|
Arcade.dev raises $60 million to secure AI agents. I've been following Arcade.dev since last year, given this early stage San Francisco-based startup’s focus on one of the biggest challenges facing the future of AI agents. That's the problem of how to securely authorize models to access apps, APIs, databases and other so-called tools. The company has come up with a standardized approach to that dilemma. And in tech, the arrival of a broadly embraced standard can be a precursor to growth and adoption.
Arcade told me it has raised $60 million as it tackles the problem of securely managing which actions AI agents are authorized to take in enterprise apps, databases and tools. SYN Ventures led the Series A funding, with participation by Morgan Stanley and Wipro.
“Verifying identity is simple, but controlling exactly what an agent can access or modify is the real hurdle,” co-founder and CEO Alex Salazar, a former product leader at Okta, told me. You can read the full column here.
Arcade’s approach underscores how tightly interwoven technology and security and compliance can be. “If the tech layer isn’t there to enforce the policy, the policy is just a document," Salazar told me.
-
Those elements must be combined with a sound user experience. “Most policy is designed to say ‘no’. So even if the tech is there, people will actively try to work around it if it gets in the way,” he said. “The durable approach is to make the right thing easier than the wrong thing. To enable.”
-
Salazar launched Arcade in 2024 with Chief Technology Officer Sam Partee. Their original intention was to create an agent that could detect why a server or a database wasn’t operating properly. Along the way, they separated the model, or reasoning layer, from the action layer that interacts with tools. That required managing agent authorization.
“We rolled this out and made it work, and nobody was really that excited about our agent,” Salazar said. “But anyone who knew AI really well was like, ‘Oh, my God, like, [the AI agent authorization] is really powerful.’”
The key, Salazar said, was a new consistency of the agent’s action and the ability of the agent to access sensitive systems on a user’s behalf without directly giving the agent the human user’s credentials and, implicitly, without giving them a full level of user access.
Arcade dropped the agent to focus on its AI agent authorization technology.
Arcade is closely tied to MCP, a protocol that Anthropic launched in 2025 as a standard for connecting AI models to so-called tools such as email, APIs and other systems. It also works with similar protocols such as Google’s A2A. Arcade builds MCP servers for business systems with a built-in, standardized approach to agent authorization, policy enforcement and audits.
Jay Leek, founder and managing partner of SYN Ventures, said he viewed agent authorization as “the number one biggest emerging problem in AI today.”
What is your company’s experience deploying AI agents? Tell me about it.
|