ToolJet
ToolJet bundles its MCP server into the EE image as AI builder features land in the LTS track
A side-by-side editorial comparison of Infisical and Apache ShenYu — release velocity, themes, recent moves, and the top alternatives to consider.
Infisical ships Agent Vault to GA and light mode while deprecating Gateway v1
Infisical is shipping at a high cadence across three tracks: PAM (Privileged Access Management), PKI/certificate management, and Agent Vault. Agent Vault — which lets AI agents authenticate and access secrets without embedded credentials — graduated from preview to GA in v0.165.13, alongside a full light mode UI and recursive secret syncs (stage one). Gateway v1 was deprecated in the same release, consolidating the deployment model.
An API gateway that has quietly grown an LLM plugin family — and then stopped shipping.
Apache ShenYu's tracked releases run through the 2.7.0.x patch line and stop in November 2025. The consistent thread across those releases is a set of AI plugins accumulating alongside the traditional gateway ones: an AI proxy, an AI token limiter, an AI request transformer, and an MCP server plugin that shows up in the most recent entry through timeout and request-size fixes. The rest of each release is bug fixing and test coverage, with configuration synchronization through Nacos accounting for a recurring share of the defects.
Infisical is shipping at a high cadence across three tracks: PAM (Privileged Access Management), PKI/certificate management, and Agent Vault. Agent Vault — which lets AI agents authenticate and access secrets without embedded credentials — graduated from preview to GA in v0.165.13, alongside a full light mode UI and recursive secret syncs (stage one). Gateway v1 was deprecated in the same release, consolidating the deployment model.
The deprecation of Gateway v1 and relay-optional gateways in v0.165.11 simplify the self-hosted deployment surface while PAM coverage expands (Snowflake, Oracle, break-glass access requests). Agent Vault's rapid preview-to-GA arc and the transactional event outbox in v0.165.14 point to agentic secret management as the product's newest bet: enabling AI agents to operate with scoped, short-lived credentials at scale.
Recursive secret syncs (stage one shipped) will expand to cover cross-environment sync trees, and Agent Vault will likely gain more granular method/path rule sets and audit logging depth as enterprise customers onboard agentic workloads.
Apache ShenYu's tracked releases run through the 2.7.0.x patch line and stop in November 2025. The consistent thread across those releases is a set of AI plugins accumulating alongside the traditional gateway ones: an AI proxy, an AI token limiter, an AI request transformer, and an MCP server plugin that shows up in the most recent entry through timeout and request-size fixes. The rest of each release is bug fixing and test coverage, with configuration synchronization through Nacos accounting for a recurring share of the defects.
ShenYu is positioning as a gateway for model traffic as well as service traffic, and the pattern is telling — the AI plugins appear first as features and then, one release later, as bug reports, which is what real usage looks like. Rate limiting by token rather than by request is the specific piece that matters, since it is the unit LLM providers actually bill on. Against that, the release notes are undifferentiated pull-request lists and nothing has shipped in the tracked feed for over eight months.
Expect further hardening of the MCP server plugin, which is the newest and least settled of the AI additions. The gap since 2.7.0.3 should be checked against the project's actual activity before drawing conclusions from it.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Infisical or Apache ShenYu.
ToolJet bundles its MCP server into the EE image as AI builder features land in the LTS track
GitHub adds Claude Opus 5.5 and GPT-6 models while shipping sandboxed agent execution
Parse Server patches three security CVEs: GraphQL disclosure and protectedFields bypass
werf ships weekly across two tracks — v3 dev gets JSON Schemas and Harbor v2 fixes, v2 alpha gets the backports.
Buildkite ships Agent v4, an MCP server for AI-native CI, and a VS Code extension in a dense September push.
Jackett's daily tracker churn adds 11 new APIs and formalizes its security policy in a week
See all Infisical alternatives → · See all Apache ShenYu alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Infisical is currently shipping more aggressively (velocity 7.5 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Infisical is currently shipping more aggressively (velocity 7.5 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Infisical alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Infisical alternatives" section above for the current picks, or visit /alternatives/infisical for the full list with editorial commentary on each.
Top Apache ShenYu alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Apache ShenYu alternatives" section above for the current picks, or visit /alternatives/shenyu for the full list with editorial commentary on each.