One (withone.ai) Review: The Agent Runtime That Replaces Your Integration Spaghetti

If you've built an AI agent that needs to actually do things across multiple apps, you know the pain. Every API needs its own OAuth flow, token refresh logic, error handling, and rate limit management. Multiply that by 10 apps and you've spent more time on auth plumbing than on the agent itself.

One (formerly Pica) tries to kill that problem entirely. It's an integration runtime that gives your agents authenticated access to 250+ platforms through a single CLI, dashboard, and universal MCP server. You connect your apps once, and your agent can act across Gmail, Slack, Stripe, GitHub, HubSpot, and thousands more without writing a single OAuth flow.

Here's whether it actually delivers.

What One Does

One is built around a simple idea: AI agents shouldn't need to know how APIs work. The platform handles authentication, token refresh, rate limiting, and API knowledge so your agent can focus on deciding what to do, not how to call the endpoint.

The core components:

• CLI (one): Search for integrations, connect apps, and execute actions from your terminal. It's the primary interface for developers.
• Universal MCP Server: The largest hosted MCP server with 47,500+ vetted actions. Compatible with Cursor, Claude Desktop, and any client that supports the Model Context Protocol.
• One Flow: A workflow runtime for multi-step agent tasks. Supports branching, loops, parallel execution, and pause/resume. Agents can generate and modify flows as JSON.
• AuthKit: An embeddable connect UI (think Plaid for APIs). Your users authenticate their own accounts, tokens refresh silently, and credentials stay isolated per user.
• Bridge: Paste any API docs URL and One generates a hosted MCP server for that API. This is how you connect internal or niche APIs that aren't in the 250+ platform catalog.

Everything runs on open-source knowledge – the full SDK, every skill definition, and MCP tools are publicly available on GitHub.

Pricing Breakdown

One keeps pricing straightforward. Every plan includes 1M API calls, which is generous for getting started.

Source: Official pricing page

The free tier is genuinely usable, not a trial with a countdown. You get unlimited connections, full CLI and MCP access, and 1M API calls with no credit card required. The catch is lower rate limits (100/min), basic relay (5 endpoints), and 14-day log retention.

For production agents, overage costs are the thing to watch. If your agent makes 5M calls in a month on the Starter plan, that's 4M overage at $0.25 per thousand, so $1,000 extra. The Pro plan's lower overage rate ($0.15/1K) makes more sense at scale.

The CLI Experience

The one CLI is the centerpiece. Install it, run one connect, and you're authenticating apps through your browser. Once connected, you can search for actions (one search "send email"), execute them directly, or chain them into workflows.

For vibe coding workflows, the CLI means your agents can interact with real services without you building API clients. Connect Slack, and your agent can post messages. Connect Stripe, and it can check payment status. Connect GitHub, and it can create issues or review PRs.

The framework-agnostic design matters here. One works with OpenAI, Anthropic, LangChain, CrewAI, Vercel AI SDK, or your own custom code. You're not locked into a specific LLM or orchestration framework.

MCP Server: Why It Matters

The Model Context Protocol is becoming the standard for how AI tools connect to external services. One hosts what it calls the largest MCP server with 47,500+ actions across 250+ platforms.

In practice, this means you can add One as an MCP server in Cursor, Claude Desktop, or any compatible client, and immediately get access to all connected integrations. Your agent gains the ability to act across your entire app stack without custom tool definitions.

The Bridge feature is worth highlighting separately. If you have an internal API or a niche SaaS that One doesn't cover, you paste the API docs URL and Bridge generates a hosted MCP server for it. That's a significant time-saver versus writing custom MCP tool definitions manually.

Security and Data Privacy

For a tool that handles OAuth tokens for 250+ services, security is non-negotiable. One claims SOC 2 compliance, with credentials encrypted at rest and in transit. Each user's connections are fully isolated, meaning one compromised account can't access another user's tokens.

Key policies from their privacy page:

• Integration credentials are deleted when you disconnect an app
• Account deletion removes all associated data
• No documented training on user data for LLMs
• Enterprise tier adds SSO, SCIM, and granular access policies with audit logs

The telemetry is reasonable: usage data (API calls, feature usage) and basic device logs, no third-party tracking cookies.

One Flow: Multi-Step Agent Workflows

One Flow is the workflow runtime that handles multi-step tasks. Think of it as a programmable pipeline where each step can call different integrations, with support for branching logic, parallel execution, loops, and pause/resume.

The interesting part is that agents can generate One Flow workflows as JSON. So instead of you pre-defining every workflow, your agent can dynamically create and modify them based on context. This is a step beyond static automation tools like Zapier where the workflow shape is fixed at build time.

Strengths

• Massive integration catalog: 47,500+ actions across 250+ platforms with managed auth
• Framework agnostic: Works with any LLM or agent framework, not just one ecosystem
• CLI-first: Developer-friendly interface that integrates into existing workflows
• Open source knowledge: SDK, skills, and MCP tools are all on GitHub
• Bridge for custom APIs: Turn any API docs URL into a hosted MCP server
• Generous free tier: 1M calls with no time limit or credit card

Limitations

• No mobile apps: CLI + web dashboard only, no native mobile experience
• Usage-based overages: High-volume agents can rack up costs quickly past the included 1M calls
• Early post-rebrand: Rebranded from Pica in March 2026, so the community ecosystem and templates are still building out
• Team features gated: Org invites, long log retention, and advanced AuthKit require paid plans
• Limited public templates: Compared to Zapier or Make, the community workflow library is sparse

One vs. the Competition

One vs. Composio: Both target AI agent integrations with MCP support. Composio leans more open-source and self-hostable. One offers a more polished managed runtime with the CLI, AuthKit, and Bridge. Pick Composio if you want maximum control; pick One if you want less infrastructure overhead.

One vs. Zapier: Zapier is the king of no-code automation with 7,000+ app connections. One is built for developers who want CLI/MCP access and agent-native integrations. If you're building AI agents, One is the better fit. If your team is non-technical, Zapier wins.

One vs. n8n: n8n is self-hosted, open-source workflow automation. One is a managed runtime optimized for AI agents. n8n for privacy-first teams who want to own their infrastructure; One for developers who want managed auth and MCP without running servers.

One vs. Pipedream: Both are developer-oriented. Pipedream has code-first workflows with triggers. One adds the universal MCP server and managed auth layer that AI agents need. Pipedream for event-driven workflows; One for agent-driven integrations.

Who Should Use One?

One makes the most sense for:

• Indie hackers shipping AI agents who don't want to build OAuth flows for every API
• Dev teams adding tool use to LLM-powered products via MCP
• Anyone building with multiple AI frameworks who needs a single integration layer
• Teams that need AuthKit to let end-users connect their own accounts securely

It's less ideal for:

• Non-technical teams (Zapier or Make will be easier)
• Teams on tight budgets with very high API call volumes
• Simple one-off automations that don't need an agent runtime

FAQ

Is One free? Yes, the free tier includes 1M API calls, unlimited connections, and full CLI/MCP access with no time limit.

What happened to Pica? Pica rebranded to One in March 2026. Same team, expanded feature set with One Flow, Bridge, and the rebrand.

Does One support MCP? Yes. One hosts the largest MCP server with 47,500+ actions, compatible with Cursor, Claude Desktop, and any MCP-compatible client.

Is One open source? The knowledge base, SDK, and MCP tools are open source on GitHub. The hosted runtime is proprietary.

Does One train on my data? No. Their privacy policy states no LLM training on user data.

The Bottom Line

One solves a real, annoying problem for anyone building AI agents: the integration plumbing. Instead of writing OAuth flows, managing tokens, and building API clients for every service your agent needs to talk to, you connect once through One and your agent gets authenticated access to everything.

The CLI-first approach, universal MCP server, and Bridge feature make it genuinely useful for developers. The free tier is generous enough to build and ship with. The main risk is overage costs at scale, so keep an eye on your API call volume as your agents grow.

If you're building agents that need to interact with real services, One is worth trying. The setup takes minutes, and the 1M free API calls give you plenty of room to test whether it fits your workflow.

Check out One on our tools directory →