Key takeaways
- ActionKit gives a B2B SaaS product's AI agents 1,000+ prebuilt integration actions across 130+ apps through one API or an MCP server publicly listed on the Anthropic MCP registry
- Per-tenant managed auth is the differentiator — end users authorize integrations through Paragon's Connect Portal (OAuth 2.0/API keys), and the MCP server scopes every session to a user via JWT-signed Paragon User Tokens
- An embedded-iPaaS incumbent (founded 2019, $13M Series A led by Inspired Capital) pivoting its existing integration platform toward agents, rather than a developer-facing tool catalog startup
FAQ
What is Paragon?
An embedded integration platform (iPaaS) for B2B SaaS products that now ships ActionKit, a single API and MCP server giving in-product AI agents access to 1,000+ prebuilt integration actions with managed per-user authentication.
How much does Paragon cost?
Pricing is not publicly listed — Platform, Pro, and Enterprise tiers are quote-based, metered primarily on Connected Users (customer tenants using integrations).
How does ActionKit work with MCP?
Paragon publishes an open source MCP server (MIT, TypeScript, SSE transport) that wraps the ActionKit API; it supports multi-tenant clients via JWT-authenticated user sessions and issues magic links so end users can authorize integrations through the Connect Portal.
How is Paragon different from Composio?
Composio is an agent-native tool catalog for developers building agents; Paragon is an embedded iPaaS for B2B SaaS companies shipping agents inside their own product, with per-tenant auth and integration UX as the core product.
Executive Summary
Paragon is an embedded integration platform (iPaaS) for B2B SaaS companies — managed authentication, data sync, and workflow infrastructure that lets a product ship native integrations to its customers without building OAuth flows and API plumbing per provider. [1] In 2025 it rebuilt the platform around AI: ActionKit exposes 1,000+ prebuilt integration actions across 130+ SaaS applications to a product's AI agents through a single API or an MCP server, with the same per-tenant managed auth that powers its traditional integrations. [2] [3]
The company was founded in 2019, is Y Combinator-backed, and raised a $13M Series A led by Inspired Capital with FundersClub, Garuda Ventures, and Jude Gomila participating, bringing total funding to over $16M alongside investors including Global Founders Capital and Village Global. [4] Over 100 engineering teams use the platform, which is SOC 2 Type II certified and offers on-premise deployment for enterprises. [2] Its ActionKit MCP server is a publicly listed third-party server on the Anthropic MCP registry. [5]
| Attribute | Value |
|---|---|
| Company | Paragon (useparagon) |
| Founded | 2019 |
| Funding | $13M Series A (Inspired Capital); $16M+ total |
| Customers | 100+ engineering teams |
| Compliance | SOC 2 Type II; on-premise option |
| Open Source | MCP server only (MIT); core platform closed |
Product Overview
Paragon's classic product is embedded iPaaS: a B2B SaaS company drops Paragon's Connect Portal into its app so end customers can authorize integrations (OAuth 2.0 or API keys), then builds syncs and workflows against those connections — Paragon claims 70% less engineering effort and 7x faster time-to-market for new integrations. [6] [1]
ActionKit extends that same infrastructure to agents. A single GET actions call returns JSON schemas — tool names, descriptions, and parameters — for thousands of actions across providers like Google Drive, Google Calendar, Slack, Salesforce, and Jira, ready to pass to an LLM as function definitions; the agent then executes reads, writes, and updates on the end user's behalf using that user's stored credentials. [5] The same actions are available over MCP, where the server issues magic links that route end users through the Connect Portal to authorize any integration the agent needs. [5] [3]
Key Capabilities
| Capability | Description |
|---|---|
| ActionKit | 1,000+ prebuilt integration actions across 130+ apps via one API or MCP server [2] [3] |
| Managed Auth | Connect Portal handles OAuth 2.0/API key intake, token storage, and refresh per end user [2] |
| Managed Sync | Continuous data ingestion from third-party APIs into the product [6] |
| Workflows | Embedded workflow automation across customer integrations [6] |
| Custom Connectors | Custom integration builder for providers beyond the prebuilt catalog [2] |
Product Surfaces
| Surface | Description | Availability |
|---|---|---|
| ActionKit API | GET actions + execution endpoints returning LLM-ready tool schemas | All tiers |
| MCP server | Open source server wrapping ActionKit; listed on the Anthropic MCP registry | Self-deployed (MIT) |
| Connect Portal | Embedded/headless auth UI for end-user authorization | All tiers |
| Embedded iPaaS | Sync + workflow infrastructure for native product integrations | All tiers |
Technical Architecture
Paragon is a hosted cloud platform with an on-premise deployment option for enterprises. [2] Agents consume ActionKit either as REST (tool schemas passed directly into frameworks like Vercel's AI SDK, LangChain, and OpenAI) or through the MCP server. [5] [2]
The MCP server is open source (TypeScript, MIT license) and uses SSE transport designed for multi-tenant MCP clients: each session is authorized with a Paragon User Token — an RS256-signed JWT encoding the end user's ID — so every tool call executes against that specific user's connections, and unauthorized integrations trigger magic-link auth flows through the Connect Portal. [3] Provider credentials live in Paragon's platform, not the agent runtime.
Key Technical Details
| Aspect | Detail |
|---|---|
| Deployment | Cloud (hosted); on-premise for enterprise [2] |
| Agent Interface | ActionKit REST API + open source MCP server (SSE) [3] |
| Auth Model | Per-user JWT (RS256) sessions; Connect Portal OAuth 2.0/API key intake [3] |
| Integrations | 130+ apps, 1,000+ prebuilt actions [3] [2] |
| Open Source | MCP server only (useparagon/paragon-mcp, MIT); platform is closed [3] |
Strengths
- Per-tenant auth is the core product, not a feature — the Connect Portal, token refresh, and JWT-scoped MCP sessions were built for embedded multi-tenant integrations, exactly what a B2B SaaS product's agents need [3] [2]
- One platform for integrations and agent actions — the same connections power native integrations (sync, workflows) and agent tool calls, avoiding parallel stacks [6]
- LLM-ready tool schemas — a single
GET actionscall returns function definitions consumable by Vercel AI SDK, LangChain, and OpenAI without adapter code [5] - Registry presence — the ActionKit MCP server is publicly listed on the Anthropic MCP registry, with multi-tenant SSE support uncommon among first-wave MCP servers [5] [3]
- Enterprise posture — SOC 2 Type II, on-premise deployment, and a six-year operating history with 100+ engineering teams [2]
Cautions
- Smaller catalog than agent-native rivals — 130+ integrations versus 1000+ toolkits at Composio and 800+ APIs at Nango; the "1,000+" figure counts actions, not providers [3] [2]
- Opaque pricing — no public prices; Platform, Pro, and Enterprise are all quote-based, metered on Connected Users, making costs hard to estimate before sales contact [6]
- Closed platform — only the thin MCP server is open source (modest traction at under 100 GitHub stars as of June 2026); there is no self-hostable open core as an exit hatch [3]
- Funding vintage — the $13M Series A dates to the pre-AI era of the business; no AI-era round has been announced, and current financial details are not publicly disclosed [4]
- B2B-SaaS-shaped — designed for products embedding integrations for their customers; developers building standalone or internal agents will find leaner catalog-first options
Pricing & Licensing
| Tier | Price | Includes |
|---|---|---|
| Platform | Not publicly listed | Full product suite (Managed Sync, ActionKit, Workflows), default Connected Users allotment |
| Pro | Get a quote | Higher usage, full suite |
| Enterprise | Get a quote | Custom Connected Users, on-premise option |
All tiers include unlimited integrations, custom connectors, fully managed authentication, and embedded/headless SDK options; usage scales with Connected Users (customer orgs using integrations). [6]
Licensing model: Proprietary hosted platform; the ActionKit MCP server is open source under MIT. [3]
Hidden costs: Quote-based pricing metered on Connected Users means costs grow with customer adoption of integrations — favorable for low-penetration products, expensive at scale.
Competitive Positioning
Paragon represents a distinct segment of MCP integration platforms: embedded iPaaS vendors pivoting to agents, serving B2B SaaS companies that ship agents inside their own product — versus developer-facing tool catalogs aimed at anyone building an agent.
Direct Competitors
| Competitor | Differentiation |
|---|---|
| Composio | Agent-native catalog (1000+ toolkits, sandboxed execution, open source SDKs); Paragon counters with embedded per-tenant auth UX and a unified iPaaS (sync + workflows) |
| Nango | Open source (ELv2), self-hostable, 800+ APIs, hosted MCP server; Paragon is closed but offers prebuilt actions and workflow/sync products Nango approaches code-first |
| Merge.dev (Agent Handler) | Unified-API vendor's agent product; category-normalized data models versus Paragon's per-provider actions and embedded integration UX |
| Custom builds | Paragon replaces per-provider OAuth, token refresh, and action plumbing for in-product agents |
When to Choose Paragon Over Alternatives
- Choose Paragon when: you are a B2B SaaS company shipping agents inside your product and need end customers to authorize integrations through an embedded, white-label auth flow
- Choose Paragon when: you already need embedded iPaaS (sync, workflows) and want agent actions from the same connections
- Choose Composio when: you are agent-first and want the largest plug-and-play tool catalog
- Choose Nango when: self-hosting or open source is a procurement requirement
Ideal Customer Profile
Best fit:
- B2B SaaS companies embedding AI agents in their product that must act on each customer's third-party apps (CRM, ticketing, messaging) with that customer's credentials
- Teams that want integrations and agent actions from one vendor instead of stitching an auth provider to a tool catalog
- Enterprises needing SOC 2 Type II and on-premise deployment [2]
Poor fit:
- Individual developers or startups building standalone agents who want transparent, self-serve pricing
- Teams requiring an open source, self-hostable core platform
- Products needing long-tail providers beyond the 130+ catalog without building custom connectors
Viability Assessment
| Dimension | Assessment |
|---|---|
| Financial Health | Moderate — $16M+ raised through a 2021-era Series A; current revenue and runway not publicly disclosed [4] |
| Market Position | Established embedded iPaaS with 100+ engineering teams; credible early mover on multi-tenant agent actions via MCP [2] |
| Innovation Pace | Active — 2025 AI rebuild around ActionKit, open source MCP server, Anthropic registry listing [5] |
| Community/Ecosystem | Thin in open source (MCP server under 100 stars); strength is customer base, not community [3] |
| Long-term Outlook | Cautiously positive — the embedded per-tenant auth wedge is real, but the company faces better-funded agent-native catalogs and open alternatives |
Paragon enters the MCP platform race the way Nango did — from an existing integrations business — but with a closed platform and an older funding base. Its bet is that B2B SaaS companies shipping in-product agents will buy the full embedded stack (auth UX, sync, workflows, actions) rather than assemble it from catalog-first vendors.
Bottom Line
Paragon is the embedded-iPaaS entry in the MCP integration platform category: ActionKit turns six years of per-tenant integration infrastructure into 1,000+ agent-callable actions across 130+ apps, delivered through one API or an Anthropic-registry-listed MCP server with managed OAuth handled by its Connect Portal. [2] [5] [3]
Recommended for: B2B SaaS companies shipping agents inside their product that need embedded, per-customer authorized integration actions plus traditional sync and workflows.
Not recommended for: Agent-first developers wanting the biggest open catalog or self-serve pricing (see Composio) or teams requiring a self-hostable open core (see Nango).
Outlook: A defensible niche — in-product agents with embedded auth — but Paragon must out-execute larger-cataloged, better-funded agent-native rivals without disclosed AI-era funding.
Research by Ry Walker Research • methodology