Keragon vs XCaliber Health (2026)

There are 400+ healthcare integrations (EHRs, CRMs, scheduling, communication) plus a universal HTTP connector for any system with an API, with connector- and action-level scoping that keeps connections read-only until write access is granted. More than 30 EHRs are supported, among them athenahealth, Elation, Healthie, DrChrono, Tebra, eClinicalWorks and ModMed, along with forms and billing systems.

SourceKeragon, keragon.com/agents and /mcp; keragon.com/pricingread 2026-10-05

Merlin operates inside athenahealth with EHR write-back, books and cancels against real-time EHR availability, submits prior authorizations to payers and tracks them, with out-of-the-box connectors to any EHR and athenahealth, Epic and eClinicalWorks named. For referrals, it pulls data from the chart, contacts the specialist's office, moves the records and schedules the visit.

SourceXCaliber Health, xcaliberhealth.ai/merlin and xcaliberhealth.airead 2026-10-05

A no code builder creates multi step workflows with branching and conditional steps, and the customer configures them. A workflow can hand off to an agent for a judgment call, and an agent can trigger a workflow for deterministic steps. To build an agent, a customer sets a trigger, briefs it in plain English, gives it the tools it needs and tests it on real cases before it goes live.

SourceKeragon, keragon.com/agentsread 2026-10-05

Merlin runs role based assistants across scheduling and refills, referrals and intake, and prior authorization. The assistants are Patient Navigator, Practice Navigator, Quality and Risk Analyst, AI Nurse and Care Coordinator, which orchestrates workflows across teams. The Care Coordinator handles referral routing, follow ups after visits, chronic disease outreach and waitlist recovery, and the Practice Navigator shows where workflows stall and how each role is performing.

SourceXCaliber Health, xcaliberhealth.ai and /merlinread 2026-10-05

Workflows start from inbound webhooks and from polling triggers that check connected systems as often as every minute, and the AI receptionist agent answers patient calls. Polling runs every 5 minutes on Starter and Professional and every minute on Scale Up and Enterprise. Agents start on a schedule or on an event the customer sets.

SourceKeragon, keragon.com/pricing and /agentsread 2026-10-05

The Quality and Risk Analyst continuously monitors documentation, measures and patient activity, and prior authorization starts when the agent detects an auth is required. Outbound outreach is automated, and patients reach Merlin by phone, SMS and the portal. Patients can book, reschedule and cancel in a natural conversation, with urgency and real time EHR availability checked as they go.

SourceXCaliber Health, xcaliberhealth.ai/merlinread 2026-10-05

Agents get no knowledge base or document store to search, and they act on data from connected tools within the scopes granted. The Pre Visit Prep Specialist, for example, reads intake responses, prior visit notes, active medications and recent labs from connected systems and turns them into a structured patient brief.

SourceKeragon, keragon.com/agentsread 2026-10-05

Assistants work over a unified data layer: the Data Gateway harmonizes the customer's EHR and system data (ETL for health data) with a FHIR resource catalog, kept up to date over the health system's own data. XCaliber does not describe how retrieval works over it. The Quality and Risk Analyst uses that population data to find open care gaps and track value based care measures.

SourceXCaliber Health, xcaliberhealth.ai and /merlinread 2026-10-05

There is no stated memory that agents keep between runs. PHI is processed in transit and not stored unless the customer configures storage, and AI providers retain none of the data. Customer data is deleted at offboarding under Keragon's retention policy.

SourceKeragon, keragon.com/securityread 2026-10-05

Patient Navigator turns touch points into care journeys that keep progressing, so state carries across interactions. XCaliber does not say what an agent keeps, for how long or who can see it, and the unified data layer is the health system's own data, not memory the agents keep.

SourceXCaliber Health, xcaliberhealth.airead 2026-10-05

Human review checkpoints require a person to review and approve before an agent takes a sensitive action. The agent shows its plan and waits for sign-off. Agents are bounded to granted tools and rules, and connectors are read only until write access is granted per action. Human checkpoints come on every plan, along with usage alerts and spend controls.

SourceKeragon, keragon.com/agents, /security and /pricing; keragon.com/securityread 2026-10-05

Refill coordination checks eligibility and limits, prepares the renewal summary and routes it for provider approval before anything is written back to the EHR, and the assistants' actions run within guardrails. The AI Nurse supports clinical triage, device troubleshooting and basic medical questions, while the decision on a renewal stays with the provider.

SourceXCaliber Health, xcaliberhealth.ai/merlinread 2026-10-05

The platform is SOC 2 Type II audited with continuous control monitoring, and HIPAA compliant with a BAA on every paid plan and a trust center with the report and live control status. Google sign in, two factor authentication and view, build and manage roles come on every plan, and SAML and LDAP single sign on come on Enterprise. Connectors are scoped by connector and action, and credentials sit in a central encrypted store that builders never see. Data is encrypted with AES-256 at rest and TLS 1.2 or later in transit.

SourceKeragon, keragon.com/security and /pricingread 2026-10-05

XCaliber shows HIPAA and SOC 2 badges, but offers no access controls for the customer, such as single sign on, roles or permissions.

Sourcexcaliberhealth.airead 2026-09-28

An immutable activity log records every workflow run, agent action and connection change, each agent and MCP tool call is logged and traceable to a user or agent step by step, PHI access is logged and replayable, and execution monitoring raises alerts with automatic retries. Every access, edit and deletion of PHI shows who did what, and every read and write through Keragon MCP is logged for review.

SourceKeragon, keragon.com/security and /mcpread 2026-10-05

Every assistant action is auditable, and IT and compliance teams can trace every action with full visibility. The Practice Navigator adds real time views of workflow bottlenecks and role performance, and prior authorizations are tracked once submitted to the payer.

SourceXCaliber Health, xcaliberhealth.ai/merlinread 2026-10-05

Keragon runs on AWS but names no hosting region, offers no choice of region and has no option to run in the customer's own environment or on premises. PHI passes through in transit and is not stored unless the customer sets that up. AWS and Google are its core subprocessors, and business continuity and disaster recovery plans are tested regularly.

SourceKeragon, keragon.com/securityread 2026-10-05

XCaliber names no hosting region and no option to run in the customer's own environment.

Sourcexcaliberhealth.airead 2026-09-28

A templates gallery holds prebuilt healthcare workflows and named agents (AI receptionist, AI answering service, AI scheduling agent, balance follow-up), each doing its own job. The agents also include a Patient Intake Specialist, an Appointment Reminder Agent, a No Show Recovery Specialist, an Insurance Verification Specialist, a New Patient Acquisition Agent and a Pre Visit Prep Specialist. They do jobs such as rebooking missed visits, checking coverage and copays before a visit, and booking website leads onto a provider's calendar.

SourceKeragon, keragon.com/agentsread 2026-10-05

Five named role based assistants each do a separate job: Patient Navigator, Care Coordinator, Practice Navigator, Quality and Risk Analyst and AI Nurse, and each works on its own. Patient Navigator handles scheduling, prescription renewals and outbound outreach, and the Quality and Risk Analyst finds open care gaps and tracks value based care measures.

SourceXCaliber Health, xcaliberhealth.ai and /merlinread 2026-10-05

A bring your own LLM provider option for agent intelligence is listed for Enterprise, subject to availability on request. Otherwise the agents' model is not named. Keragon MCP lets a customer's own AI client, such as ChatGPT or Claude, use Keragon tools from outside, which does not change the model behind Keragon's own agents. Each agent action uses a few AI credits, and plans include from 5,000 to 60,000 credits a month.

SourceKeragon, keragon.com/pricing and /mcpread 2026-10-05

Which model powers Merlin is not disclosed, and the customer has no choice of model.

Sourcexcaliberhealth.airead 2026-09-28

Keragon MCP lets a customer's own AI client (ChatGPT, Claude, Gemini) act across 400+ connectors under the customer's BAA with least-privilege access, and workflows accept inbound webhooks and reach any API through a universal HTTP connector. The MCP endpoint also works with Cursor and with voice AI agents. App credentials stay in Keragon and never reach the AI client, and only the tools a customer whitelists are exposed.

SourceKeragon, keragon.com/mcpread 2026-10-05

Developer documentation sits at docs.xcaliberhealth.ai, alongside a FHIR resource catalog and the Data Gateway for building on the platform. XCaliber describes the Data Gateway as ETL for modern health data with out of the box connectors to any EHR or EMR, and health tech companies such as Fold Health, Interactly.ai, Codametrix and AssureCare appear among its customers.

SourceXCaliber Health, xcaliberhealth.airead 2026-10-05

Keragon maintains evaluations and safety rules for every agent by default, agents take test runs before they go live, test runs of workflows are free, and failed workflows are diagnosed and fixed by the platform. A test run previews exactly what an agent will do before it touches a live system, and agents are tested on real cases.

SourceKeragon, keragon.com/pricing and /agentsread 2026-10-05

Customers get no way to test or evaluate the assistants.

Sourcexcaliberhealth.airead 2026-09-28

There is no stated browser, desktop or computer control. Agents and workflows act through connectors, webhooks and HTTP APIs. Agents reach patients by text, email and voice, and reach systems such as EHRs and schedulers through connectors.

SourceKeragon, keragon.com/agents; keragon.com/pricingread 2026-10-05

Merlin works through EHR connectors and phone, SMS and portal channels, with no browser or computer control.

Sourcexcaliberhealth.airead 2026-09-28