Arcade is an actions runtime for AI agents that manages OAuth, user tokens, tool execution, and policy enforcement across thousands of agent-oriented tools.
Direct verdict
Arcade earns a pilot for teams whose agents have outgrown hand-built OAuth and tool wrappers. Start with reversible actions, narrow scopes, explicit confirmations, short-lived sessions, and audited revocation. Do not mistake a large catalog for permission to expose every tool to every agent.
What to verify
Build 30 read and write tasks across three approved services. Seed expired consent, revoked tokens, duplicate requests, prompt injection, ambiguous identities, rate limits, and a partial outage. Measure correct authorization, scope minimization, confirmation quality, duplicate writes, audit completeness, revocation time, p95 latency, and total cost per accepted action. Require direct verification of every consequential write.