THE INDEX · CREDENTIAL & CONNECTION MANAGEMENT
Credential & Connection Management
Products that hold the third-party credentials an MCP server needs on a user's behalf, and platforms that manage the connections to those upstream services.
How will tools receive safe access to external systems?
What belongs in this category
- Token vaults holding per-user upstream credentials
- Unified connection and integration platforms exposed over MCP
- Tool-calling platforms that own the upstream OAuth handshake
ACI.dev
Credential & Connection Management
ACI.dev is an open-source tool-calling platform that connects AI agents to more than 600 pre-built application integrations, with multi-tenant OAuth flows and secrets management, natural-language permission boundaries and dynamic tool discovery built in. Agents reach those integrations either as direct function calls through its SDK or through its Model Context Protocol servers: an Apps MCP server that exposes the functions of specific apps and can carry several apps at once, and a Unified MCP server that exposes two meta-functions for discovering and executing any function on the platform.
SaaS
Arcade.dev
Credential & Connection Management
Arcade is a runtime that sits between AI agents and the systems they act on: it hosts MCP servers and tools, handles the OAuth handshake and token refresh with each upstream API so that neither the MCP client nor the LLM sees the token, and enforces per-action authorization against the organisation's own identity provider. It ships a catalog of 7,500+ prebuilt tools across 81 MCP servers, an open-source Python framework and CLI (arcade-mcp) for building and deploying your own, and MCP gateways that federate tools from several MCP servers into a single URL for the agents and apps that consume them.
Hybrid
Composio
Credential & Connection Management
Composio gives AI agents authenticated access to third-party app toolkits such as Slack, Gmail and GitHub through per-user sessions, and refreshes the underlying OAuth tokens itself. Each session is reachable from its TypeScript and Python SDKs and its CLI, or as a hosted MCP endpoint that any MCP client can connect to.
SaaS
Gumloop
Credential & Connection Management
Gumloop is an AI agent platform: users build AI agents that use their own tools and data, with no code required. The agents are automated with triggers, schedules and Gumloop's API, and they reach external services such as Gmail, Slack and Salesforce through connectors that hold the authentication.
Hybrid
Klavis AI
Credential & Connection Management
Klavis AI is a platform that runs hosted MCP servers connecting AI agents to SaaS tools: one API call creates a server instance for a given end user and returns that server's URL along with an OAuth authorization URL, and the servers carry built-in OAuth and multi-tenancy authentication. The same servers are published as container images to run yourself, and the repository also ships MCP client bots for Discord, Slack, Web and WhatsApp.
Hybrid
Make MCP
Credential & Connection Management
Make MCP Server lets AI systems such as large language models run Make scenarios and manage the contents of a Make account, including scenarios, connections, webhooks, data stores, teams and organizations. It turns active and on-demand scenarios into callable tools for MCP clients such as Claude and ChatGPT.
SaaS
Merge
Credential & Connection Management
Unified API and agent handler across HRIS, ATS, CRM, accounting, file storage and ticketing
SaaS
Nango
Credential & Connection Management
Nango is an open-source platform for building product integrations that connects applications and AI agents to more than 900 external APIs, handling OAuth flows, credential storage and token refresh for each end user's connection. Integration logic is written as TypeScript functions that run on Nango's production runtime and can be called from an app or exposed to agents through Nango's API, SDKs, or MCP server.
Hybrid
Paragon
Credential & Connection Management
Paragon is integration infrastructure that a company embeds into its own application, using Paragon's SDK and user authentication, so it can display and manage third-party integrations for its end users. Each end user who connects an integration is tracked individually in Paragon as a 'Connected User', and through the same platform the company can call third-party API endpoints and listen for third-party webhook events.
Hybrid
Pipedream Connect
Credential & Connection Management
Pipedream Connect provides built-in user authentication for third-party APIs accessed via MCP. It removes the need for developers to build authorization flows or handle token storage and refresh when making authenticated requests on behalf of their end users.
SaaS
Unified.to
Credential & Connection Management
Unified.to provides a single unified API and MCP server for reading and writing customer data across dozens of SaaS categories such as CRM, ATS, HRIS, and accounting. Each request passes through live to the underlying service rather than being served from a cache or sync job.
Hybrid
Enterprise MCP
Credential & Connection Management
Workato Enterprise MCP is a Workato feature for creating MCP servers from Workato project assets, API collections, or external servers, with token-based or OAuth2 single sign-on access control for MCP clients such as Claude, Cursor, and Windsurf. It also offers a verified user access mode for MCP tools that requires OAuth 2.0 authorization code grant authentication.
SaaS
Zapier MCP
Credential & Connection Management
Zapier MCP is a Model Context Protocol interface to Zapier that lets an AI client take actions in third-party apps - sending messages, creating tasks, updating records - through the app connections already present in the user's Zapier account. Most servers use dynamic tool discovery by default, so the agent searches for and enables the actions it needs rather than having them configured in advance.
SaaS