Delegated User OAuth, Token Refresh & Scoped Credential Vaulting for MCP Tools
Manage end-user OAuth2 tokens, automatic refresh loops and least-privilege scopes across 100+ SaaS APIs so tool-calling agents act on a user's behalf without ever seeing raw secrets.
At a glance — Oct 2026
Updated 2026-10-28 · forward this page: /jtbds/delegated-mcp-oauth-vault#briefPromotion class: deterministic_source_reverified · 8.2 ± 0.5 (7.7–8.7 · editorial_prior) · Pricing verified 2026-10-28.
- Depot Pick
- Nango · 8.17/10 for this job (curated estimate, high confidence)
Nango runs the OAuth dance, token storage and refresh for hundreds of APIs with per-connection scopes, so an MCP server calls APIs through Nango instead of holding tokens.
- Runner-up
- Composio · 7.68/10
Scores higher than the pick on: Developer & agent DX.
- When not to use the pick
- Agent tool-router breadth with managed auth — Composio; end-user auth/passkeys — Stytch; enterprise SSO and directory sync — WorkOS; machine secrets (not user OAuth) — Infisical.
- Lock-in / migration
- The pick has lower stored lock-in risk than runner-up Composio (3.5 vs 5.8). Pick exit signals: open source (provider tag `oss`).
- Sourced price (no comparable unit)
Pick: no sourced price in this job's unit (no_sourced_price).
No cheapest SKU (no_comparable_unit_for_job). No price was invented.
- Free option
- No free resource lists this job. A cheap paid SKU is not a free option.
- Failure modes to watch
- Identity confusion: Bind every tool call to a user or tenant id. Refuse the call if that id changed mid-task. For a public bot, the operator owns the words the bot shows.
Cite: Agent Provider Depot, Depot Pick for delegated-mcp-oauth-vault: nango, scores as of 2026-10-28. Agents: GET /api/decide?jtbd=delegated-mcp-oauth-vault
Nango
Nango runs the OAuth dance, token storage and refresh for hundreds of APIs with per-connection scopes, so an MCP server calls APIs through Nango instead of holding tokens.
Pricing (directional): As of 2026-10-28 (nango.dev/pricing via live HTML): Free $0 (hard monthly caps). Pay-as-you-go **$50/mo** including $50 credits; usage examples ~$0.29/connection, $0.72/hour sync, $0.5/GB. Growth add-on ~$450/mo. Enterprise custom. Self-hos…
Lock-in risk: higher = more lock-in (worse). Overall already inverts this dimension.
Depot pick for saas-oauth-integrations (embed customer SaaS OAuth/sync). Composio remains agent-tool-router for MCP/tool calling breadth.
Quote for Delegated User OAuth, Token Refresh & Scoped Credential Vaulting for MCP Tools
Depot Pick stays Nango. Prices below are sourced SKU rows only (as of 2026-10-28). Input and output are not blended. GET /api/quote?jtbd=delegated-mcp-oauth-vault
Nothing was compared. no comparable sourced unit for this job; chat input $/1M and other units were not borrowed pickIsPriceWinner is null.
Sourced price unavailable for the Depot Pick. No row in the pricing index.
3 of 5 candidates have no sourced price row. 5 are excluded from the Matching price comparison (none). no comparable sourced unit for this job; chat input $/1M and other units were not borrowed
Runners-up
Composio
Depot pick for tool/MCP router with managed OAuth across 1500+ apps. Official rate card is now public — Hobby…
Stytch
Auth pick when agents/M2M + org SSO matter more than Clerk's consumer UI kit. Watch Twilio integration…
WorkOS
When your first big customer asks for Okta SSO tomorrow, WorkOS is how you say yes without a rewrite.
Infisical
Depot default for agent secrets when you want OSS exit + Agent Proxy (placeholders instead of raw keys in the…
When NOT to use the top pick
Agent tool-router breadth with managed auth — Composio; end-user auth/passkeys — Stytch; enterprise SSO and directory sync — WorkOS; machine secrets (not user OAuth) — Infisical.
Full ranking (score table)
Ranked with this JTBD's weights. Scores are curated estimates unless marked otherwise. Agents: prefer /api/decide then this table for tie-breaks.
Score methodology for this job
Scores API coverage, refresh reliability, scope minimization and self-host option (lock-in).
capabilityFit: 26%pricePerformance: 16%latencyReliability: 16%developerDx: 16%privacyPosture: 12%lockInRisk: 6%maturity: 8%