← Back to research
·10 min read·company

Paragon

Embedded iPaaS rebuilt around AI agents — ActionKit exposes 1,000+ prebuilt integration actions across 130+ SaaS apps to a product's agents via a single API or MCP server, with per-tenant managed auth. $13M Series A, used by 100+ engineering teams.

Key takeaways

  • ActionKit gives a B2B SaaS product's AI agents 1,000+ prebuilt integration actions across 130+ apps through one API or an MCP server publicly listed on the Anthropic MCP registry
  • Per-tenant managed auth is the differentiator — end users authorize integrations through Paragon's Connect Portal (OAuth 2.0/API keys), and the MCP server scopes every session to a user via JWT-signed Paragon User Tokens
  • An embedded-iPaaS incumbent (founded 2019, $13M Series A led by Inspired Capital) pivoting its existing integration platform toward agents, rather than a developer-facing tool catalog startup

FAQ

What is Paragon?

An embedded integration platform (iPaaS) for B2B SaaS products that now ships ActionKit, a single API and MCP server giving in-product AI agents access to 1,000+ prebuilt integration actions with managed per-user authentication.

How much does Paragon cost?

Pricing is not publicly listed — Platform, Pro, and Enterprise tiers are quote-based, metered primarily on Connected Users (customer tenants using integrations).

How does ActionKit work with MCP?

Paragon publishes an open source MCP server (MIT, TypeScript, SSE transport) that wraps the ActionKit API; it supports multi-tenant clients via JWT-authenticated user sessions and issues magic links so end users can authorize integrations through the Connect Portal.

How is Paragon different from Composio?

Composio is an agent-native tool catalog for developers building agents; Paragon is an embedded iPaaS for B2B SaaS companies shipping agents inside their own product, with per-tenant auth and integration UX as the core product.

Executive Summary

Paragon is an embedded integration platform (iPaaS) for B2B SaaS companies — managed authentication, data sync, and workflow infrastructure that lets a product ship native integrations to its customers without building OAuth flows and API plumbing per provider. [1] In 2025 it rebuilt the platform around AI: ActionKit exposes 1,000+ prebuilt integration actions across 130+ SaaS applications to a product's AI agents through a single API or an MCP server, with the same per-tenant managed auth that powers its traditional integrations. [2] [3]

The company was founded in 2019, is Y Combinator-backed, and raised a $13M Series A led by Inspired Capital with FundersClub, Garuda Ventures, and Jude Gomila participating, bringing total funding to over $16M alongside investors including Global Founders Capital and Village Global. [4] Over 100 engineering teams use the platform, which is SOC 2 Type II certified and offers on-premise deployment for enterprises. [2] Its ActionKit MCP server is a publicly listed third-party server on the Anthropic MCP registry. [5]

AttributeValue
CompanyParagon (useparagon)
Founded2019
Funding$13M Series A (Inspired Capital); $16M+ total
Customers100+ engineering teams
ComplianceSOC 2 Type II; on-premise option
Open SourceMCP server only (MIT); core platform closed

Product Overview

Paragon's classic product is embedded iPaaS: a B2B SaaS company drops Paragon's Connect Portal into its app so end customers can authorize integrations (OAuth 2.0 or API keys), then builds syncs and workflows against those connections — Paragon claims 70% less engineering effort and 7x faster time-to-market for new integrations. [6] [1]

ActionKit extends that same infrastructure to agents. A single GET actions call returns JSON schemas — tool names, descriptions, and parameters — for thousands of actions across providers like Google Drive, Google Calendar, Slack, Salesforce, and Jira, ready to pass to an LLM as function definitions; the agent then executes reads, writes, and updates on the end user's behalf using that user's stored credentials. [5] The same actions are available over MCP, where the server issues magic links that route end users through the Connect Portal to authorize any integration the agent needs. [5] [3]

Key Capabilities

CapabilityDescription
ActionKit1,000+ prebuilt integration actions across 130+ apps via one API or MCP server [2] [3]
Managed AuthConnect Portal handles OAuth 2.0/API key intake, token storage, and refresh per end user [2]
Managed SyncContinuous data ingestion from third-party APIs into the product [6]
WorkflowsEmbedded workflow automation across customer integrations [6]
Custom ConnectorsCustom integration builder for providers beyond the prebuilt catalog [2]

Product Surfaces

SurfaceDescriptionAvailability
ActionKit APIGET actions + execution endpoints returning LLM-ready tool schemasAll tiers
MCP serverOpen source server wrapping ActionKit; listed on the Anthropic MCP registrySelf-deployed (MIT)
Connect PortalEmbedded/headless auth UI for end-user authorizationAll tiers
Embedded iPaaSSync + workflow infrastructure for native product integrationsAll tiers
[2] [5] [6]

Technical Architecture

Paragon is a hosted cloud platform with an on-premise deployment option for enterprises. [2] Agents consume ActionKit either as REST (tool schemas passed directly into frameworks like Vercel's AI SDK, LangChain, and OpenAI) or through the MCP server. [5] [2]

The MCP server is open source (TypeScript, MIT license) and uses SSE transport designed for multi-tenant MCP clients: each session is authorized with a Paragon User Token — an RS256-signed JWT encoding the end user's ID — so every tool call executes against that specific user's connections, and unauthorized integrations trigger magic-link auth flows through the Connect Portal. [3] Provider credentials live in Paragon's platform, not the agent runtime.

Key Technical Details

AspectDetail
DeploymentCloud (hosted); on-premise for enterprise [2]
Agent InterfaceActionKit REST API + open source MCP server (SSE) [3]
Auth ModelPer-user JWT (RS256) sessions; Connect Portal OAuth 2.0/API key intake [3]
Integrations130+ apps, 1,000+ prebuilt actions [3] [2]
Open SourceMCP server only (useparagon/paragon-mcp, MIT); platform is closed [3]

Strengths

  • Per-tenant auth is the core product, not a feature — the Connect Portal, token refresh, and JWT-scoped MCP sessions were built for embedded multi-tenant integrations, exactly what a B2B SaaS product's agents need [3] [2]
  • One platform for integrations and agent actions — the same connections power native integrations (sync, workflows) and agent tool calls, avoiding parallel stacks [6]
  • LLM-ready tool schemas — a single GET actions call returns function definitions consumable by Vercel AI SDK, LangChain, and OpenAI without adapter code [5]
  • Registry presence — the ActionKit MCP server is publicly listed on the Anthropic MCP registry, with multi-tenant SSE support uncommon among first-wave MCP servers [5] [3]
  • Enterprise posture — SOC 2 Type II, on-premise deployment, and a six-year operating history with 100+ engineering teams [2]

Cautions

  • Smaller catalog than agent-native rivals — 130+ integrations versus 1000+ toolkits at Composio and 800+ APIs at Nango; the "1,000+" figure counts actions, not providers [3] [2]
  • Opaque pricing — no public prices; Platform, Pro, and Enterprise are all quote-based, metered on Connected Users, making costs hard to estimate before sales contact [6]
  • Closed platform — only the thin MCP server is open source (modest traction at under 100 GitHub stars as of June 2026); there is no self-hostable open core as an exit hatch [3]
  • Funding vintage — the $13M Series A dates to the pre-AI era of the business; no AI-era round has been announced, and current financial details are not publicly disclosed [4]
  • B2B-SaaS-shaped — designed for products embedding integrations for their customers; developers building standalone or internal agents will find leaner catalog-first options

Pricing & Licensing

TierPriceIncludes
PlatformNot publicly listedFull product suite (Managed Sync, ActionKit, Workflows), default Connected Users allotment
ProGet a quoteHigher usage, full suite
EnterpriseGet a quoteCustom Connected Users, on-premise option

All tiers include unlimited integrations, custom connectors, fully managed authentication, and embedded/headless SDK options; usage scales with Connected Users (customer orgs using integrations). [6]

Licensing model: Proprietary hosted platform; the ActionKit MCP server is open source under MIT. [3]

Hidden costs: Quote-based pricing metered on Connected Users means costs grow with customer adoption of integrations — favorable for low-penetration products, expensive at scale.


Competitive Positioning

Paragon represents a distinct segment of MCP integration platforms: embedded iPaaS vendors pivoting to agents, serving B2B SaaS companies that ship agents inside their own product — versus developer-facing tool catalogs aimed at anyone building an agent.

Direct Competitors

CompetitorDifferentiation
ComposioAgent-native catalog (1000+ toolkits, sandboxed execution, open source SDKs); Paragon counters with embedded per-tenant auth UX and a unified iPaaS (sync + workflows)
NangoOpen source (ELv2), self-hostable, 800+ APIs, hosted MCP server; Paragon is closed but offers prebuilt actions and workflow/sync products Nango approaches code-first
Merge.dev (Agent Handler)Unified-API vendor's agent product; category-normalized data models versus Paragon's per-provider actions and embedded integration UX
Custom buildsParagon replaces per-provider OAuth, token refresh, and action plumbing for in-product agents

When to Choose Paragon Over Alternatives

  • Choose Paragon when: you are a B2B SaaS company shipping agents inside your product and need end customers to authorize integrations through an embedded, white-label auth flow
  • Choose Paragon when: you already need embedded iPaaS (sync, workflows) and want agent actions from the same connections
  • Choose Composio when: you are agent-first and want the largest plug-and-play tool catalog
  • Choose Nango when: self-hosting or open source is a procurement requirement

Ideal Customer Profile

Best fit:

  • B2B SaaS companies embedding AI agents in their product that must act on each customer's third-party apps (CRM, ticketing, messaging) with that customer's credentials
  • Teams that want integrations and agent actions from one vendor instead of stitching an auth provider to a tool catalog
  • Enterprises needing SOC 2 Type II and on-premise deployment [2]

Poor fit:

  • Individual developers or startups building standalone agents who want transparent, self-serve pricing
  • Teams requiring an open source, self-hostable core platform
  • Products needing long-tail providers beyond the 130+ catalog without building custom connectors

Viability Assessment

DimensionAssessment
Financial HealthModerate — $16M+ raised through a 2021-era Series A; current revenue and runway not publicly disclosed [4]
Market PositionEstablished embedded iPaaS with 100+ engineering teams; credible early mover on multi-tenant agent actions via MCP [2]
Innovation PaceActive — 2025 AI rebuild around ActionKit, open source MCP server, Anthropic registry listing [5]
Community/EcosystemThin in open source (MCP server under 100 stars); strength is customer base, not community [3]
Long-term OutlookCautiously positive — the embedded per-tenant auth wedge is real, but the company faces better-funded agent-native catalogs and open alternatives

Paragon enters the MCP platform race the way Nango did — from an existing integrations business — but with a closed platform and an older funding base. Its bet is that B2B SaaS companies shipping in-product agents will buy the full embedded stack (auth UX, sync, workflows, actions) rather than assemble it from catalog-first vendors.


Bottom Line

Paragon is the embedded-iPaaS entry in the MCP integration platform category: ActionKit turns six years of per-tenant integration infrastructure into 1,000+ agent-callable actions across 130+ apps, delivered through one API or an Anthropic-registry-listed MCP server with managed OAuth handled by its Connect Portal. [2] [5] [3]

Recommended for: B2B SaaS companies shipping agents inside their product that need embedded, per-customer authorized integration actions plus traditional sync and workflows.

Not recommended for: Agent-first developers wanting the biggest open catalog or self-serve pricing (see Composio) or teams requiring a self-hostable open core (see Nango).

Outlook: A defensible niche — in-product agents with embedded auth — but Paragon must out-execute larger-cataloged, better-funded agent-native rivals without disclosed AI-era funding.


Research by Ry Walker Research • methodology