One vs Smithery

One

One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026.

Smithery

Service tokens can be limited by namespace, resource, operation and connection metadata, with a lifetime of at most 24 hours. No terms of service, rate limits or SLA were found, the pricing page could not be read, and the newest client release is from 20 July 2026.

One

1. Call list_one_integrations first and read each connection's access field. When the policy is actions, run those ids directly without calling find_one_actions
2. Send every operation a task needs in one find_one_actions call, up to 10 requests, each a platform and a short intent with no IDs, names or message text
3. When a document comes back as a digest, call find_one_actions again with load and a section name. Don't guess parameters the digest left out
4. After a timeout on execute_one_action, check whether the write took effect before sending it again. No idempotency key is documented
5. A 403 for a call outside the grant won't succeed on retry. Ask the user to widen the grant in the dashboard or reconnect

Smithery

1. Keep the API key on the backend and hand an agent a service token limited to connections with read and execute and a metadata match
2. Create connections with PUT /connect/{namespace}/{connectionId}, which is an upsert, and check status.state before calling a tool
3. On auth_required or input_required, send the person to setupUrl, then retry with the same connectionId
4. Tool names on the namespace MCP endpoint are prefixed with the connection ID, such as user-123-github.search_repositories
5. Do not rely on smithery skill commands. Version 1.1.1 of the CLI removed them