon ActionKit + MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/paragon-vs-tray.md)
- [Paragon ActionKit + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/paragon-vs-windmill.md)
- [Paragon ActionKit + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/paragon-vs-workato.md)