ToolRisingofficial publisher

Actions Composio

Tool : A precise action the AI can call · requires composio

More than 1,000 action toolkits for SaaS services, with managed OAuth.

The largest library; centralized OAuth concentrates risk, a critical CVE in 2025 serves as a reminder.

GitHub · 30,738 ★ Docs

Overall score

8.4 /10

Security: one caveat, see the card

Utility

9.0

Reliability

10.0

Security

One caveat

Ease

5 min · Comfortable

Security reflects where data goes, requested permissions and incidents on record at the verification date. It is not a guarantee of zero risk: check the deployment mode and the connections you enable.

What it does, concretely

Connecting an AI agent to dozens of online services requires managing as many different authentication mechanisms, which represents considerable work before writing any business logic. Composio solves this problem by centralizing OAuth authentication, API keys, and tokens for more than 1,500 applications, and exposing them to the agent as ready-to-use tools.

In practice, the developer creates a session per end user, retrieves the corresponding tools in a single line of code, and passes them directly to their agent. Composio handles tool discovery at the right time, token refresh, and routing calls to the correct service. A hosted MCP endpoint also allows connecting clients like Cursor or Claude without going through the SDK.

This tool is aimed at developers building agents in Python or TypeScript who want to avoid rewriting authentication for each service. It is compatible with the main frameworks: OpenAI Agents, Anthropic, LangChain, LangGraph, CrewAI, Vercel AI SDK, LlamaIndex, and others.

However, Composio is not suited for no-code use or non-technical users: there is no public-facing visual interface for creating automations. In addition, the centralization of OAuth tokens at Composio represents a risk point to consider, as illustrated by a critical CVE in 2025.

What it offers

·Access to more than 1,500 toolkits covering common SaaS services, with pre-configured authentication.
·Centralized management of OAuth, API keys, and tokens per user, with automatic refresh.
·Per-end-user sessions to isolate connected accounts and access rights.
·Hosted MCP endpoint per session to connect clients like Cursor or Claude without the SDK.
·Triggers allowing subscription to third-party application events and routing them to the agent.
·Code execution sandbox pre-wired with the user's connected accounts and available tools.
·CLI for searching tools, executing actions, and connecting accounts from the terminal.
·Compatibility with many frameworks: OpenAI Agents, Anthropic, LangChain, LangGraph, CrewAI, Vercel AI SDK, LlamaIndex, Mastra, Cloudflare Workers AI, AutoGen.

Our tips

Store the session_id returned by composio.create() and reuse it with composio.use() between conversation turns to avoid recreating a session on every call.
Use the default meta tools for discovery rather than loading all tool definitions into context: this avoids saturating the agent's context window with hundreds of definitions.
Pass mcp: true to composio.create() to get a hosted MCP URL and connect Claude, Cursor, or any MCP client directly without integrating the SDK.
Configure sessions to restrict accessible toolkits and connected accounts, limiting the agent's action surface to what is strictly necessary.
Use @composio/slim instead of @composio/core if you want a lighter install: the API is identical but the package does not include the TypeScript source or embedded documentation.

Watch out

OAuth tokens for all users are stored and managed by Composio: a compromise of their infrastructure could potentially expose all connected accounts, as illustrated by a critical CVE in 2025.
The free plan is limited to 20,000 calls per month; beyond that, the service becomes paid, which can be surprising during a traffic spike.

In practice

Price: Freemium
Commercial use: Commercial use: yes
Available on: sdk-python, sdk-ts, mcp
Host: composio
FR interface: No

Security and data

Rating: Security: one caveat, see the card
Capabilities: readswritesexecutesnetwork
Your data: Data with third parties
Known incidents: CVE-2024-8954 (CVSS 9.8), contournement d'authentification, corrigée.
Maintenance: Active
Last release: 22 October 2026

Links and repository checked on 25 October 2026 · added on 1 January 2024

How to install Actions Composio

1. Get an API key from https://dashboard.composio.dev/settings. 2. Install the Python SDK: pip install composio composio-openai-agents openai-agents, or the TypeScript SDK: npm install @composio/core @composio/openai-agents @openai/agents. 3. Export your key: COMPOSIO_API_KEY=your_key. 4. Create a user session with composio.create(user_id='user_123') and retrieve tools with session.tools(). 5. Pass these tools to your agent and run it. 6. Security note: never commit your COMPOSIO_API_KEY to a public repository; your users' OAuth tokens transit through Composio's servers.

pip install composio composio-openai-agents openai-agents

Official documentation ↗

In the same category

Whole category Automation & agents →