WorkOS vs Merge
Side-by-side trajectory, velocity, and editorial themes.
WorkOS keeps shipping fine-grained identity primitives — for both humans and agents.
The cadence is steady and surgical: small, well-scoped releases across auth (user-scoped API keys, change-email API), authorization (FGA custom roles scoped to resource types, Groups API), admin operability (IT contacts, dashboard metadata editing), and directory enrichment. The recent MCP Auth resource-indicator support and a Node SDK feature-flags runtime client show the platform leaning toward agent/AI use cases and into developer tooling.
WorkOS is widening the identity surface in two directions at once. For humans, it's filling in long-tail B2B IAM gaps — granular API key scoping, self-serve email change, group-level org memberships, custom roles per resource. For agents, it's quietly building MCP Auth as a first-class control point. The two threads will meet at the application authorization layer, where the same FGA model can decide what a user or an agent is allowed to do.
Expect more MCP Auth surface area (token binding, scoped scopes, audit) and continued FGA depth — likely policy-language ergonomics or relationship-based filtering. Feature flags will likely gain server-side targeting and richer SDK coverage beyond Node.
Merge is building an AI-infrastructure stack alongside its unified-API core, with Gateway emerging as a safety/governance layer.
Merge Unified continues a weekly cadence of API maintenance and connector expansion, with Oracle Fusion Cloud ERP launching for Accounting in beta. Merge Agent Handler — the MCP/agent-tools product — is shipping new connectors almost weekly and added Scoped Access Keys for least-privilege agent runtimes. Merge Gateway, the LLM gateway, just shipped Prompt Injection Protection, DLP, RBAC, audit trails, model pinning, and provider-free routing in back-to-back weeks.
Merge is no longer just a unified-API company. Two adjacent products — Agent Handler and Gateway — are getting the heaviest investment, while Unified gets steady connector and reliability work. The Gateway moves into safety and governance target enterprise AI deployments where native provider safety isn't enough. Agent Handler's connector pace suggests Merge wants to be the default tool-pack provider for agent builders.
Expect more Gateway governance features (custom DLP rules, broader vendor support, finer role-based controls) and continued weekly connector drops in Agent Handler — most likely targeting enterprise-SaaS gaps. The Unified roadmap may start incorporating agent-shaped endpoints, blurring lines between Unified and Agent Handler.
See more alternatives to WorkOS →
See more alternatives to Merge →