Agentic Fabriq is the identity, permissioning, and audit layer for AI agents - often described as 'Okta for agents.' It sits between agents and the tools they call, so each agent acts only with the permissions of the user who invoked it, with least-privilege scopes enforced on every call and searchable, signed logs of every action. Founded in 2025 by MIT dropouts Paulina and Matthew Xu, the company is part of Y Combinator's Winter 2026 batch.
Corsair is an open-source integration layer for AI agents. Its TypeScript framework lets developers connect their agents and apps to hundreds of third-party services - Gmail, Slack, Stripe, Notion, GitHub and more - while Corsair handles the messy parts: OAuth, token refresh, webhook verification, rate limiting, permissions and multi-tenant credential isolation. Agents never touch raw API keys; Corsair resolves them internally and can require human approval before destructive actions. Founded in 2024 by Dev Jain and part of Y Combinator's Winter 2025 batch, the project is offered as a free self-hosted library, a hosted hub with a drop-in MCP URL, and a managed cloud SDK.
Metorial is agentic infrastructure that connects AI agents to more than 1,200 tools and data sources through the Model Context Protocol (MCP). Its serverless runtime hosts MCP servers that boot in under a second and hibernate when idle, while handling OAuth, permissions, RBAC/SSO, and full tracing so companies can ship customer-facing agents without building integration plumbing. Founded in 2025 by Karim Rahme and Tobias Herber, the open-source, Apache-2.0 project is part of Y Combinator's Fall 2025 batch and is often described as the 'Vercel for MCP.'
Valence Security is a SaaS and AI security company that helps enterprises find and fix risks created by SaaS and AI sprawl. Its platform unifies SaaS discovery, SaaS Security Posture Management (SSPM), AI Security Posture Management (AI-SPM), and Identity Threat Detection and Response (ITDR), then pairs that visibility with one-click and collaborative remediation workflows that engage business users to actually close gaps. Founded in 2021 and backed by Microsoft's M12, YL Ventures, and Porsche Ventures, Valence positions itself as a leader in securing the modern, agentic SaaS estate.
Arcade.dev builds the secure action layer for production AI agents. Its platform gives agents delegated, per-user authorization to act inside real business systems - Gmail, Slack, GitHub, Salesforce and thousands more - by handling OAuth, token management, policy enforcement, tool execution and audit logging. Founded in 2024 by former Okta VP Alex Salazar and ex-Redis engineer Sam Partee, Arcade offers 8,000+ agent-optimized tools and authored the MCP authorization specification adopted by Anthropic. The company has raised $72M total, including a $60M Series A in June 2026.
LoginRadius is a Vancouver-headquartered customer identity and access management (CIAM) company that gives businesses a single platform to register, authenticate, and manage their end users at scale. Founded in 2012 as a social-login tool, it grew into a full identity-as-a-service suite covering single sign-on, passwordless login, passkeys, adaptive MFA, and no-code identity orchestration - with configurable data residency across 35+ regions to satisfy regulated industries. The platform is used by thousands of brands to secure large consumer bases while keeping login experiences fast and compliant.
Merge builds the connective infrastructure for modern SaaS and AI: one unified API that lets a product offer hundreds of HRIS, ATS, CRM, ticketing, and accounting integrations - and a newer Agent Handler that gives AI agents secure, observable access to thousands of third-party tools.
Material Security is a San Francisco cloud workspace security company that protects email, files, and accounts inside Google Workspace and Microsoft 365. Founded in 2017 by three ex-Dropbox engineers, it assumes attackers will eventually get in - and locks down the sensitive data they came for, instead of stacking yet another perimeter.
Nylas is a San Francisco-based API platform that gives developers a single, secure way to plug email, calendar, and contacts into their apps - replacing months of provider-by-provider integration work with a few lines of code.