# Composio — Managed OAuth, tool discovery and execution across 1,500+ apps for agents you already run. > Source: The Agents Index — https://theagentsindex.com/composio (structured, researched, re-verified) Composio is a hosted runtime that gives an AI agent authenticated access to 1,500+ apps through sessions, managed OAuth and an MCP endpoint. It also supplies triggers, a remote sandbox and paid third-party tools billed from one balance. **Best for:** Developers adding app integrations and auth to agents they already build | Fact | Value | | --- | --- | | Website | https://composio.dev | | Category | Tool integrations & auth | | Open source | No | | Price | Free | | Price source | https://composio.dev/pricing | | Price checked | 28 October 2026 | | MCP server | Yes | | API | Not stated | | Self-host | Partly, on Enterprise | | Facts | 20 facts from 8 sources | | Facts checked | 28 October 2026 | Screenshot of Composio: https://theagentsindex.com/img/1920/screenshots/composio.webp, captured 30 October 2026 **What we checked** - Pages last read: 28 October 2026 - Facts checked: 20 facts (From 8 sources) - AI answers: Named in 1 of 151 (Our October check) ## What we checked on Composio ### How much it does unattended **Agent permissions** · Partly — By default an agent runs any session tool immediately; approval gating by tool or tag exists but the vendor labels it experimental with sandbox, proxy and provider limitations. > By default, your agent can run any tool in a session as soon as it decides to. You can configure the session to require the user's approval before any tool runs > — https://docs.composio.dev/docs/approvals · Approvals, opening paragraph, checked 28 October 2026 ### Which models it runs on **Model choice** · Yes — You keep your own agent and model: connections, rules and history survive a model swap, and the runtime is driven through the SDK or MCP rather than one model vendor. > Use the runtime through the SDK or MCP. Your connected accounts are managed by Composio rather than tied to one model provider, so teams can use their existing agents without rebuilding authentication for each one. > — https://composio.dev/enterprise · Fit the infrastructure your company runs, 'Keep your choice of agent and model', checked 28 October 2026 ### Whose machine it runs on **Self-hosted** · Partly — Composio Cloud is the default; private VPC and self-hosted installs with Helm support exist only as an Enterprise arrangement agreed with the team. > Self-hosted deployment | Runs Composio in your environment. Your team takes responsibility for the agreed infrastructure and operations. | Enterprise arrangement, with Helm deployment support. > — https://docs.composio.dev/docs/security/token-custody · Deployment options table, Self-hosted deployment row, checked 28 October 2026 ### Building with it **SDK languages** · Yes — Python and TypeScript SDKs are documented with install commands for both, plus a documented REST API for other languages; no Go, Java, C#, Ruby or Rust package is shown. > The Composio Python SDK requires Python 3.11 through 3.15. > — https://docs.composio.dev/docs/quickstart · Quickstart, OpenAI Agents > Install, Python and TypeScript tabs, checked 28 October 2026 **Tracing and evals** · Yes — Execution logs record user, account, tool, status and timing, are searchable through a Logs API with cursor pagination, and can be forwarded to Datadog or Splunk. > Send Composio tool execution logs to your security information and event management (SIEM) or observability platform to investigate agent activity alongside your application logs. > — https://docs.composio.dev/docs/poc-to-prod/stream-logs-to-a-siem · Stream logs to a SIEM, opening paragraph, checked 28 October 2026 ### What it costs to run **How it meters** · Yes — Billing is usage-metered per tool execution and per delivered trigger event, with a flat $29 Pro fee that arrives as usage credit rather than a seat charge. > Tool calls (own app, API key, or MCP): Each tool execution counts once. Meta tools such as tool search are free. | 100K / mo free | then $0.0003 / tool call > — https://composio.dev/pricing · Usage table, Tool calls row, checked 28 October 2026 **Cost of one job** · Yes — On the free Hobby plan 100,000 tool calls a month cost nothing; beyond that 1,000 tool calls cost $0.0003 each, and paid Instant tools are charged on top. > 100,000 tool calls / mo (Think of it as letting your AI agent call tools 100,000 times per month, far more than most individuals will need.) > — https://composio.dev/pricing · Plans, Hobby plan bullet list, checked 28 October 2026 **Free tier** · Yes — A standing Hobby plan at $0 needs no credit card and includes 100,000 tool calls, 50,000 triggers, unlimited connected accounts and three team members. > Hobby: $0 ... No credit card required > — https://composio.dev/pricing · Plans, Hobby plan heading and final bullet, checked 28 October 2026 **MCP server** · Yes — Any MCP client can reach a session's tools through a session MCP URL and headers, with no provider package, and the vendor also sells a managed MCP gateway endpoint. > Use `session.mcp.url` and `session.mcp.headers` with any MCP-compatible client (Claude Desktop, Cursor, OpenAI Agents, etc.). No provider package needed. > — https://docs.composio.dev/docs/how-composio-works · Notes for AI Code Generators, 'MCP' subsection under Recommended Integration, checked 28 October 2026 **Bring your own key** · Yes — You supply your own model credentials in the quickstart and the vendor states your own model is never billed; only model calls Composio runs in its sandbox are charged. > Sandbox LLM tokens: Model calls Composio runs for you in Sandbox. Your own model is never billed. > — https://composio.dev/pricing · Usage table, Sandbox LLM tokens row, checked 28 October 2026 ### Buying it for a team **A company can buy it** · Yes — Organisations and projects are first-class: Pro includes unlimited team members, admins can enforce MFA, and Enterprise adds MSA, DPA and annual invoicing. > Unlimited team members > — https://composio.dev/pricing · Plans, Pro plan bullet list, checked 28 October 2026 **Seat model** · No — Composio states it does not charge per seat; Hobby caps the team at three members and Pro lifts that to unlimited, with billing driven by usage instead. > Usage-based: start free, scale as you grow. The Hobby plan needs no credit card. No per-seat pricing. > — https://composio.dev/pricing · Pricing page intro line, checked 28 October 2026 **Pooled budget** · Yes — Usage and paid third-party tool charges draw on one organisation balance with spend controls on Pro, rather than each member holding a separate allowance. > Instant Tools run supported paid-provider actions on Composio's accounts and charge your organization's Composio balance. Allow or exclude eligible tools and inspect charges. > — https://composio.dev/enterprise · Available today: tools and execution environments, 'Access paid capabilities through one wallet', checked 28 October 2026 **Admin controls** · Yes — Admins and application code can allow or exclude specific toolkits and actions, and the vendor says it enforces those restrictions server-side regardless of model instructions. > Allow or exclude specific toolkits and actions. Composio enforces configured restrictions on execution it manages before the downstream call is made, independently of the model's instructions. > — https://composio.dev/enterprise · Available today: security where agents act, 'Scoped permissions', checked 28 October 2026 **Audit log** · Partly — Tool execution and trigger events are logged with metadata and retained a year, but the vendor states the logs endpoint gives no organisation-level administrative audit feed. > This guide covers tool execution events. The endpoint does not provide a general API request or organization audit feed. > — https://docs.composio.dev/docs/poc-to-prod/stream-logs-to-a-siem · Stream logs to a SIEM, intro paragraph after the first sentence, checked 28 October 2026 **Single sign-on** · Partly — SAML and OIDC single sign-on with SCIM 2.0 provisioning and directory-group mapping is listed as Enterprise, alongside MFA for ordinary dashboard sign-in. > SSO / SCIM / customer-managed keys > — https://composio.dev/pricing · Plans, Enterprise plan bullet list, checked 28 October 2026 ### What happens to your code **Opt out of training** · Yes — Nothing to opt out of: the vendor states payloads are never used to train models on any plan, and only de-identified execution metadata may be reused. > Composio does not use request arguments, response data, or trigger payloads to train or improve AI or machine learning models, on any plan. > — https://docs.composio.dev/docs/security/data-retention · Data retention and handling, 'Model training' section, checked 28 October 2026 **Data residency** · Partly — Composio Cloud names no region or jurisdiction; where data sits is settled per deployment in a private VPC or self-hosted Enterprise arrangement. > Use Composio Cloud, or arrange a private VPC or self-hosted deployment with the Enterprise team. Credential custody, operator access, key ownership, regions, logs and backups depend on the agreed deployment architecture. > — https://composio.dev/enterprise · Fit the infrastructure your company runs, 'Choose your deployment', checked 28 October 2026 **Getting out** · Partly — Logs are searchable and exportable through a read-only Logs API and deletion can be requested, but Pro's monthly usage credit expires and does not roll over. > $29 monthly usage credit included (Unused credit expires at the end of each billing month and does not roll over.) > — https://composio.dev/pricing · Plans, Pro plan bullet list, checked 28 October 2026 **Certifications** · Yes — SOC 2 Type II attestation and ISO 27001:2022 certification are claimed, with reports and the sub-processor list behind the vendor's Trust Center. > Composio is SOC 2 Type II attested and ISO 27001:2022 certified. Provider credentials are encrypted at rest, and requests use encryption in transit. > — https://composio.dev/enterprise · Evidence for your security review section, checked 28 October 2026 ## Composio price and terms **Terms** - Free plan: Yes — Hobby plan at $0 a month with no credit card: 100,000 tool calls, 50,000 trigger events, 1M sandbox LLM tokens, unlimited connected accounts and 3 team members; up to 20K of the tool calls may use Composio-managed shared OAuth apps. **What needs a higher plan** - Enterprise: Self-hosted, Single sign-on, Data residency ## For AI agents - MCP server: Yes Pricing page as we captured it: https://theagentsindex.com/img/1920/screenshots/composio/pricing.webp, captured 30 October 2026 Read on https://composio.dev/pricing, 28 October 2026. ## Composio alternatives - [Aident Loadout](https://theagentsindex.com/aident-loadout) · Free plan, then $9.90 a month: Managed capability layer that connects any AI agent to 1,000+ apps through one reusable, audited setup. - [Nango](https://theagentsindex.com/nango) · Free plan, then $50 a month: Handles OAuth for 1,000+ APIs and runs your TypeScript integration functions, exposed to agents over MCP. - [Arcade](https://theagentsindex.com/arcade-dev) · Free plan, then $25 a month: Runtime that brokers OAuth, executes MCP tools and audits every agent action against the user's own permissions. All 3 publish a price. [All 3 alternatives](https://theagentsindex.com/composio/alternatives/) ## Questions about Composio ### How much does Composio cost? Composio is free to use. From composio.dev/pricing, checked 28 October 2026. ### Does Composio have an API or an MCP server? It has an MCP server. ### Is Composio open source, and can you host it yourself? You can host it yourself on Enterprise. ### What have we checked on Composio? 20 facts, under these headings: How much it does unattended, which models it runs on, whose machine it runs on, building with it, what it costs to run, buying it for a team, what happens to your code. ### How do we check Composio? We hold 20 facts on Composio, quoted from 8 pages. Facts and price last checked 28 October 2026. How we check every listing: https://theagentsindex.com/methodology/ ## Sources and changes Last changed 30 October 2026 **Sources** (8) - https://composio.dev/pricing, read 28 October 2026 - https://composio.dev/enterprise, read 28 October 2026 - https://docs.composio.dev/docs/poc-to-prod/stream-logs-to-a-siem, read 28 October 2026 - https://docs.composio.dev/docs/approvals, read 28 October 2026 - https://docs.composio.dev/docs/how-composio-works, read 28 October 2026 - https://docs.composio.dev/docs/quickstart, read 28 October 2026 - https://docs.composio.dev/docs/security/data-retention, read 28 October 2026 - https://docs.composio.dev/docs/security/token-custody, read 28 October 2026 ## Is this yours? AI assistants like ChatGPT and Claude opened The Agents Index pages 2,746 times in September. Claim Composio: https://theagentsindex.com/claim/composio Report an error if a fact is wrong: hello@theagentsindex.com, subject "Report an error: Composio (composio)".