Arcade.dev

Arcade.dev is an authorization and tool-execution runtime for AI agents. It sits between agents and business systems such as Gmail, Slack, GitHub and Salesforce. It handles per-user OAuth, applies policy outside the model, and runs actions from a catalog of thousands of MCP tools. That lets engineering teams take agents from demo to production without building their own credential and permission plumbing.

Arcade.dev is an MCP-native runtime that controls what AI agents are allowed to do in enterprise systems. The vendor describes it as a single control point to enforce, execute and govern agent actions. On enforcement, Arcade connects to a company's identity provider and delegates authorization so an agent acts as the user it serves. It uses OAuth 2.0 with encrypted token storage, and policies are applied outside the model layer, where a prompt cannot override them. On execution, it offers a catalog the homepage puts at 8,000+ permission-aware tools; its docs and GitHub README cite 7,500+ tools across 81 MCP servers. Developers can add custom tools through the MIT-licensed arcade-mcp Python framework, where a tool declares the OAuth scopes it needs and Arcade handles the user consent prompt, token storage and refresh. Built-in evaluations aim to catch hallucinated or destructive tool calls. On governance, MCP Gateways and a central control plane grant and revoke tools, and audit logs can be streamed to SIEMs or emitted as OpenTelemetry. Arcade is framework-agnostic, with documented support for LangChain, OpenAI Agents, CrewAI, Google ADK, Vercel AI SDK, Mastra and others. It runs as Arcade Cloud, through the AWS and Azure marketplaces, self-hosted via Helm, in a customer VPC, or air-gapped. CEO Alex Salazar came from Okta and CTO Sam Partee from Redis. The company says it wrote the MCP tool-authorization specification. It raised a $12M seed round, then a $60M Series A in June 2026 led by SYN Ventures with Morgan Stanley and Wipro, for $72M in total. In August 2026 it acquired the MCP registry Smithery. Its main competitors are Composio, Merge Agent Handler, Nango and Scalekit.

Category

Agent Development

Pricing

Freemium, Usage-based, Contact for pricing

Target Market

CTOs, CIOs, Enterprise Developers, Security Teams, AI Platform Engineers

Deployment

Cloud-first, Self-hosted, Hybrid, API-based

Founded

2024

Headquarters

San Francisco, USA

Team Size

11-50

• ✓
  Delegated user authorization

  Connects to the company's identity provider and handles per-user OAuth 2.0 with encrypted token storage. Agents act with each user's own permissions, not a shared super-credential.

• ✓
  Permission-aware tool catalog

  Prebuilt tools for Google Workspace, Slack, Teams, GitHub, Stripe, Snowflake, Postgres and more, cited as 7,500+ to 8,000+ across 81 MCP servers. This cuts integration build time.

• ✓
  arcade-mcp framework

  An MIT-licensed Python framework for building custom MCP servers. Tools declare the OAuth scopes they need, and Arcade handles consent, token storage and refresh.

• ✓
  MCP Gateways and control plane

  Central governance to grant or revoke tools, apply contextual and per-action policies, and register remote MCP servers alongside built-in integrations.

• ✓
  Audit logging and evaluations

  Streams audit logs to SIEMs or emits OpenTelemetry. Built-in evals help catch hallucinated or destructive tool calls before they execute in production.

• ✓
  Flexible deployment

  Runs on Arcade Cloud, the AWS and Azure marketplaces, self-hosted via Helm, in a customer VPC, or fully air-gapped, so it suits regulated environments.

• •
  Email and calendar assistant

  An agent reads and sends Gmail or Outlook messages and books meetings as the signed-in user. Each user grants consent once through Arcade's OAuth flow.

• •
  Slack and Teams workplace bots

  Chat bots take OAuth-secured actions such as posting, summarising channels or creating tickets. Each action is checked against the requesting user's permissions and logged.

• •
  Governed internal MCP rollout

  Platform teams publish internal and remote MCP servers through one gateway. They control which agents and users can call which tools, with audit logs sent to the SIEM.

• •
  Developer and DevOps agents

  Coding agents act in GitHub, Vercel or Datadog with per-user delegated tokens. This avoids shared service accounts and keeps a traceable record of each change.

List pricing is published. The Free tier includes 2,000 auth events and 2,000 tool calls a month. Team costs $25/month plus $0.10 per auth event and $0.01 per tool call. Enterprise is custom, sold as annual bundles of auth events and tool calls, and is the plan that includes VPC or air-gapped hosting, 24/7 SLA support, SSO, RBAC, audit logs and a private registry. Competitor Merge says Arcade's metering has hard-to-predict variables.

This page was written from 10 sources, 7 on domains other than arcade.dev.

1. 1.arcade.dev — arcade.devvendor
2. 2.arcade.dev — pricingvendor
3. 3.docs.arcade.dev — home
4. 4.arcade.dev — smithery joins arcadevendor
5. 5.github.com — arcade mcp
6. 6.siliconangle.com — ai agent authorization startup arcade nabs 60m investment
7. 7.thenextweb.com — arcade dev 60 million series a ai agent authorization
8. 8.merge.dev — arcade alternatives
9. 9.scalekit.com — arcade alternatives
10. 10.hn.algolia.com — search