NangoHQ/nango
Nango
Nango is an open-source platform that connects applications to external APIs by managing authentication, data synchronization, and custom function execution. It provides a managed runtime for TypeScript integration functions, handling OAuth flows, credential storage, and token refresh for hundreds of external APIs while keeping secrets isolated from application code.
The platform distinguishes itself by exposing integration functions as discoverable tools for AI agents through an MCP server or API, with per-user credential isolation that keeps provider secrets out of the agent loop. It offers a unified data model that normalizes data from multiple external APIs into a single product-defined schema, enabling consistent read and write operations across providers. Nango also provides a customizable embedded authorization UI, scheduled incremental sync engines with checkpoint resumption, and webhook routing that maps incoming events to the correct user connection and triggers functions.
The platform supports developing, validating, and deploying TypeScript integration functions with built-in retries, rate limit handling, and observability. It enables per-customer integration configuration through connection metadata, allowing runtime customization without code changes. Nango can be deployed on managed infrastructure or self-hosted using Helm charts, with independently scalable services for credential management, function execution, sync processing, and webhook routing.
Features
- External API Integrations - Connects applications to external APIs with managed authentication, sync, and action functions.
- AI Agent Integration Platforms - Exposes external API integrations as callable tools for AI agents via MCP server and API endpoints.
- Credential-Isolated Function Exposures - Exposes integration functions as agent tools with per-user credential isolation.
- External API Tool Exposures - Exposes integration functions as callable tools for AI agents via MCP server or API.
- Multi-Protocol Tool Exposures - Makes integrations available as MCP tools, API endpoints, or SDKs for agents.
- AI Agent Servers - Exposes integration functions as callable tools for AI agents via MCP server with credential isolation.
- Action Function Exposures - Exposes selected action functions as discoverable tools via a single MCP server URL.
- Data Sync Automation - Automates recurring data synchronization from external APIs to local storage on fixed schedules.
- Scheduled External API Syncs - Provides scheduled recurring syncs that pull external API data into a local cache.
- Incremental Sync - Runs scheduled incremental syncs with pagination and checkpoint resumption for external API data.
- Scheduled Sync Engines - Runs recurring sync functions that paginate APIs, save checkpoints, and emit changed records.
- Unified Schema Syncs - Pulls data from multiple external APIs into a consistent unified schema through scheduled syncs.
- Per-Provider Translation Functions - Implements per-provider translation functions between external APIs and the unified model.
- Write Interfaces - Provides action functions that translate unified model writes into provider-specific API calls.
- Bidirectional Data Synchronizations - Synchronizes data bidirectionally between the product and external APIs for consistent access.
- Multi-Caller Function Executions - Executes integration functions on demand from apps, backend jobs, or agents.
- On-Demand Function Triggers - Triggers TypeScript functions on demand from apps, backends, or agents.
- Cloud Function Deployers - Uploads TypeScript integration functions to a managed runtime for synchronous or asynchronous execution.
- Provider-Specific Deployers - Deploys provider-specific TypeScript functions with managed auth, retries, and rate limits.
- Managed Integration Runtimes - Provides a managed runtime for writing, testing, and deploying TypeScript integration functions.
- Serverless Function Runtimes - Runs TypeScript functions on a managed runtime with retries, storage, and observability.
- Function-as-a-Service Platforms - Executes TypeScript functions in isolated workers with retries and rate limiting.
- Unified Data Models - Normalizes data from multiple external APIs into a single product-defined schema for consistent operations.
- Authenticated Request Proxies - Proxies API requests with stored user credentials attached automatically.
- Incoming Webhooks - Receives and reliably processes webhooks sent from external APIs.
- Integration Runtimes - Provides a managed runtime that executes custom TypeScript functions for syncing, actions, and webhook processing.
- Encrypted - Encrypts and automatically refreshes stored credentials, keeping connections valid without exposing secrets.
- API Credential Managers - Fetches stored credentials on demand for calling external APIs without handling secrets.
- Connection-Based Vaults - Encrypts and stores OAuth tokens per user-provider pair with automatic refresh.
- Credential Scoping - Executes custom logic using per-customer OAuth tokens without exposing credentials.
- External Service Authorizers - Manages full OAuth and API-key authorization flows for 800+ providers, storing credentials as connections.
- Managed Auth Flows - Embeds managed auth flows for connecting 800+ external APIs with credential storage and refresh.
- Stored Credential Retrievals - Provides secure retrieval of stored OAuth tokens and API keys for external API integrations.
- Multi-Provider Credential Stores - Handles OAuth flows, API key storage, and automatic token refresh for hundreds of APIs.
- Multi-Tenant Connection Managers - Manages OAuth flows, API keys, and token refresh for hundreds of APIs with multi-tenant storage.
- OAuth Integration Managers - Manages OAuth flows, API keys, and token refresh for hundreds of external APIs.
- Managed Integration Functions - Writes TypeScript integration functions running on a managed runtime with auth and scaling.
- Multi-Trigger Function Executions - Executes integration functions across multiple trigger types including on-demand, scheduled, and webhook.
- Scalable Server Functions - Executes integration functions with high concurrency, tenant isolation, and low-latency scheduling.
- Webhook Integrations - Receives webhook events from external APIs and maps them to user connections.
- Unified Data Modeling - Defines product-specific schemas and maps provider APIs to and from that model.
- External API Ingestion Pipelines - Ingests data from external APIs and translates it into a product-defined unified schema.
- Provider Schema Translations - Translates provider-specific API schemas into a product-defined model using mapping functions.
- Schema Normalizations - Normalizes multiple external API schemas into a single unified schema.
- Recurring Task Scheduling - Runs integration sync functions on fixed timetables for recurring data synchronization.
- Action Function Discoveries - Provides an MCP server for agents to discover and list available action functions.
- Provider Operation Templates - Provides pre-built function templates for common provider operations.
- Integration Code Generators - Generates working TypeScript integration code from natural language descriptions of use cases.
- Custom Workflow Integrators - Allows integration behavior to be configured differently for each individual customer.
- Bidirectional Sync Implementations - Combines read syncs with write actions to enable bidirectional data exchange with external APIs.
- Resumable Sync Checkpoints - Restarts syncs from saved checkpoints to continue fetching where interrupted.
- Incremental Sync Checkpointings - Saves cursors after each batch to fetch only changed records on subsequent sync runs.
- Per-Tenant Integration Customizations - Configures integration logic, credentials, and data mappings per tenant without custom code.
- Schema Drift Detectors - Validates provider data against the unified model to catch schema drift.
- Language-Agnostic Function Triggers - Invokes integration functions via HTTP APIs or SDKs from any backend language.
- Source-to-Runtime Deployers - Deploys TypeScript source to a runtime with compilation, dry-run, and no local project.
- Webhook Actions - Runs follow-up API requests and data updates when external webhook events arrive.
- Webhook-Sync Reconciliation - Reconciles real-time webhook events with periodic syncs to maintain complete data coverage.
- Service Scaling - Runs core services as independently scalable Node processes for high availability.
- Retry Strategies - Automatically retries failed API calls and respects external rate limits to ensure reliable data transfer.
- Self-Hosted Deployment Platforms - Deploys the full platform on customer-managed infrastructure using Helm charts.
- Action Triggers - Provides queued background execution of integration functions with retries and completion notifications.
- Asynchronous - Ships asynchronous background execution of integration functions with retry and notification support.
- Standardized Auth Flows - Guides users through standardized OAuth or API-key authorization flows for external services.
- Pre-built Authentication Components - Opens a branded, API-aware Connect UI for authorizing external services without leaving the product.
- Developer App Registrations - Registers OAuth developer app credentials and scopes to enable authorization flows.
- Credential Delegation - Runs each tool call using the specific user's own OAuth credentials, keeping provider secrets out of the agent loop.
- Connection-Resolving Routers - Receives webhooks, resolves user connections, and dispatches payloads to registered functions.
- Function Routings - Routes incoming webhook payloads directly into functions for processing.
- Per-Connection Registrations - Automatically registers provider-specific webhook URLs for each new user connection.
- Microservice Architectures - Runs each core service as independently scalable Node processes.
- Schema-Based Action Validators - Validates action function inputs and outputs using Zod schemas at runtime.
- Embedded Auth Interfaces - Provides a pre-built embedded Connect UI customizable with branding or replaceable entirely.
- Per-Customer Integration Configurations - Configures integration behavior per customer using connection metadata for runtime customization.
- External Event Integration - Listens for webhooks from external APIs and executes integration logic immediately upon an event.
- Integration and Admin Frameworks - Framework for managing native API integrations.
- Integration Platforms - Platform for managing pre-built product integrations.
