Composio
by Composio (Sampark Inc)
Managed tool-calling and authentication layer connecting AI agents to 1,000+ enterprise applications
Composio is a developer-first integration platform that lets AI agents actually take action in business systems. It supplies over 1,000 pre-authenticated toolkits, fully managed OAuth, sandboxed execution and an MCP gateway, so engineering teams building agents stop writing and maintaining bespoke connectors and credential handling for every SaaS application.
Composio, built by Y Combinator W24 company Sampark Inc and founded in 2023, addresses the unglamorous half of agent engineering: connecting a model to the applications where work actually happens, and handling the authentication that connection requires. The platform exposes more than 1,000 pre-built toolkits — GitHub, Slack, Gmail, Linear, Notion, Sentry, Stripe, Salesforce, HubSpot and Vercel among them — through a single interface, with fully managed OAuth for every connector so developers never store or rotate third-party credentials themselves. Rather than stuffing hundreds of tool definitions into a context window, Composio resolves tools by intent and proposes an execution plan for complex multi-step workflows, and meta-tools such as tool search are never billed. Tools run inside remote sandboxed environments where results land in a navigable filesystem, and calls can execute in parallel. The platform is model- and framework-agnostic, shipping provider adapters for OpenAI, Anthropic's Claude Agent SDK, LangChain and Google GenAI, and it exposes sessions as MCP endpoints consumable by clients such as Claude Code and Cursor. SDKs are published for TypeScript and Python, and the open-source repository carries 29.7k GitHub stars, 4.7k forks and an MIT licence. Composio holds SOC 2 and ISO 27001:2022 certification, offers fine-grained data access controls and bring-your-own-cloud deployment, and an Enterprise KMS proxy lets customers hold their own encryption keys so Composio never sees API keys or tokens in plaintext. The company raised a $25 million Series A led by Lightspeed Venture Partners in July 2025, bringing total funding to $29 million, and lists agent.ai, Zoom, Letta, Glean and HubSpot among its customers.
The AI engineering team shipping agents that must read and write in production SaaS systems, and that does not want to own OAuth flows, token rotation and connector maintenance across hundreds of applications.
Agents get authenticated, sandboxed access to more than 1,000 business applications through one API, removing months of connector and credential engineering.
At a Glance
- Category
- Agent Development
- Pricing
- Freemium, Usage-based, Subscription, Contact for pricing
- Target Market
- CTOs, AI Engineers, Enterprise Developers, Product Engineering Teams
- Deployment
- Cloud-first, API-based, Hybrid
- Founded
- 2023
- Headquarters
- San Francisco, United States
- Customers
- 100,000+ developers; 200+ startups and enterprises
Key Features
- ✓1,000+ pre-built toolkits
One integration surface covering GitHub, Slack, Salesforce, HubSpot, Stripe and hundreds of other business applications.
- ✓Fully managed OAuth
Delegated authentication handled per connector and per user, so your service never stores or rotates third-party tokens.
- ✓MCP gateway
Exposes sessions as standard MCP endpoints consumable by Claude Code, Cursor and other MCP-aware clients.
- ✓Intent-based tool resolution
Tools are resolved by intent rather than configuration, avoiding context-window bloat from hundreds of tool definitions.
- ✓Sandboxed remote execution
Tool calls run as code in isolated environments with results written to a navigable filesystem, and can execute in parallel.
- ✓Enterprise KMS proxy
Customers hold their own encryption keys, so Composio never sees customer API keys or tokens in plaintext.
- ✓Framework adapters and SDKs
TypeScript and Python SDKs plus providers for OpenAI, Claude Agent SDK, LangChain and Google GenAI.
Capabilities
Use Cases
- •Support agent that resolves tickets end to end
The agent reads the ticket, queries Stripe for billing state and posts the resolution back to Slack without human copying.
- •Sales research and CRM hygiene
An agent enriches leads, updates HubSpot or Salesforce records and files follow-up tasks instead of a rep retyping fields.
- •Engineering workflow automation
Agents triage GitHub issues, open Linear tickets and post Sentry incident summaries into the correct Slack channel automatically.
- •Multi-tenant SaaS agent features
Per-user delegated auth lets each customer connect their own Gmail or Notion account rather than sharing one service credential.
- •Governed MCP access for coding agents
Give Claude Code or Cursor one approved MCP endpoint instead of every developer wiring up their own tool servers.
Ideal For
Best For
- ✓Giving agents authenticated write access to systems such as Salesforce, HubSpot, Slack and Linear without building OAuth flows
- ✓Exposing a governed MCP endpoint so Claude Code, Cursor or other MCP clients can reach approved enterprise tools
- ✓Running tool calls in remote sandboxes with parallel execution and a navigable filesystem for results
- ✓Multi-tenant products that need per-user delegated authentication rather than one shared service account
- ✓Swapping between OpenAI, Anthropic, LangChain or Google agent frameworks without rewriting the integration layer
Not Ideal For
- ✗Non-technical business teams — Composio is consumed only via SDK, CLI or MCP endpoint, and independent reviewers call it unsuitable for organisations without AI engineering resources
- ✗Buyers whose procurement requires HIPAA or an explicit GDPR attestation; Composio publishes SOC 2 and ISO 27001:2022 but reviewers note GDPR and HIPAA are not listed
- ✗High-volume agent workloads sitting on the $29 Pro tier, where per-call overage at $0.0003 — and a further $0.0002 for Composio-managed apps — compounds quickly
Integrations
Deployment
Market & Ratings
100,000+ developers; 200+ startups and enterprises
Market Analysis
Pros
- ✓Removes the highest-friction part of agent engineering — authenticated, per-user access to more than 1,000 business applications
- ✓Genuinely usable free tier at 100K tool calls monthly, hard-capped with no credit card, so teams can test in production before any spend
- ✓Model- and framework-agnostic with MCP endpoints, so the integration layer survives a change of agent framework or model vendor
- ✓SOC 2 and ISO 27001:2022 certified, with an Enterprise KMS proxy that keeps customer tokens out of Composio's plaintext view
Cons
- ✗Developer-only: consumption is via SDK, CLI or MCP endpoint, which independent reviewers flag as unusable for non-technical teams
- ✗GDPR and HIPAA coverage are not listed alongside the SOC 2 and ISO certifications, which stalls procurement in healthcare and parts of the EU
- ✗Per-call overage compounds quickly on the $29 Pro tier for complex multi-tool workflows, and Composio-managed apps carry a much smaller free allowance
- ✗Hacker News commenters cite licence restrictions that complicate enterprise use, and several community projects exist specifically to add credential and permission controls Composio does not fully cover
- ✗Independent review coverage is still thin — 4.9/5 from only seven G2 reviews — so there is little third-party evidence at enterprise scale
Pricing
Free
$0
- ✓100K tool calls per month
- ✓50K trigger events per month
- ✓Unlimited connections
- ✓3 team members
- ✓1M LLM tokens per month
- ✓Hard-capped, no overage charges, no credit card
Pro
From $29/mo
- ✓$29 monthly usage credit
- ✓Unlimited team members
- ✓Spend caps
- ✓30-day log retention
- ✓Read-only dashboard role
- ✓DPA, IP allowlist and ZDR add-ons
Enterprise
Contact for pricing
- ✓Committed volume with discounts
- ✓KMS, SSO and SCIM
- ✓MSA, DPA and SLA
- ✓Dedicated support
- ✓Custom log retention and higher API rate limits
List pricing is published and unusually generous: the free tier allows 100K tool calls and 50K trigger events monthly, is hard-capped so it pauses rather than billing you, and needs no credit card. Pro is $29 per month including $29 of usage credit, with overage at $0.0003 per tool call; Composio-managed apps draw on only 20K of the free allowance and cost $0.0002 extra per call. Meta-tools such as tool search are never billed. KMS, SSO, SCIM, MSA/DPA/SLA, custom retention and volume discounts are Enterprise-only and unpriced.
Security & Compliance
Connect
Sources
This page was written from 7 sources, 5 on domains other than composio.dev.
Stay Ahead of the Curve
Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.
SubscribeRelated Products
LangWatch
Open-source agent testing platform pairing simulation-based QA with OpenTelemetry tracing and evals
LangSmith
Framework-agnostic platform to observe, evaluate, deploy and continuously improve production AI agents
Kitesurf
An agent-first browser that runs in V8 isolates on Cloudflare Workers
Natural
Payments infrastructure that lets AI agents hold, send and collect money