{ "data": { "a": { "slug": "merge-agent-handler", "name": "Merge Agent Handler", "vendor": "Merge API, Inc.", "vendorUrl": "https://www.merge.dev", "kind": "mcp", "category": "aggregator", "summary": "Merge Agent Handler is a hosted MCP server from Merge API, Inc. that gives AI agents tools across more than 190 third-party connectors, with per-user credentials, tool packs, a security gateway and logs of every call.", "url": "https://www.anchorterminal.com/tools/merge-agent-handler", "markdownUrl": "https://www.anchorterminal.com/tools/merge-agent-handler.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/merge-agent-handler.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/merge-agent-handler.json", "license": "Proprietary service under Merge's Master Services Agreement. The Merge CLI package `merge-api` on PyPI is marked MIT, and the repository its PyPI page links (github.com/merge-api/merge-cli) answered 404 on 8 October 2026", "transports": [ "streamable-http", "http" ], "remoteUrl": "https://ah-api.merge.dev/mcp", "packages": [ { "registry": "pypi", "name": "merge-api" } ], "auth": "mixed", "authNotes": "Self-serve. Each call carries an access key in `Authorization: Bearer \u003ckey\u003e` against `https://ah-api.merge.dev/api/v1/tool-packs/\u003cTOOL_PACK_ID\u003e/registered-users/\u003cREGISTERED_USER_ID\u003e/mcp`. The production key covers the whole organisation. `POST /api/v1/access-keys/` mints narrower keys that name Registered Users and Tool Packs, carry `runtime:all` or `management:all`, and expire. Test keys reach a separate sandbox. The simplified URL `https://ah-api.merge.dev/mcp` signs a person in with OAuth (it answered 401 with a `resource_metadata` pointer when we called it without credentials). End users connect each third-party account through Merge Link or a magic link, and Merge stores those credentials. The docs describe an unauthenticated `POST /api/v1/agent/signup/` that creates an organisation and returns a key. We did not call it.", "pricing": "freemium", "pricingNotes": "Free is 2,000 credits a month with no card, one credit per tool call, and tool calls answer 402 `billing_limit_reached` once the credits are spent. Pro is $1,000 a month for 25,000 credits, with steps listed at $1,175, $1,550, $2,250, $2,800 and $3,200 for 30,000, 40,000, 60,000, 80,000 and 100,000 credits, plus 2,000 bonus credits per the billing docs. Pro overage is billed at month end at a rate the pricing page doesn't state. Failed calls, blocked calls and test-key calls spend credits, and `tools/list` doesn't. Enterprise and Employees Pro are priced on contract (https://www.merge.dev/pricing/agent-handler, checked 2026-10-08).", "priceSummary": "$1000 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Agent Handler docs index, the OpenAPI file or the pricing page. The API's 402 is a plan limit, `billing_limit_reached`, not a payment protocol (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": 681, "asOf": "2026-10-08" }, "docsUrl": "https://docs.merge.dev/merge-agent-handler/overview", "llmsTxt": "https://docs.merge.dev/merge-agent-handler/llms.txt", "openapi": "https://docs.merge.dev/openapi/agent-handler-api.json", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "auth.audit" ], "tags": [ "hosted", "mcp", "freemium", "free-tier", "no-card", "oauth", "openapi", "llms-txt", "cli", "python", "enterprise", "status-page", "soc2", "closed-source" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 69.5, "grade": "B", "agentReady": false, "rank": 183, "ranked": true, "rankOf": 950, "categoryRank": 2, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 68, "maintenance": 69, "payments": 55, "reliability": 59, "schema": 80, "security": 83, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Agent Handler's access keys can be limited to named users, tool packs and a runtime scope, with an expiry, and an agent can create an account with one documented request. No rate limit figures are published, Pro starts at $1,000 a month with no published overage rate, and failed or blocked calls spend credits.", "bestFor": "A product team whose agent acts in customers' SaaS accounts and needs per-user credentials, key scoping, redaction rules and logs in one hosted layer, and teams already on Merge's Unified API.", "strengths": [ "Access keys can be limited to named Registered Users and Tool Packs and to the `runtime:all` scope, with an expiry. A child key is never wider than its parent", "The docs and OpenAPI file describe `POST /api/v1/agent/signup/`, which needs no credentials and returns a key, a tool pack and a registered user", "The Free plan has 2,000 credits a month, one per tool call, and the quickstart says signup needs no card", "Tool Call Logs record arguments, results, redactions and a latency breakdown per call, and every MCP result carries a request id that matches the log row", "Changelog entries for Agent Handler are dated 18 September, 25 September and 2 October 2026" ], "weaknesses": [ "No rate limit figures are published. The docs say only that MCP tool calls are limited per Registered User and per organisation, by the minute", "Pro starts at $1,000 a month for 25,000 credits, and the overage rate isn't on the pricing page", "Every `tools/call` spends a credit, including failed calls, calls blocked by a rule and calls made with a test key", "AI Guardrails let a call through when the evaluator fails or is unreachable, and new guardrails screen requests only, by default", "The master production key reaches every user and tool pack and can't be revoked, only regenerated. Agent signup returns an unrestricted key" ], "agentNotes": [ "Call `search_tools` with a plain-language intent before `tools/list`. A Tool Pack can hold hundreds of tools and Slack alone lists 50", "Add `?connectors=slack` to the MCP URL to limit a connection to named connectors, and `?paginated=true` only if the client follows `nextCursor`", "Carry a user-scoped key with `runtime:all` only. The production key reaches every Registered User and the management endpoints", "On `reauth_required` read `data.reauth_reason`, then call `authenticate_\u003cconnector\u003e` by name. Intent search doesn't return the authenticate tools", "Pin `MCP-Protocol-Version` to `2025-03-26` when context is tight. Later revisions repeat object results in `structuredContent`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.5 } ], "editorialScores": { "ergonomics": 68, "maintenance": 69, "payments": 55, "reliability": 59, "schema": 80, "security": 83, "transparency": 58 }, "provenanceScore": 83 }, "connect": { "install": "pipx install merge-api", "http": "curl -X POST \"https://ah-api.merge.dev/api/v1/tool-packs/$TOOL_PACK_ID/registered-users/$REGISTERED_USER_ID/mcp\" \\\n -H \"Authorization: Bearer $MERGE_AGENT_HANDLER_API_KEY\" -H \"Content-Type: application/json\" \\\n -H \"Accept: application/json, text/event-stream\" \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\"}'", "claudeCode": "claude mcp add --transport http agent-handler https://ah-api.merge.dev/mcp", "config": { "mcpServers": { "agent-handler": { "headers": { "Authorization": "Bearer \u003cYOUR_API_KEY\u003e" }, "url": "https://ah-api.merge.dev/api/v1/tool-packs/\u003cTOOL_PACK_ID\u003e/registered-users/\u003cREGISTERED_USER_ID\u003e/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/merge-agent-handler" }, "sameCompany": [ "merge-accounting" ], "area": "business", "unitPrices": [ { "item": "Pro plan, 25,000 credits", "unit": "month", "usd": 1000, "note": "One credit per tool call. 2,000 bonus credits. Overage billed at month end, rate not published" }, { "item": "Pro plan, 100,000 credits", "unit": "month", "usd": 3200, "note": "Largest self-serve step on the pricing page" } ], "provenance": { "legalEntity": "Merge API, Inc.", "domain": "merge.dev", "domainRegistered": "2020-02-09", "endpointOnVendorDomain": true, "terms": "https://www.merge.dev/legal/msa", "privacy": "https://www.merge.dev/legal/privacy-policy", "statusPage": "https://status.merge.dev", "changelog": "https://www.merge.dev/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Master Services Agreement, last updated 9 September 2026, names Merge API, Inc., a Delaware corporation at 353 Sacramento St., Floor 21, San Francisco, CA 94111, and applies to a customer who clicks to accept or uses the Service. merge.dev/legal/terms is a Terms of Use for the website.", "A separate Subscriber Agreement (last updated 2 April 2026) is written around End Customers and Merge Integrations, the Unified API's terms. Neither agreement names Agent Handler, so the MSA is our reading of which one governs it.", "The privacy policy was last revised 20 August 2026. It leaves data processed for a customer to the customer agreement and the Data Processing Addendum.", "The API and MCP server answer at ah-api.merge.dev and the dashboard at ah.merge.dev.", "www.merge.dev/.well-known/security.txt returned 404. The security page gives security@merge.dev and a vulnerability disclosure programme.", "RDAP for merge.dev gives a registration date of 2020-02-09.", "status.merge.dev runs on Sorry and lists Merge Agent Handler as a component. It shows 30 days of notices." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/merge-agent-handler.json", "live": { "slug": "merge-agent-handler", "probe": { "target": "https://ah-api.merge.dev/mcp", "method": "mcp-initialize", "lastAt": "2026-10-10T01:37:58.412602364Z", "lastOk": true, "lastStatus": 401, "lastMs": 1402, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 459, "p95ms24h": 1439, "samples24h": 186, "samples30d": 186, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 169 }, { "date": "2026-10-10", "probes": 17, "ok": 17 } ] }, "vendorStatus": { "page": "https://status.merge.dev", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:48.030989122Z" }, "versions": [ { "registry": "pypi", "name": "merge-api", "version": "0.5.0", "released": "2026-10-05", "seenAt": "2026-10-09T17:05:00.230768649Z" } ], "pypiWeekly": 708, "securityTxt": { "url": "https://merge.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:39:39.570097881Z" }, "llmsTxt": { "url": "https://docs.merge.dev/merge-agent-handler/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:02:28.719651564Z" }, "pages": [ { "url": "https://www.merge.dev/pricing/agent-handler", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:52:17.837889276Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "540abebfdc1b" }, { "url": "https://www.merge.dev/legal/msa", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:52:09.678065655Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3561c8e50650" } ], "mcpTools": { "url": "https://ah-api.merge.dev/mcp", "checkedAt": "2026-10-09T21:40:45.658810474Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-09T21:40:45.658810474Z" }, "updatedAt": "2026-10-10T01:37:58.412602364Z" } }, "answer": "Merge Agent Handler scores 69.5 (B) on agent readiness against One's 66.6 (B), and leads in 4 of 7 scored categories. One leads on reliability, agent ergonomics and maintenance \u0026 community.", "b": { "slug": "one", "name": "One", "vendor": "One Systems, Inc.", "vendorUrl": "https://www.withone.ai", "kind": "mcp", "category": "aggregator", "summary": "One is a hosted MCP server and CLI from One Systems, Inc. (formerly Pica) that lets AI agents find and run actions in a user's connected apps, with credentials held by One and access scoped per connection.", "url": "https://www.anchorterminal.com/tools/one", "markdownUrl": "https://www.anchorterminal.com/tools/one.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/one.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/one.json", "repo": "https://github.com/withoneai/mcp", "license": "Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://mcp.withone.ai/mcp", "packages": [ { "registry": "npm", "name": "@withone/mcp" }, { "registry": "npm", "name": "@withone/cli" } ], "auth": "mixed", "authNotes": "Self-serve. The remote server uses OAuth 2.1 authorisation code with PKCE (S256). The client registers itself at `https://mcp.withone.ai/oauth/register` as a public client, a person signs in to One in a browser, and the consent screen picks the account, Production or Sandbox, and an access level per connection. Scopes are `connections:read` and `connections:write` under `user:`, `org:` and `project:`, and a client that asks for none gets all six. Access tokens last one hour, with a 30-day refresh token when the client registers that grant. The local package and the REST API take an API key in the `x-one-secret` header, and a key created through the CLI's browser sign-in carries the same per-connection limits. Third-party accounts are connected in the dashboard or with `one add \u003cplatform\u003e`, and One stores those credentials.", "pricing": "freemium", "pricingNotes": "Free is $0 with 1M requests a month, 20 requests a minute, one organisation and one project. Starter is $29 a month at 100 requests a minute and Pro is $199 a month at 500, each with 1M requests a month. Enterprise is priced on contract. Requests over the limit answer 429 and there is no overage charge. A cloud agent on a dedicated server is $40 a month on any plan. The pricing page doesn't say whether sign-up needs a card. The API authentication page says both environments include unlimited API calls, which doesn't match the 1M a month on the pricing page (https://www.withone.ai/pricing, checked 2026-10-09).", "priceSummary": "$29 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the MCP docs, the pricing page or the OpenAPI file. The API's 402 responses are described as a plan quota, not a payment protocol (checked 2026-10-09).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": 11, "npmWeekly": 681, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.withone.ai/docs/mcp", "llmsTxt": "https://www.withone.ai/llms.txt", "openapi": "https://www.withone.ai/openapi.json", "registryName": "ai.withone/mcp", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "auth.audit" ], "tags": [ "hosted", "mcp", "freemium", "free-tier", "oauth", "openapi", "llms-txt", "cli", "typescript", "status-page", "mcp-registry" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 66.6, "grade": "B", "agentReady": false, "rank": 282, "ranked": true, "rankOf": 950, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 86, "payments": 30, "reliability": 82, "schema": 77, "security": 69, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -3, "negativeNotes": [ "Between 13 July and 30 September 2026 the remote MCP server's tools changed from four to three. The changelog entry of 13 July 2026 says the remote server has the same four tools as the local one, and the local package's 2.0.0 commit of 30 September 2026 removes `search_one_platform_actions` and `get_one_action_knowledge` for `find_one_actions`, which it calls the tool the remote server already serves. The site's changelog has no entry for the change. The local package marked it as a major version. Three points off (https://www.withone.ai/changelog, https://github.com/withoneai/mcp)." ], "verdict": "One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026.", "bestFor": "A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.", "strengths": [ "The remote server has three tools whatever the number of connections, and `find_one_actions` returns large documents as a digest with sections loaded on request", "The consent screen sets Full access, Read \u0026 write, Read only or a ticked list of actions per connection, and One enforces the grant on every call", "Access tokens last one hour, and changing or revoking a grant in the dashboard applies on the agent's next call", "Every plan, Free included, lists the same platforms and controls. Plans differ by requests per minute (20, 100, 500), organisations and projects, with no overage charge", "The server is in the official MCP registry as `ai.withone/mcp`, and the CLI had 14 npm releases between 25 August and 6 October 2026" ], "weaknesses": [ "The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it", "The home and security pages say nothing from a call is stored. The privacy policy says request logs may include integration payloads, kept 14 to 90 days by default", "The SOC 2 audit is described as in progress, `/.well-known/security.txt` returned 404, and no bug bounty or published advisories were found", "`execute_one_action` takes a free-form `data` body and returns the upstream response whole. No control on response size was found", "The Data Processing Agreement is available only on request, and no deprecation policy was found" ], "agentNotes": [ "Call `list_one_integrations` first and read each connection's `access` field. When the policy is `actions`, run those ids directly without calling `find_one_actions`", "Send every operation a task needs in one `find_one_actions` call, up to 10 `requests`, each a platform and a short intent with no IDs, names or message text", "When a document comes back as a digest, call `find_one_actions` again with `load` and a `section` name. Don't guess parameters the digest left out", "After a timeout on `execute_one_action`, check whether the write took effect before sending it again. No idempotency key is documented", "A 403 for a call outside the grant won't succeed on retry. Ask the user to widen the grant in the dashboard or reconnect" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.6 } ], "editorialScores": { "ergonomics": 73, "maintenance": 86, "payments": 30, "reliability": 82, "schema": 77, "security": 69, "transparency": 54 }, "provenanceScore": 72 }, "connect": { "install": "npm install -g @withone/cli \u0026\u0026 one init", "claudeCode": "claude mcp add --transport http one https://mcp.withone.ai/mcp", "config": { "mcpServers": { "one": { "type": "http", "url": "https://mcp.withone.ai/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/one" }, "area": "business", "unitPrices": [ { "item": "Starter plan", "unit": "month", "usd": 29, "note": "1M requests a month, 100 requests a minute, 20 organisations and 20 projects" }, { "item": "Pro plan", "unit": "month", "usd": 199, "note": "1M requests a month, 500 requests a minute, 100 organisations and 100 projects" }, { "item": "Cloud agent on a dedicated server", "unit": "month", "usd": 40, "note": "Per agent, added to any plan" } ], "provenance": { "legalEntity": "One Systems, Inc.", "domain": "withone.ai", "domainRegistered": "2026-01-22", "endpointOnVendorDomain": true, "terms": "https://www.withone.ai/terms", "privacy": "https://www.withone.ai/privacy", "statusPage": "https://status.withone.ai", "changelog": "https://www.withone.ai/changelog", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms of Service, last updated 6 March 2026, name One Systems, Inc. of San Francisco and cover the website, platform, APIs and SDKs under California law. No state of incorporation is given.", "The privacy policy, last updated 22 July 2026, governs account and usage data. For data passing through connected apps it points to a Data Processing Agreement that is available on request and not published.", "RDAP gives a registration date of 2026-01-22 for withone.ai. The product traded as Pica on picaos.com before 25 March 2026.", "www.withone.ai/.well-known/security.txt returned 404. The security page gives security@withone.ai for disclosure.", "status.withone.ai is a Better Stack page created in March 2025. We did not find a link to it on the vendor pages we read.", "The MCP server answers at mcp.withone.ai and the REST API at api.withone.ai." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/one.json", "live": { "slug": "one", "probe": { "target": "https://mcp.withone.ai/mcp", "method": "mcp-initialize", "lastAt": "2026-10-10T01:38:01.031573401Z", "lastOk": true, "lastStatus": 401, "lastMs": 140, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 172, "p95ms24h": 260, "samples24h": 102, "samples30d": 102, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 17, "ok": 17 } ] }, "vendorStatus": { "page": "https://status.withone.ai", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:54.124632614Z" }, "versions": [ { "registry": "github", "name": "withoneai/mcp", "version": "2.0.0", "released": "2026-09-30", "seenAt": "2026-10-09T17:09:32.922283746Z" }, { "registry": "npm", "name": "@withone/cli", "version": "2.6.0", "seenAt": "2026-10-09T17:09:31.577452422Z" }, { "registry": "npm", "name": "@withone/mcp", "version": "2.0.0", "seenAt": "2026-10-09T17:09:30.715852547Z" } ], "githubStars": 11, "npmWeekly": 681, "pages": [ { "url": "https://www.withone.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:55:40.085470155Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "7efc2d05b2eb" }, { "url": "https://www.withone.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:55:42.392440467Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "991db7361edb" }, { "url": "https://www.withone.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:55:44.31680918Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cf8afffd8c96" }, { "url": "https://www.withone.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:55:46.353715719Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6ed34b101d9b" } ], "mcpTools": { "url": "https://mcp.withone.ai/mcp", "checkedAt": "2026-10-09T21:40:46.685955698Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-09T21:40:46.685955698Z" }, "updatedAt": "2026-10-10T01:38:01.031573401Z" } }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Merge API, Inc.", "b": "One Systems, Inc.", "name": "Vendor" }, { "a": "https://ah-api.merge.dev/mcp", "b": "https://mcp.withone.ai/mcp", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, HTTP", "b": "Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under Merge's Master Services Agreement. The Merge CLI package `merge-api` on PyPI is marked MIT, and the repository its PyPI page links (github.com/merge-api/merge-cli) answered 404 on 8 October 2026", "b": "Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence", "name": "Licence" }, { "a": "none", "b": "3", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "ai.withone/mcp", "name": "MCP registry" }, { "a": "2026-10-05", "b": "2026-10-06", "name": "Last release" }, { "a": "2026-09-09", "b": "2026-03-06", "name": "Terms last updated" }, { "a": "2026-08-20", "b": "2026-07-22", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "681 PyPI/wk", "b": "11 stars, 681 npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Merge Agent Handler scores 69.5 (B) on agent readiness against One's 66.6 (B), and leads in 4 of 7 scored categories. One leads on reliability, agent ergonomics and maintenance \u0026 community.", "question": "Which is better for AI agents, Merge Agent Handler or One?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Merge Agent Handler and One need an API key?" }, { "answer": "Yes. Merge Agent Handler has a hosted endpoint at https://ah-api.merge.dev/mcp and One at https://mcp.withone.ai/mcp.", "question": "Can an agent call Merge Agent Handler and One without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Security \u0026 auth, 83 against 69", "Payments \u0026 pricing, 55 against 30", "Transparency \u0026 trust, 71 against 63" ], "also": [ "Free to start without a card", "No incidents deducted, where One loses 3 points for them" ], "goodFor": "A product team whose agent acts in customers' SaaS accounts and needs per-user credentials, key scoping, redaction rules and logs in one hosted layer, and teams already on Merge's Unified API.", "slug": "merge-agent-handler", "watchFor": "No rate limit figures are published. The docs say only that MCP tool calls are limited per Registered User and per organisation, by the minute" }, { "aheadOn": [ "Reliability, 82 against 59", "Agent ergonomics, 73 against 68", "Maintenance \u0026 community, 86 against 69" ], "also": [ "Runs on your own machine" ], "goodFor": "A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.", "slug": "one", "watchFor": "The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it" } ], "job": { "capability": "automation.apps", "name": "App automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.json", "title": "Composio (API + MCP) vs Merge Agent Handler", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-one.json", "title": "Composio (API + MCP) vs One", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-one" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-smithery.json", "title": "Merge Agent Handler vs Smithery", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-smithery" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone.json", "title": "Merge Agent Handler vs StackOne", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-unified-to-mcp.json", "title": "Merge Agent Handler vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-zapier-mcp.json", "title": "Merge Agent Handler vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/one-vs-smithery.json", "title": "One vs Smithery", "url": "https://www.anchorterminal.com/compare/one-vs-smithery" }, { "json": "https://www.anchorterminal.com/compare/one-vs-stackone.json", "title": "One vs StackOne", "url": "https://www.anchorterminal.com/compare/one-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/one-vs-unified-to-mcp.json", "title": "One vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/one-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/one-vs-zapier-mcp.json", "title": "One vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/one-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/letme-vs-merge-agent-handler.json", "title": "letme vs Merge Agent Handler", "url": "https://www.anchorterminal.com/compare/letme-vs-merge-agent-handler" }, { "json": "https://www.anchorterminal.com/compare/letme-vs-one.json", "title": "letme vs One", "url": "https://www.anchorterminal.com/compare/letme-vs-one" } ], "scores": [ { "by": 23, "edge": "one", "key": "reliability", "merge-agent-handler": 59, "name": "Reliability", "one": 82, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "edge": "merge-agent-handler", "key": "schema", "merge-agent-handler": 80, "name": "Schema \u0026 documentation", "one": 77, "weight": 13 }, { "by": 5, "edge": "one", "key": "ergonomics", "merge-agent-handler": 68, "name": "Agent ergonomics", "one": 73, "weight": 13 }, { "by": 14, "edge": "merge-agent-handler", "key": "security", "merge-agent-handler": 83, "name": "Security \u0026 auth", "one": 69, "weight": 14 }, { "by": 25, "edge": "merge-agent-handler", "key": "payments", "merge-agent-handler": 55, "name": "Payments \u0026 pricing", "one": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 17, "edge": "one", "key": "maintenance", "merge-agent-handler": 69, "name": "Maintenance \u0026 community", "one": 86, "weight": 7 }, { "by": 8, "edge": "merge-agent-handler", "key": "transparency", "merge-agent-handler": 71, "name": "Transparency \u0026 trust", "one": 63, "weight": 7 } ], "summary": "Merge Agent Handler scores 69.5 (B) on agent readiness against One's 66.6 (B), and leads in 4 of 7 scored categories. One leads on reliability, agent ergonomics and maintenance \u0026 community. Both do app automation.", "verdicts": { "merge-agent-handler": "Agent Handler's access keys can be limited to named users, tool packs and a runtime scope, with an expiry, and an agent can create an account with one documented request. No rate limit figures are published, Pro starts at $1,000 a month with no published overage rate, and failed or blocked calls spend credits.", "one": "One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one", "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.md", "slim": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.min.md" }, "markdown": "Merge Agent Handler scores 69.5 (B) on agent readiness against One's 66.6 (B), and leads in 4 of 7 scored categories. One leads on reliability, agent ergonomics and maintenance \u0026 community. Both do app automation.\n\n- Merge Agent Handler: grade B, 69.5/100, rank #183 of 950. Markdown https://www.anchorterminal.com/tools/merge-agent-handler.md · JSON https://www.anchorterminal.com/api/v1/tools/merge-agent-handler.json\n- One: grade B, 66.6/100, rank #282 of 950. Markdown https://www.anchorterminal.com/tools/one.md · JSON https://www.anchorterminal.com/api/v1/tools/one.json\n- Best agent tool access platforms: https://www.anchorterminal.com/best/aggregator/index.md\n- All 28 tool access comparisons: https://www.anchorterminal.com/compare/aggregator/index.md\n\n## Which one, for what\n\n### Merge Agent Handler (B)\n\nGood for: A product team whose agent acts in customers' SaaS accounts and needs per-user credentials, key scoping, redaction rules and logs in one hosted layer, and teams already on Merge's Unified API.\n\nAhead on:\n- Security \u0026 auth, 83 against 69\n- Payments \u0026 pricing, 55 against 30\n- Transparency \u0026 trust, 71 against 63\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where One loses 3 points for them\n\nWatch for: No rate limit figures are published. The docs say only that MCP tool calls are limited per Registered User and per organisation, by the minute\n\n### One (B)\n\nGood for: A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.\n\nAhead on:\n- Reliability, 82 against 59\n- Agent ergonomics, 73 against 68\n- Maintenance \u0026 community, 86 against 69\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it\n\n\n## Score by category\n\n| Category | Weight | Merge Agent Handler | One | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 59 | 82 | One +23 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 77 | Merge Agent Handler +3 |\n| Agent ergonomics | 13% (16.2 this run) | 68 | 73 | One +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 83 | 69 | Merge Agent Handler +14 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 55 | 30 | Merge Agent Handler +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 69 | 86 | One +17 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 63 | Merge Agent Handler +8 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **69.5 · B** | **66.6 · B** | |\n\n## Facts side by side\n\n| Fact | Merge Agent Handler | One |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Merge API, Inc. | One Systems, Inc. |\n| Hosted endpoint | `https://ah-api.merge.dev/mcp` | `https://mcp.withone.ai/mcp` |\n| Transports | Streamable HTTP, HTTP | Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under Merge's Master Services Agreement. The Merge CLI package `merge-api` on PyPI is marked MIT, and the repository its PyPI page links (github.com/merge-api/merge-cli) answered 404 on 8 October 2026 | Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence |\n| Tools exposed | none | 3 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `ai.withone/mcp` |\n| Last release | 2026-10-05 | 2026-10-06 |\n| Terms last updated | 2026-09-09 | 2026-03-06 |\n| Privacy policy last updated | 2026-08-20 | 2026-07-22 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 681 PyPI/wk | 11 stars, 681 npm/wk |\n\n## Verdicts\n\n**Merge Agent Handler.** Agent Handler's access keys can be limited to named users, tool packs and a runtime scope, with an expiry, and an agent can create an account with one documented request. No rate limit figures are published, Pro starts at $1,000 a month with no published overage rate, and failed or blocked calls spend credits.\n\n**One.** One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026.\n\n## Before you call either\n\n### Merge Agent Handler\n\n1. Call `search_tools` with a plain-language intent before `tools/list`. A Tool Pack can hold hundreds of tools and Slack alone lists 50\n2. Add `?connectors=slack` to the MCP URL to limit a connection to named connectors, and `?paginated=true` only if the client follows `nextCursor`\n3. Carry a user-scoped key with `runtime:all` only. The production key reaches every Registered User and the management endpoints\n4. On `reauth_required` read `data.reauth_reason`, then call `authenticate_\u003cconnector\u003e` by name. Intent search doesn't return the authenticate tools\n5. Pin `MCP-Protocol-Version` to `2025-03-26` when context is tight. Later revisions repeat object results in `structuredContent`\n\n### One\n\n1. Call `list_one_integrations` first and read each connection's `access` field. When the policy is `actions`, run those ids directly without calling `find_one_actions`\n2. Send every operation a task needs in one `find_one_actions` call, up to 10 `requests`, each a platform and a short intent with no IDs, names or message text\n3. When a document comes back as a digest, call `find_one_actions` again with `load` and a `section` name. Don't guess parameters the digest left out\n4. After a timeout on `execute_one_action`, check whether the write took effect before sending it again. No idempotency key is documented\n5. A 403 for a call outside the grant won't succeed on retry. Ask the user to widen the grant in the dashboard or reconnect\n\n## Questions\n\n### Which is better for AI agents, Merge Agent Handler or One?\n\nMerge Agent Handler scores 69.5 (B) on agent readiness against One's 66.6 (B), and leads in 4 of 7 scored categories. One leads on reliability, agent ergonomics and maintenance \u0026 community.\n\n### Do Merge Agent Handler and One need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Merge Agent Handler and One without installing anything?\n\nYes. Merge Agent Handler has a hosted endpoint at https://ah-api.merge.dev/mcp and One at https://mcp.withone.ai/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.json, and with the fewest tokens: https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"merge-agent-handler\", \"b\": \"one\"}`. From a terminal: `anchor compare merge-agent-handler one`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/merge-agent-handler.json and https://www.anchorterminal.com/api/v1/tools/one.json\n\n## Other comparisons with Merge Agent Handler or One\n\n- [Composio (API + MCP) vs Merge Agent Handler](https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.md)\n- [Composio (API + MCP) vs One](https://www.anchorterminal.com/compare/composio-rube-vs-one.md)\n- [Merge Agent Handler vs Smithery](https://www.anchorterminal.com/compare/merge-agent-handler-vs-smithery.md)\n- [Merge Agent Handler vs StackOne](https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone.md)\n- [Merge Agent Handler vs Unified.to MCP Server](https://www.anchorterminal.com/compare/merge-agent-handler-vs-unified-to-mcp.md)\n- [Merge Agent Handler vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/merge-agent-handler-vs-zapier-mcp.md)\n- [One vs Smithery](https://www.anchorterminal.com/compare/one-vs-smithery.md)\n- [One vs StackOne](https://www.anchorterminal.com/compare/one-vs-stackone.md)\n- [One vs Unified.to MCP Server](https://www.anchorterminal.com/compare/one-vs-unified-to-mcp.md)\n- [One vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/one-vs-zapier-mcp.md)\n- [letme vs Merge Agent Handler](https://www.anchorterminal.com/compare/letme-vs-merge-agent-handler.md)\n- [letme vs One](https://www.anchorterminal.com/compare/letme-vs-one.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Merge Agent Handler vs One", "url": "" } ], "description": "Merge Agent Handler scores 69.5 (B) to One's 66.6 (B) for app automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Merge Agent Handler B 69.5", "One B 66.6", "scores" ], "h1": "Merge Agent Handler vs One", "image": "https://www.anchorterminal.com/assets/og/compare-merge-agent-handler-vs-one.png", "path": "/compare/merge-agent-handler-vs-one", "published": "2026-10-01", "section": "tools", "title": "Merge Agent Handler vs One for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one" }, "tokens": { "markdown": 2400, "slim": 780 }, "version": 1 }