The short answer
Composio offers a managed catalog of 1,500+ toolkits with per-user authentication, SDKs and an MCP gateway. Arcade.dev is an actions runtime that runs every tool call with delegated user authorization and policy controls. Nango is a code-first integration platform that handles auth for 1,200+ APIs and exposes your own action functions to agents through MCP sessions. Choose by how much you want to write yourself, billing unit and deployment needs. SOTA’s assessment is documentation-based.
| Decision | Composio | Arcade.dev | Nango |
|---|---|---|---|
| Core workflow | Managed tool catalog with per-user auth, used through sessions, SDKs or an MCP gateway | Actions runtime that enforces delegated user authorization and policy on every tool call | Code-first integrations (auth, action functions, syncs, webhooks) exposed to agents as MCP sessions |
| Stated catalog | 1,500+ toolkits | 8,000+ tools on the homepage; docs index lists 7,500+ across 81 MCP servers | 1,200+ APIs; 10,000+ reusable templates |
| SDKs and agent access | Python and TypeScript SDKs; provider adapters for OpenAI, Anthropic, LangChain, CrewAI, Mastra, Vercel and others; MCP | Python, JavaScript/TypeScript, Go and Java clients; MIT MCP server framework; remote MCP endpoint | Backend SDKs for Node, Python, Java, Ruby, Go, Rust and PHP; per-session MCP server URL |
| OAuth apps | Composio-managed shared apps to start, or your own app as you grow | Arcade’s built-in providers (Arcade branding, shared rate limits) or your own OAuth app, recommended for production | Nango-managed apps (Nango on the consent screen, fixed scopes) or your own app for white-labelling and token export |
| Free plan | Hobby: 100,000 tool calls and 50,000 triggers/month, including up to 20,000 managed-app calls and 10,000 managed-app triggers; 3 team members | 2,000 tool calls a month on Arcade Cloud | 10 connections, 10 compute hours and 10 GB data transfer a month; hard-capped |
| First paid plan | Pro $29/month including $29 credit; own-app overages $0.0003/call and $0.003/trigger; managed apps have separate rates | Team $25/month platform fee plus $0.01 per tool call | Pay-as-you-go $50/month incl. $50 credits; $0.29 per connection, $0.72 per compute hour, $0.50 per GB |
| Self-hosting | Private VPC or self-hosted (Helm) as Enterprise arrangements | Enterprise: your VPC or fully air-gapped; Helm and cloud marketplace options | BYOC or Self-Managed on Enterprise; free self-hosting limited to Auth and Proxy for hobby projects |
| Licence and compliance | SDK repository MIT; SOC 2 Type II and ISO 27001:2022 | arcade-mcp framework MIT; states SOC 2 compliance | Elastic License 2.0 (source-available); SOC 2 Type II; HIPAA BAA available |
A tool catalog, an actions runtime or your own integration code
Composio provides SDKs, tool execution and authentication infrastructure for agents, plus a managed MCP gateway. Start a session in its Python or TypeScript SDK and select tools from a catalog advertised at 1,500+ toolkits.
Arcade.dev calls itself the actions runtime between your agents and every system they reach, with one control point to enforce, execute and govern each action. Its homepage lists 8,000+ permission-aware tools plus custom MCP servers you build or bring; its docs index counts 7,500+ tools across 81 MCP servers. Arcade acquired the Smithery MCP registry in August 2026.
Nango is code-first. It handles authorization for 1,200+ APIs, and you write TypeScript functions for actions, syncs and webhooks, starting from 10,000+ templates or from scratch. For agents, your backend creates an agent session and exposes selected action functions to the agent as an MCP server; Nango says the agent never sees raw credentials and cannot change the scope of its own session.
Per-user authorization and whose OAuth app you use
All three support actions authorized for individual users. Composio associates connected accounts with user IDs and also supports shared connections, so choose the identity pattern explicitly. Arcade scopes each action to both the authenticated user’s permissions and the agent’s authorization. Nango handles credential storage, refresh and validation for OAuth 2.0, OAuth 1.0a, API keys, basic auth and custom schemes. Configure the user, connection and tool scopes required by your application.
Each offers its own shared OAuth apps so you can start without registering apps with every provider, with different trade-offs. Composio says its managed apps are not recommended for scaling and suggests bringing your own app as you grow; on the free plan, up to 20,000 of the 100,000 tool calls can use Composio-managed apps. Arcade warns that with its built-in providers your users see the Arcade brand on the consent screen and share provider rate limits with other Arcade customers, and recommends your own OAuth credentials for all production use. Nango calls its managed apps production-ready, but the consent screen shows Nango, scopes are fixed, and only with your own app can you export tokens and leave Nango without users re-authorizing.
Free plans and what you pay for
Prices were checked November 7, 2026. Composio Hobby includes 100,000 calls and 50,000 triggers/month. Pro is $29/month with $29 credit. For your own OAuth/API-key apps, MCP servers and custom tools, overages are $0.0003/call and $0.003/trigger. Managed apps have a smaller included pool: 20,000 calls and 10,000 trigger events. Pro then charges per-app call rates, $0.006 per polling event and $0.003 per real-time event. Beyond 1,000 free managed-app connections, Pro charges $0.10 once per new connection. The per-app call rates apply to signups on or after November 3, 2026; confirm your account’s applicable terms.
Arcade’s Free plan has no platform fee and includes 2,000 tool calls a month. Team costs $25 a month plus $0.01 per tool call. Enterprise is custom, with annual bundles of tool calls, SSO, RBAC, audit logs and private registry access.
Nango meters connections, compute and egress. Free is hard-capped at 10 connections, 10 compute hours and 10 GB/month. Pay-as-you-go costs $50/month with $50 credit, with rates of $0.29/connection/month, $0.72/compute-hour and $0.50/GB. Each function run rounds up to one second; ingress transfer is free. Estimate connected users, execution time and outbound bytes for your workload.
Self-hosting, licences and compliance claims
Composio Cloud is the default; a private VPC deployment and self-hosting with Helm are Enterprise arrangements, as are customer-managed encryption keys. Arcade runs fully managed on Arcade Cloud for Free and Team; Enterprise adds deployment in your VPC or fully air-gapped, with Helm charts, an Azure managed app and an AWS private offer. Nango offers BYOC and Self-Managed deployments on its Enterprise plan; a limited free self-hosted edition covers only Auth and Proxy for hobby projects, without tool calls or the MCP server.
Composio’s SDK repository and Arcade’s arcade-mcp server framework are MIT licensed; their hosted platforms are not presented as open source. Nango’s repository uses the Elastic License 2.0, which forbids offering the software to third parties as a hosted or managed service, so SOTA describes it as source-available even though Nango’s homepage says open source.
On compliance, Composio states SOC 2 Type II attestation and ISO 27001:2022 certification, Arcade states that it is SOC 2 compliant without naming the report type on the pages reviewed, and Nango states SOC 2 Type II compliance and offers a HIPAA BAA. Request the reports from each vendor’s trust center before relying on them.
How to choose
SOTA’s assessment is documentation-based; it includes no hands-on testing or performance benchmarks. Consider Composio when you want a large ready-made catalog and a generous free tool-call allowance, reached through SDKs or one MCP gateway. Consider Arcade.dev when per-action authorization, policy and audit controls matter, or when you need an air-gapped Enterprise deployment. Consider Nango when your product needs integrations you control in code, including syncs and webhooks as well as agent tools, and you can accept a source-available licence. Choose managed or your own OAuth apps based on provider scopes, branding, rate limits and credential portability.
Sources & method
Official documentation was checked on 2026-11-07. Selection advice is our assessment. Interfaces and requirements may change; check the linked source for the version you intend to use.
- Composio homepage: products and app catalog
- Composio pricing: Hobby, Pro, usage rates and toolkit count
- Composio docs index: sessions, MCP and toolkit count
- Composio providers for agent frameworks
- Composio authentication: per-user auth and managed OAuth apps
- Composio token custody and deployment options
- Composio Enterprise: SOC 2 Type II, ISO 27001 and self-hosting
- Composio SDK repository (MIT)
- Arcade.dev homepage: actions runtime, tool count and SOC 2
- Arcade.dev pricing: Free, Team and Enterprise
- Arcade docs index: tools and MCP servers
- Arcade client libraries and MCP framework
- Arcade auth providers: built-in versus your own OAuth apps
- Arcade deployment: own OAuth credentials and self-hosting
- Arcade.dev acquires Smithery (August 5, 2026)
- arcade-mcp repository (MIT)
- Nango homepage: APIs, templates and code-first integrations
- Nango pricing: Free, Pay-as-you-go, compliance
- Nango agent sessions exposed as MCP servers
- Nango auth guide: schemes and managed versus own OAuth apps
- Nango self-hosting options
- Nango licence (Elastic License 2.0)
How SOTA reviews projects · Suggest a correction · Download the evaluation checklist
