{ "data": { "a": { "slug": "scalekit-agentkit", "name": "Scalekit AgentKit", "vendor": "Scalekit", "vendorUrl": "https://www.scalekit.com", "kind": "http-api", "category": "agent-auth", "summary": "Authentication and integration platform for agents, with per-user account connections, scoped MCP servers and managed tool calls.", "url": "https://www.anchorterminal.com/tools/scalekit-agentkit", "markdownUrl": "https://www.anchorterminal.com/tools/scalekit-agentkit.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/scalekit-agentkit.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/scalekit-agentkit.json", "repo": "https://github.com/scalekit-inc/scalekit-sdk-node", "license": "MIT (SDKs), platform closed, self-hosted on Enterprise", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://{env}.scalekit.com", "packages": [ { "registry": "npm", "name": "@scalekit-sdk/node" }, { "registry": "pypi", "name": "scalekit-sdk-python" }, { "registry": "npm", "name": "@scalekit-inc/cli" } ], "auth": "mixed", "authNotes": "Your backend gets a bearer token from `POST $SCALEKIT_ENVIRONMENT_URL/oauth/token` with `grant_type=client_credentials` and the client ID and secret from the dashboard, then calls the REST API under /api/v1 on the same environment URL (dev environments end in .scalekit.dev, production in .scalekit.com). End users authorise a connection through a time-limited magic link that Scalekit hosts. Virtual MCP servers take a short-lived session token minted per user, about one hour by default. The management MCP server at mcp.scalekit.com needs no extra credentials.", "pricing": "freemium", "pricingNotes": "AgentKit Free is $0 with 5,000 tool calls a month, unlimited connected accounts, 500+ connectors and community and email support, no card. Growth is $99 a month with 100,000 tool calls and $0.0005 per extra call, custom connectors, an API proxy and private Slack support, with an EU data residency add-on at $99 a month. Enterprise is custom, with negotiated call volume, a 99.99 per cent uptime SLA, VPC or on-prem deployment, a HIPAA BAA, SIEM integrations and a forward-deployed engineer (https://www.scalekit.com/pricing). The page doesn't say whether a plain token fetch counts as a tool call.", "priceSummary": "$99 / mo", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 6, "npmWeekly": 10642, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.scalekit.com/agentkit/overview", "llmsTxt": "https://docs.scalekit.com/llms.txt", "openapi": "https://docs.scalekit.com/api/agentkit.scalar.json", "capabilities": [ "auth.oauth", "auth.tokens", "auth.consent", "auth.agent-identity", "agent.tools" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "oauth", "mcp", "llms-txt", "openapi", "typescript", "python", "enterprise", "self-hosted" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 71.9, "grade": "BB", "agentReady": true, "rank": 111, "ranked": true, "rankOf": 842, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 80, "payments": 40, "reliability": 75, "schema": 87, "security": 66, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "500+ connectors, including remote MCP servers over OAuth 2.1 with DCR. No rate limits or idempotency documented for Scalekit's own API.", "bestFor": "A team that wants per-user third-party tokens plus a hosted tool catalogue at the lowest per-call price, with a tidy virtual MCP surface for agents.", "strengths": [ "500+ connectors, including remote MCP servers over OAuth 2.1 with DCR", "OpenAPI files, llms.txt and a Markdown twin for every docs page", "Tool search, scoped tool lists and virtual MCP servers keep an agent's context small", "Atlassian status page with an Agent Kit Tool Execution component, 100.0 per cent over 90 days", "Free tier of 5,000 tool calls a month with no card, then $0.0005 a call on Growth" ], "weaknesses": [ "No rate limits or idempotency documented for Scalekit's own API", "Any holder of the API credential can read a user's full OAuth tokens", "No approval step for destructive tools and no prompt-injection guidance", "The privacy policy says the United States and India, the trust centre says Frankfurt and Los Angeles", "No security.txt, no bug bounty and no deprecation notices" ], "agentNotes": [ "Use the exact dashboard Connection Name, not the connector slug, in every call", "Call `POST /api/v1/tools:search` with top_k instead of listing every tool", "When a connected account isn't ACTIVE, send the user the magic link and stop until they finish", "On ScalekitToolRateLimitException, back off before retrying, and log the executionId", "Mint a fresh virtual MCP session token per user per run and let it expire" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.9 } ], "editorialScores": { "ergonomics": 83, "maintenance": 80, "payments": 40, "reliability": 75, "schema": 87, "security": 66, "transparency": 45 }, "provenanceScore": 84 }, "connect": { "install": "npm install @scalekit-sdk/node", "http": "TOKEN=$(curl -s -X POST \"$SCALEKIT_ENVIRONMENT_URL/oauth/token\" \\\n -d client_id=\"$SCALEKIT_CLIENT_ID\" -d client_secret=\"$SCALEKIT_CLIENT_SECRET\" \\\n -d grant_type=client_credentials | jq -r .access_token)\ncurl -X POST \"$SCALEKIT_ENVIRONMENT_URL/api/v1/connected_accounts/magic_link\" \\\n -H \"Authorization: Bearer $TOKEN\" -H \"Content-Type: application/json\" \\\n -d '{\"connection_name\":\"gmail\",\"identifier\":\"user-123\"}'", "claudeCode": "claude mcp add --transport http --scope user scalekit https://mcp.scalekit.com", "config": { "mcpServers": { "scalekit": { "url": "https://mcp.scalekit.com" } } } }, "letme": { "capability": "https://letme.dev/auth.oauth", "tool": "https://letme.dev/scalekit-agentkit" }, "area": "agent-runtime", "unitPrices": [ { "item": "Growth plan", "unit": "month", "usd": 99, "note": "100,000 tool calls included" }, { "item": "Tool call above 100,000 on Growth", "unit": "call", "usd": 0.0005, "note": "$0.50 per 1,000" }, { "item": "EU data residency add-on", "unit": "month", "usd": 99, "note": "Growth plan" } ], "provenance": { "legalEntity": "ScaleKit, Inc.", "domain": "scalekit.com", "domainRegistered": "2003-04-24", "endpointOnVendorDomain": true, "terms": "https://www.scalekit.com/legal/terms-of-service", "privacy": "https://www.scalekit.com/legal/privacy-policy", "statusPage": "https://scalekit.statuspage.io/", "changelog": "https://www.scalekit.com/product-updates", "securityTxt": "none", "checked": "2026-10-02", "notes": [ "The terms and privacy policy (both effective 1 January 2026) name ScaleKit, Inc., with addresses in Redmond, WA and Lewes, DE, under Delaware law.", "RDAP shows scalekit.com registered on 2003-04-24, long before the company, so the domain was bought later.", "/.well-known/security.txt returned 404 on 2026-09-30. The status page is scalekit.statuspage.io, linked from the site footer. status.scalekit.com serves the dashboard app.", "The trust page at https://www.scalekit.com/trust-center states SOC 2 Type 2 and ISO 27001 certification and gives security@scalekit.com for reports." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/scalekit-agentkit.json", "live": { "slug": "scalekit-agentkit", "probe": { "target": "https://{env}.scalekit.com", "method": "get", "lastAt": "2026-10-09T10:42:55.537821335Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "invalid character \"{\" in host name", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 260, "samples30d": 2098, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 0 }, { "date": "2026-10-02", "probes": 248, "ok": 0 }, { "date": "2026-10-03", "probes": 271, "ok": 0 }, { "date": "2026-10-04", "probes": 272, "ok": 0 }, { "date": "2026-10-05", "probes": 272, "ok": 0 }, { "date": "2026-10-06", "probes": 272, "ok": 0 }, { "date": "2026-10-07", "probes": 272, "ok": 0 }, { "date": "2026-10-08", "probes": 268, "ok": 0 }, { "date": "2026-10-09", "probes": 114, "ok": 0 } ] }, "vendorStatus": { "page": "https://scalekit.statuspage.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:42:02.875337171Z" }, "versions": [ { "registry": "github", "name": "scalekit-inc/scalekit-sdk-node", "version": "v2.19.0", "released": "2026-10-05", "seenAt": "2026-10-08T16:28:15.751330214Z" }, { "registry": "npm", "name": "@scalekit-inc/cli", "version": "0.3.24", "seenAt": "2026-10-08T16:28:14.555228054Z" }, { "registry": "npm", "name": "@scalekit-sdk/node", "version": "2.19.0", "seenAt": "2026-10-08T16:28:13.554467274Z" }, { "registry": "pypi", "name": "scalekit-sdk-python", "version": "2.20.0", "released": "2026-10-05", "seenAt": "2026-10-08T16:28:14.369980592Z" } ], "githubStars": 8, "npmWeekly": 10625, "pypiWeekly": 11019, "securityTxt": { "url": "https://scalekit.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:39:03.460113092Z" }, "llmsTxt": { "url": "https://docs.scalekit.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:51.867614484Z" }, "domain": { "domain": "scalekit.com", "registered": "2003-04-24", "source": "https://rdap.verisign.com/com/v1/domain/scalekit.com", "checkedAt": "2026-10-04T13:09:01.703612585Z" }, "pages": [ { "url": "https://www.scalekit.com/product-updates", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:30:19.237204061Z", "changedAt": "2026-10-07T18:13:49.191212913Z", "fingerprint": "25b12e9d06e1" }, { "url": "https://www.scalekit.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:30:17.829504148Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cdf7adf96094" }, { "url": "https://www.scalekit.com/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:30:13.17617751Z", "changedAt": "2026-10-08T18:30:13.17617751Z", "fingerprint": "1ac3ba0fe793" }, { "url": "https://www.scalekit.com/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:30:15.301904392Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c8437cad75b0" } ], "updatedAt": "2026-10-09T10:42:55.537821335Z" } }, "answer": "Scalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "vercel-connect", "name": "Vercel Connect", "vendor": "Vercel Inc.", "vendorUrl": "https://vercel.com", "kind": "http-api", "category": "agent-auth", "summary": "Vercel Connect is a credential broker for apps and agents. Code asks it for a short-lived, scoped token for Slack, GitHub, Microsoft, Linear, Snowflake or any OAuth, API-key or MCP service, as the app or for a user.", "url": "https://www.anchorterminal.com/tools/vercel-connect", "markdownUrl": "https://www.anchorterminal.com/tools/vercel-connect.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vercel-connect.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vercel-connect.json", "repo": "https://github.com/vercel/vercel", "license": "Proprietary service under Vercel's Terms of Service and the Vercel Connect product terms. The `@vercel/connect` SDK and the Vercel CLI are Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://api.vercel.com", "packages": [ { "registry": "npm", "name": "@vercel/connect" } ], "auth": "mixed", "authNotes": "Access is self-serve with a Vercel account, on every plan. A deployment calls Connect with its project OIDC token (`VERCEL_OIDC_TOKEN`), which Connect checks against the connector's project links and their environments. Locally, `vercel env pull` writes a development OIDC token that lasts about 12 hours. Outside Vercel, a Vercel access token goes in `vercelToken`, and it can request only the app subject or its own user. Connect then holds the provider side. Vercel registers the OAuth client for managed connectors (Slack, GitHub, Linear, Microsoft, Snowflake, Salesforce), and the customer supplies a client or an API key for the others. End users consent in a browser at a URL from `startAuthorization`.", "pricing": "freemium", "pricingNotes": "Billed per token request and per trigger. Hobby includes 500 token requests and 1,000 triggers a month at no extra charge, and Vercel's fair use guidelines limit Hobby to non-commercial, personal use. Pro is $3.00 per 1,000 token requests and $0.95 per 1,000 triggers on top of the plan. Enterprise is negotiated. A trigger is counted once per destination, and once per event when no destination is set. The SDK's in-process cache means many provider calls in one invocation cost one token request (https://vercel.com/docs/connect/pricing, checked 2026-10-08).", "priceSummary": "$3 / 1k req", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Connect docs, the pricing page or the Connect operations of the OpenAPI document (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 16354, "npmWeekly": 738165, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://vercel.com/docs/connect", "llmsTxt": "https://vercel.com/llms.txt", "openapi": "https://openapi.vercel.sh/", "capabilities": [ "auth.tokens", "auth.oauth", "auth.consent", "auth.audit" ], "tags": [ "hosted", "freemium", "free-tier", "oauth", "oidc", "openapi", "llms-txt", "typescript", "cli", "webhooks", "status-page", "soc2", "iso27001" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 68.8, "grade": "B", "agentReady": false, "rank": 195, "ranked": true, "rankOf": 842, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 81, "payments": 40, "reliability": 63, "schema": 84, "security": 83, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -3, "negativeNotes": [ "April 2026. Vercel's security bulletin says an attacker took over an employee's account through a compromised third-party AI tool, reached internal systems and decrypted non-sensitive environment variables of a limited subset of customers. It predates Connect's general availability on 25 August 2026 and is documented with remediation, so 3 of a possible 15 is taken, because Connect now keeps customers' provider refresh tokens on the same platform (https://vercel.com/kb/bulletin/vercel-april-2026-security-incident)." ], "verdict": "Provider refresh tokens stay with Vercel, and code receives short-lived tokens tied to a project and environment through one call with a public OpenAPI definition. Vercel's SLA excludes its APIs, the status page records 94 minutes of elevated Connect errors on 10 September 2026, and the only SDK is TypeScript.", "bestFor": "Teams already deploying on Vercel whose agents need user or app tokens for Slack, GitHub, Microsoft, Linear, Snowflake or an MCP server without storing provider secrets.", "strengths": [ "Refresh tokens stay on Vercel's infrastructure. Code receives only short-lived access tokens, as the app or for a named user", "A deployment authenticates with its project OIDC token, checked against per-environment project links, so no provider secret sits in environment variables", "Public OpenAPI 3.0.3 document covers 13 Connect paths, including `/v1/connect/token/{connector}` and `/v1/connect/authorize/{connector}`", "Token requests, completed authorisations and revocations are logged with `tokenId` and `authorizationId`, and can be sent to a drain on Pro and Enterprise", "Rate limits are published with numbers, 200 reads and 50 writes a minute per team" ], "weaknesses": [ "Vercel's SLA says it does not apply to the APIs or CLI, so token requests carry no uptime commitment", "Elevated Connect errors for 94 minutes on 10 September 2026, marked major, and again on 18 September, per the status page", "Event history is kept 12 hours on Hobby and 3 days on Pro. Connector audit logs and 30 days need Enterprise", "Revocation depends on the provider. Without a revocation endpoint the provider credential can work until it expires", "The SDK is TypeScript only, and the public repository's copy stops at 2.0.2 while npm has 2.4.1" ], "agentNotes": [ "Call `getToken` at request time and don't store the result. The SDK caches up to 100 tokens in process and refreshes them 30 seconds before expiry", "Pass `scopes` on every request. Since SDK 1.0.0 an omitted `scopes` defaults to `['*']`, the connector's default scopes", "Catch `UserAuthorizationRequiredError`, call `startAuthorization` and send the user to the returned URL. Consent needs a person in a browser", "Outside Vercel, pass a Vercel access token as `vercelToken`. It can request only the app subject or its own user, not another user", "On a 429 wait one minute for the window to reset. Limits are 200 token requests a minute per team" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.8 } ], "editorialScores": { "ergonomics": 75, "maintenance": 81, "payments": 40, "reliability": 63, "schema": 84, "security": 83, "transparency": 55 }, "provenanceScore": 99 }, "connect": { "install": "pnpm add @vercel/connect", "http": "curl -X POST https://api.vercel.com/v1/connect/token/slack%2Facme-slack \\\n -H \"Authorization: Bearer $VERCEL_OIDC_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"subject\":{\"type\":\"app\"},\"scopes\":[\"chat:write\"]}'" }, "letme": { "capability": "https://letme.dev/auth.tokens", "tool": "https://letme.dev/vercel-connect" }, "sameCompany": [ "vercel-sandbox" ], "area": "agent-runtime", "unitPrices": [ { "item": "Token request (Pro)", "unit": "1k-requests", "usd": 3, "note": "Hobby includes 500 a month. Enterprise negotiated" }, { "item": "Trigger, a forwarded provider webhook (Pro)", "unit": "1k-requests", "usd": 0.95, "note": "Counted per destination. Hobby includes 1,000 a month" } ], "provenance": { "legalEntity": "Vercel Inc.", "domain": "vercel.com", "domainRegistered": "1999-10-04", "endpointOnVendorDomain": true, "terms": "https://vercel.com/legal/terms", "privacy": "https://vercel.com/legal/privacy-policy", "statusPage": "https://www.vercel-status.com", "changelog": "https://vercel.com/changelog", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last updated 1 June 2026) name Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, and California law. The DPA calls Vercel Inc. a Delaware corporation.", "Connect also has its own product terms at https://vercel.com/docs/connect/legal. The Terms of Service text we read does not mention Connect by name.", "The Privacy Notice (effective 1 June 2026) says it does not apply to personal information Vercel processes as a processor for customers, which the DPA covers. The DPA (effective 31 March 2026) applies to Pro and Enterprise plans.", "https://vercel.com/.well-known/security.txt points to HackerOne and responsible.disclosure@vercel.com and expires 2027-09-28.", "RDAP gives vercel.com a registration date of 1999-10-04, long before Vercel, so the domain was bought later.", "The API answers at api.vercel.com and the OpenAPI document at openapi.vercel.sh." ], "score": 99 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vercel-connect.json", "live": { "slug": "vercel-connect", "probe": { "target": "https://api.vercel.com", "method": "get", "lastAt": "2026-10-09T10:43:00.826005623Z", "lastOk": true, "lastStatus": 200, "lastMs": 550, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 570, "p95ms24h": 1136, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-09", "probes": 33, "ok": 33 } ] }, "vendorStatus": { "page": "https://www.vercel-status.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:42:07.466379649Z" }, "updatedAt": "2026-10-09T10:43:00.826005623Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Scalekit", "b": "Vercel Inc.", "name": "Vendor" }, { "a": "https://{env}.scalekit.com", "b": "https://api.vercel.com", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (SDKs), platform closed, self-hosted on Enterprise", "b": "Proprietary service under Vercel's Terms of Service and the Vercel Connect product terms. The `@vercel/connect` SDK and the Vercel CLI are Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-29", "b": "2026-10-06", "name": "Last release" }, { "a": "2026-01-01", "b": "2026-06-01", "name": "Terms last updated" }, { "a": "2026-01-01", "b": "2026-06-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "6 stars, 11k npm/wk", "b": "16k stars, 738k npm/wk", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Scalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, Scalekit AgentKit or Vercel Connect?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Scalekit AgentKit and Vercel Connect need an API key?" }, { "answer": "Yes. Scalekit AgentKit has a hosted endpoint at https://{env}.scalekit.com and Vercel Connect at https://api.vercel.com.", "question": "Can an agent call Scalekit AgentKit and Vercel Connect without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 63", "Agent ergonomics, 83 against 75" ], "also": [ "Agent-ready, a grade of BB or better", "Free to start without a card", "No incidents deducted, where Vercel Connect loses 3 points for them" ], "goodFor": "A team that wants per-user third-party tokens plus a hosted tool catalogue at the lowest per-call price, with a tidy virtual MCP surface for agents.", "slug": "scalekit-agentkit", "watchFor": "No rate limits or idempotency documented for Scalekit's own API" }, { "aheadOn": [ "Security \u0026 auth, 83 against 66", "Transparency \u0026 trust, 77 against 65" ], "also": null, "goodFor": "Teams already deploying on Vercel whose agents need user or app tokens for Slack, GitHub, Microsoft, Linear, Snowflake or an MCP server without storing provider secrets.", "slug": "vercel-connect", "watchFor": "Vercel's SLA says it does not apply to the APIs or CLI, so token requests carry no uptime commitment" } ], "job": { "capability": "auth.oauth", "name": "Auth oauth" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aembit-vs-scalekit-agentkit.json", "title": "Aembit vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/aembit-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/aembit-vs-vercel-connect.json", "title": "Aembit vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/aembit-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/agentcore-identity-vs-scalekit-agentkit.json", "title": "Amazon Bedrock AgentCore Identity vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/agentcore-identity-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/agentcore-identity-vs-vercel-connect.json", "title": "Amazon Bedrock AgentCore Identity vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/agentcore-identity-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/arcade-vs-scalekit-agentkit.json", "title": "Arcade.dev vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/arcade-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/arcade-vs-vercel-connect.json", "title": "Arcade.dev vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/arcade-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/auth0-ai-agents-vs-scalekit-agentkit.json", "title": "Auth0 for AI Agents (Token Vault) vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/auth0-ai-agents-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/auth0-ai-agents-vs-vercel-connect.json", "title": "Auth0 for AI Agents (Token Vault) vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/auth0-ai-agents-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/descope-agentic-identity-vs-scalekit-agentkit.json", "title": "Descope Agentic Identity Hub vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/descope-agentic-identity-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/descope-agentic-identity-vs-vercel-connect.json", "title": "Descope Agentic Identity Hub vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/descope-agentic-identity-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/keycard-vs-scalekit-agentkit.json", "title": "Keycard vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/keycard-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/keycard-vs-vercel-connect.json", "title": "Keycard vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/keycard-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-scalekit-agentkit.json", "title": "Microsoft Entra Agent ID vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-vercel-connect.json", "title": "Microsoft Entra Agent ID vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/nango-vs-scalekit-agentkit.json", "title": "Nango vs Scalekit AgentKit", "url": "https://www.anchorterminal.com/compare/nango-vs-scalekit-agentkit" }, { "json": "https://www.anchorterminal.com/compare/nango-vs-vercel-connect.json", "title": "Nango vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/nango-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-stytch-connected-apps.json", "title": "Scalekit AgentKit vs Stytch Connected Apps", "url": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-stytch-connected-apps" }, { "json": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-workos-pipes.json", "title": "Scalekit AgentKit vs WorkOS Pipes and Agents", "url": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-workos-pipes" }, { "json": "https://www.anchorterminal.com/compare/stytch-connected-apps-vs-vercel-connect.json", "title": "Stytch Connected Apps vs Vercel Connect", "url": "https://www.anchorterminal.com/compare/stytch-connected-apps-vs-vercel-connect" }, { "json": "https://www.anchorterminal.com/compare/vercel-connect-vs-workos-pipes.json", "title": "Vercel Connect vs WorkOS Pipes and Agents", "url": "https://www.anchorterminal.com/compare/vercel-connect-vs-workos-pipes" } ], "scores": [ { "by": 12, "edge": "scalekit-agentkit", "key": "reliability", "name": "Reliability", "scalekit-agentkit": 75, "vercel-connect": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "edge": "scalekit-agentkit", "key": "schema", "name": "Schema \u0026 documentation", "scalekit-agentkit": 87, "vercel-connect": 84, "weight": 13 }, { "by": 8, "edge": "scalekit-agentkit", "key": "ergonomics", "name": "Agent ergonomics", "scalekit-agentkit": 83, "vercel-connect": 75, "weight": 13 }, { "by": 17, "edge": "vercel-connect", "key": "security", "name": "Security \u0026 auth", "scalekit-agentkit": 66, "vercel-connect": 83, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "scalekit-agentkit": 40, "vercel-connect": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 1, "edge": "vercel-connect", "key": "maintenance", "name": "Maintenance \u0026 community", "scalekit-agentkit": 80, "vercel-connect": 81, "weight": 7 }, { "by": 12, "edge": "vercel-connect", "key": "transparency", "name": "Transparency \u0026 trust", "scalekit-agentkit": 65, "vercel-connect": 77, "weight": 7 } ], "summary": "Scalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust. Both do auth oauth.", "verdicts": { "scalekit-agentkit": "500+ connectors, including remote MCP servers over OAuth 2.1 with DCR. No rate limits or idempotency documented for Scalekit's own API.", "vercel-connect": "Provider refresh tokens stay with Vercel, and code receives short-lived tokens tied to a project and environment through one call with a public OpenAPI definition. Vercel's SLA excludes its APIs, the status page records 94 minutes of elevated Connect errors on 10 September 2026, and the only SDK is TypeScript." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect", "json": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect.md", "slim": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect.min.md" }, "markdown": "Scalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust. Both do auth oauth.\n\n- Scalekit AgentKit: grade BB, 71.9/100, rank #111 of 842. Markdown https://www.anchorterminal.com/tools/scalekit-agentkit.md · JSON https://www.anchorterminal.com/api/v1/tools/scalekit-agentkit.json\n- Vercel Connect: grade B, 68.8/100, rank #195 of 842. Markdown https://www.anchorterminal.com/tools/vercel-connect.md · JSON https://www.anchorterminal.com/api/v1/tools/vercel-connect.json\n\n## Which one, for what\n\n### Scalekit AgentKit (BB)\n\nGood for: A team that wants per-user third-party tokens plus a hosted tool catalogue at the lowest per-call price, with a tidy virtual MCP surface for agents.\n\nAhead on:\n- Reliability, 75 against 63\n- Agent ergonomics, 83 against 75\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n- No incidents deducted, where Vercel Connect loses 3 points for them\n\nWatch for: No rate limits or idempotency documented for Scalekit's own API\n\n### Vercel Connect (B)\n\nGood for: Teams already deploying on Vercel whose agents need user or app tokens for Slack, GitHub, Microsoft, Linear, Snowflake or an MCP server without storing provider secrets.\n\nAhead on:\n- Security \u0026 auth, 83 against 66\n- Transparency \u0026 trust, 77 against 65\n\nWatch for: Vercel's SLA says it does not apply to the APIs or CLI, so token requests carry no uptime commitment\n\n\n## Score by category\n\n| Category | Weight | Scalekit AgentKit | Vercel Connect | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 63 | Scalekit AgentKit +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 87 | 84 | Scalekit AgentKit +3 |\n| Agent ergonomics | 13% (16.2 this run) | 83 | 75 | Scalekit AgentKit +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 66 | 83 | Vercel Connect +17 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 81 | Vercel Connect +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 77 | Vercel Connect +12 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **71.9 · BB** | **68.8 · B** | |\n\n## Facts side by side\n\n| Fact | Scalekit AgentKit | Vercel Connect |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Scalekit | Vercel Inc. |\n| Hosted endpoint | `https://{env}.scalekit.com` | `https://api.vercel.com` |\n| Transports | HTTP, Streamable HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT (SDKs), platform closed, self-hosted on Enterprise | Proprietary service under Vercel's Terms of Service and the Vercel Connect product terms. The `@vercel/connect` SDK and the Vercel CLI are Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-29 | 2026-10-06 |\n| Terms last updated | 2026-01-01 | 2026-06-01 |\n| Privacy policy last updated | 2026-01-01 | 2026-06-01 |\n| Customer content may train models | not found in the text | yes, with an opt-out |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 6 stars, 11k npm/wk | 16k stars, 738k npm/wk |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Scalekit AgentKit.** 500+ connectors, including remote MCP servers over OAuth 2.1 with DCR. No rate limits or idempotency documented for Scalekit's own API.\n\n**Vercel Connect.** Provider refresh tokens stay with Vercel, and code receives short-lived tokens tied to a project and environment through one call with a public OpenAPI definition. Vercel's SLA excludes its APIs, the status page records 94 minutes of elevated Connect errors on 10 September 2026, and the only SDK is TypeScript.\n\n## Before you call either\n\n### Scalekit AgentKit\n\n1. Use the exact dashboard Connection Name, not the connector slug, in every call\n2. Call `POST /api/v1/tools:search` with top_k instead of listing every tool\n3. When a connected account isn't ACTIVE, send the user the magic link and stop until they finish\n4. On ScalekitToolRateLimitException, back off before retrying, and log the executionId\n5. Mint a fresh virtual MCP session token per user per run and let it expire\n\n### Vercel Connect\n\n1. Call `getToken` at request time and don't store the result. The SDK caches up to 100 tokens in process and refreshes them 30 seconds before expiry\n2. Pass `scopes` on every request. Since SDK 1.0.0 an omitted `scopes` defaults to `['*']`, the connector's default scopes\n3. Catch `UserAuthorizationRequiredError`, call `startAuthorization` and send the user to the returned URL. Consent needs a person in a browser\n4. Outside Vercel, pass a Vercel access token as `vercelToken`. It can request only the app subject or its own user, not another user\n5. On a 429 wait one minute for the window to reset. Limits are 200 token requests a minute per team\n\n## Questions\n\n### Which is better for AI agents, Scalekit AgentKit or Vercel Connect?\n\nScalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust.\n\n### Do Scalekit AgentKit and Vercel Connect need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Scalekit AgentKit and Vercel Connect without installing anything?\n\nYes. Scalekit AgentKit has a hosted endpoint at https://{env}.scalekit.com and Vercel Connect at https://api.vercel.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect.json, and with the fewest tokens: https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"scalekit-agentkit\", \"b\": \"vercel-connect\"}`. From a terminal: `anchor compare scalekit-agentkit vercel-connect`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/scalekit-agentkit.json and https://www.anchorterminal.com/api/v1/tools/vercel-connect.json\n\n## Other comparisons with Scalekit AgentKit or Vercel Connect\n\n- [Aembit vs Scalekit AgentKit](https://www.anchorterminal.com/compare/aembit-vs-scalekit-agentkit.md)\n- [Aembit vs Vercel Connect](https://www.anchorterminal.com/compare/aembit-vs-vercel-connect.md)\n- [Amazon Bedrock AgentCore Identity vs Scalekit AgentKit](https://www.anchorterminal.com/compare/agentcore-identity-vs-scalekit-agentkit.md)\n- [Amazon Bedrock AgentCore Identity vs Vercel Connect](https://www.anchorterminal.com/compare/agentcore-identity-vs-vercel-connect.md)\n- [Arcade.dev vs Scalekit AgentKit](https://www.anchorterminal.com/compare/arcade-vs-scalekit-agentkit.md)\n- [Arcade.dev vs Vercel Connect](https://www.anchorterminal.com/compare/arcade-vs-vercel-connect.md)\n- [Auth0 for AI Agents (Token Vault) vs Scalekit AgentKit](https://www.anchorterminal.com/compare/auth0-ai-agents-vs-scalekit-agentkit.md)\n- [Auth0 for AI Agents (Token Vault) vs Vercel Connect](https://www.anchorterminal.com/compare/auth0-ai-agents-vs-vercel-connect.md)\n- [Descope Agentic Identity Hub vs Scalekit AgentKit](https://www.anchorterminal.com/compare/descope-agentic-identity-vs-scalekit-agentkit.md)\n- [Descope Agentic Identity Hub vs Vercel Connect](https://www.anchorterminal.com/compare/descope-agentic-identity-vs-vercel-connect.md)\n- [Keycard vs Scalekit AgentKit](https://www.anchorterminal.com/compare/keycard-vs-scalekit-agentkit.md)\n- [Keycard vs Vercel Connect](https://www.anchorterminal.com/compare/keycard-vs-vercel-connect.md)\n- [Microsoft Entra Agent ID vs Scalekit AgentKit](https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-scalekit-agentkit.md)\n- [Microsoft Entra Agent ID vs Vercel Connect](https://www.anchorterminal.com/compare/microsoft-entra-agent-id-vs-vercel-connect.md)\n- [Nango vs Scalekit AgentKit](https://www.anchorterminal.com/compare/nango-vs-scalekit-agentkit.md)\n- [Nango vs Vercel Connect](https://www.anchorterminal.com/compare/nango-vs-vercel-connect.md)\n- [Scalekit AgentKit vs Stytch Connected Apps](https://www.anchorterminal.com/compare/scalekit-agentkit-vs-stytch-connected-apps.md)\n- [Scalekit AgentKit vs WorkOS Pipes and Agents](https://www.anchorterminal.com/compare/scalekit-agentkit-vs-workos-pipes.md)\n- [Stytch Connected Apps vs Vercel Connect](https://www.anchorterminal.com/compare/stytch-connected-apps-vs-vercel-connect.md)\n- [Vercel Connect vs WorkOS Pipes and Agents](https://www.anchorterminal.com/compare/vercel-connect-vs-workos-pipes.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Scalekit AgentKit vs Vercel Connect", "url": "" } ], "description": "Scalekit AgentKit scores 71.9 (BB) on agent readiness against Vercel Connect's 68.8 (B), and leads in 3 of 7 scored categories. Vercel Connect leads on security \u0026 auth and transparency \u0026 trust. Both do auth oauth. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Scalekit AgentKit BB 71.9", "Vercel Connect B 68.8", "scores" ], "h1": "Scalekit AgentKit vs Vercel Connect", "image": "https://www.anchorterminal.com/assets/og/compare-scalekit-agentkit-vs-vercel-connect.png", "path": "/compare/scalekit-agentkit-vs-vercel-connect", "published": "2026-10-01", "section": "tools", "title": "Scalekit AgentKit vs Vercel Connect for AI agents, BB 71.9 vs B 68.8", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/scalekit-agentkit-vs-vercel-connect" }, "tokens": { "markdown": 2400, "slim": 730 }, "version": 1 }