Executor

Founded by Rhys Sullivan in 2026

Connect AI agents to all your tools through one MCP gateway

Cost

Free Tier, Paid

Rating

★ People love it

Time to value

Quick Setup (< 1 hour)

You can use Executor to connect AI agents like Claude Code, Cursor, or Codex to all your existing tools through a single endpoint. It converts tools from different protocols (MCP, OpenAPI, GraphQL) into one uniform shape so any agent can call them the same way. It reduces token usage by only loading tool schemas when actually needed, keeps credentials secure in a sandboxed environment, and lets your whole team share integrations without per-person setup.

What Executor does

Register an OpenAPI, MCP, or GraphQL tool so any agent can call it with the same schemaSearch the tool catalog by query and load the schema only when a tool is actually neededInject API credentials into outbound requests without exposing them to the agent or modelReview a full trace of every tool call an agent made in a given runSet destructive action policies so agents ask before running mutations or deletesShare integrations and credentials across an entire team from a single configurationRun Executor as a background CLI service in a headless server environmentDeploy a self-hosted Executor instance for teams with custom security requirementsExposes a single 'execute' tool to agents instead of thousands, reducing prompt token usage by over 99%Normalizes MCP, OpenAPI, and GraphQL tools into one unified name-and-schema formatRuns tool calls in an isolated JavaScript sandbox so credentials never appear in agent or model contextAutomatically distinguishes safe (read) vs destructive (write/delete) actions and asks for confirmation before running dangerous onesShared team integrations with per-user and shared credentials — no per-person setup requiredFull trace log of every agent run and tool call for auditing decisions after the factAvailable as a cloud service, desktop app (Mac/Windows/Linux), or self-hosted CLI — all MIT licensedLazy-loads tool schemas only when actually called, keeping context windows small