Give your AI secure accessto1,700+ appsin minutes


Trusted by
  • AWS
  • Google
  • Kimi
  • Zoom
  • Wix
  • Nous Research
  • Emergent
  • Island
  • Athena
  • Hostinger
  • Arizona State University
  • ClickFunnels

Make your AI finish what you ask

Composio gives it the right tools, access to your accounts, and skills that already work, so it gets it right the first time.

Try it in your AI
ClaudeClaude
Reply...Opus 5.5
Waiting for Claude · 0 of 4

Works with any AI

Setup takes less than a minute. See the guide for each

Don’t settle for AI that stops halfway

Long jobs are where AI stalls. Composio gives it proven steps, a place to run code, and the tools to fill any gap.

Prep me for my 10am with AcmeSkill loaded
prep-for-a-meeting / SKILL.mdPrep for a MeetingBuild a meeting brief: research, history, talking points.
  1. 1ResearchAcme and the people on the 10am invite
  2. 2HistoryLast month of threads and where the deal stands
  3. 3Talking pointsA one-page brief, ready before the call
Watch outLeave your own teammates out. Research only Acme's people.

Tested skills for recurring work

Composio gives your AI skills: tested ways to do a job, so it knows what to check and what to avoid.

Reconcile September's Stripe payouts with Xero
computer · reconcile september
download payouts
match the ledger
flag the rest
payouts checked0 / 4,812
Done: 6 of 4,812 payouts need a look

A computer for the heavy work

When a task means thousands of rows, your AI runs code in a private workspace and brings back just the answer.

Exa search ×14$0.14
Apollo ×14$0.28
Whisper ×1$0.06
Total$0.48
Accounts created0

Instant tools, no sign-ups

1,500+ tools for search, enrichment, transcription and more, ready when a task needs them. Pay per use, with no accounts to create.

Explore Instant tools

One setup for your whole team

Share apps, skills and a budget once. Every teammate's AI gets them.

Set up your team

Secure access, always in your control

Decide what your AI can reach and what it can do. Composio keeps the rest out.

Your accounts, your rules

Your AI never sees a password. You choose what it can do in each app.

Prompt injections get blocked

Instructions hidden in emails and pages are stopped before your AI reads them.

Every action on record

See every action your AI took, in which app, and what needed your OK.

Build it into your agent

Your agent gets the same layer. Your users connect their own accounts, and Composio runs every call.

Explore the platform
~/your-agent
Waiting for your agent · 0 of 4

Works with any framework

More
$npm install @composio/core @composio/openai openai
import OpenAI from "openai";
import { Composio } from "@composio/core";
import { OpenAIResponsesProvider } from "@composio/openai";

const composio = new Composio({
  apiKey: process.env.COMPOSIO_API_KEY,
  provider: new OpenAIResponsesProvider(),
});
const client = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });

// Replace with your authenticated, stable application user ID.
const session = await composio.create("user_123");
const tools = await session.tools();

const response = await client.responses.create({
  model: "gpt-6-astra",
  tools,
  input: "List my GitHub repositories.",
});
Setup & execution
  • Run OpenAI code on your server. Set COMPOSIO_API_KEY from project Settings → API Keys and OPENAI_API_KEY from OpenAI. Keep both keys out of browser code.
  • user_123 is your stable application user ID, not a Composio login or session ID. Derive it from your authenticated user.
  • This requests a response, not tool execution. Continue with the full tool-call loop.

Built for enterprise deployment

For enterprise teams: see who each agent acts for, what it can reach and what it's allowed to do, and change it in one place.

  1. AgentRevenue copilotThe finance team's agent
  2. Acts forPPriya ShahFinance, viaOkta
  3. Can reachHer own accountsResolved on every call
  4. Policy
    • Update deals
    • Send email
    • Delete tickets
What happened
  • Updated the Acme dealAllowed
  • Tried to delete a ticketBlocked
When people moveFinanceSalesPriya's finance access ended on every agent at once

One place to govern every agent in your company.

Roll Composio out across your company within your identity, security and data rules.

Works with your identity provider

Single sign-on with SAML or OIDC, and SCIM to add, move and remove people automatically.

OktaMicrosoft Entra IDGoogle Workspace

Certified security controls

SOC 2 Type II and ISO 27001, with a DPA from day one, so your security review can close.

  • Deploy anywhere
    • Composio Cloud
    • Your own VPC
    • Fully self-hosted
  • No payloads stored
    • Metadata only
    • Retention you set
    • 7 days to 1 year
  • Every call recorded
    • User, tool and outcome
    • CSV export
    • SIEM-ready
  • Dedicated support
    • Dedicated team
    • Production SLAs
    • Enterprise support

Frequently asked questions

Do I have to switch to a new AI to use Composio?

No. Composio works inside the AI you already use, whether that's Claude, ChatGPT, Cursor, Grok Bot, Hermes, OpenClaw or your own agent. It gives that AI access to your apps; it isn't another chatbot.

Once you connect your apps and add Composio to your AI, you can ask it to prepare a meeting brief, update your CRM, file issues, post to Slack and much more.

Which AI assistants does Composio work with?

Composio works out of the box with:

Composio also works with any AI tool that supports connecting to MCP servers, so you're not limited to the assistants above.

Which apps can I connect to?

Composio supports 1,700+ apps, including Gmail, Google Calendar, Slack, Notion, GitHub, Google Drive, HubSpot, Salesforce, Instagram, and many more.

You can browse the full list of supported apps here.

The app I need isn't listed. Can I still use it?

Yes, if the app has an MCP server. You can easily add custom MCP servers to Composio for free.

Do I need to know how to code?

Not at all. If you're using Composio For You, you can connect Composio to AI assistants like ChatGPT or Claude without writing any code.

If you're building an agent or backend app, Composio Platform provides developer SDKs and managed authentication. See the developer FAQ below.

How is Composio different from the connectors already built into my AI?

Built-in connectors usually give one AI access to a limited set of apps. Composio gives your AI access to 1,700+ apps, supports multiple accounts for the same app, and lets you reuse those connections across different AI assistants.

Composio also helps your AI find the right tools and handle more complex, multi-app tasks. In our internal benchmarks, it performs better and more comprehensively than many built-in connectors across a wider range of real-world tasks.

What access does Composio get to my accounts?

Only what you approve. You sign in on each app's own page and see the access being requested. In Composio Cloud, Composio stores the resulting credentials encrypted and uses them to authenticate requests; your AI does not need the OAuth token.

You can limit which actions your AI can take in an app, require your approval for some, and remove a connection at any time. Every action is recorded, so you can see exactly what your AI did.

Tool results can still contain sensitive business data. Review token custody and deployment options for credential and data-handling boundaries.

How long does it take to set up Composio?

Usually just a few minutes. First, connect Composio to your AI assistant. Then connect the apps you want to use to Composio, which usually takes just a couple of clicks.

You can also ask your AI to help you connect an app by generating the connection link for you.

If you're a video person, you can watch a walkthrough on how to do this here.

How much does Composio cost?

Composio has a generous free Hobby plan that includes 100,000 tool calls per month. Think of tool calls as actions you allow your AI to take in your connected apps.

Some tools run on paid third-party services, like web search, data enrichment, transcription and media generation. Those are billed per call, separately from your plan, so starting free doesn't make every tool free.

Most of our users never need to go beyond the Hobby plan. You can see our pricing here.

Is Composio secure?

Yes. Composio is SOC 2 Type II compliant and is built to keep your app connections and credentials secure. OAuth tokens and API keys are encrypted, and sensitive customer data is protected at rest and in transit.

Composio also undergoes independent security testing and continuously monitors its systems for security threats. You can review the latest reports and policies in the Composio Trust Center.

I’m an AI agent. How do I sign up for Composio?

You’ve successfully located the non-human route. Visit https://docs.composio.dev/docs/agent-setup/unattended-authentication and follow the instructions to create and authenticate your account.

Can I use Composio for backend apps as well as AI agents?

Yes. Composio Platform supports per-user connected accounts for agents, backend jobs, and application-owned tools. Call provider APIs through Proxy Execute without predefined tools, an LLM, or MCP.

With hosted connections and managed execution, Composio stores credentials, refreshes OAuth tokens where supported, and authenticates provider requests server-side. Your application and model receive results without needing provider tokens. Connected-account reads always redact Composio-managed credentials. For customer-owned auth configs, masking depends on project and platform settings and can be disabled in self-hosted deployments. Do not assume account responses are safe to log.

Keep your project API key backend-only: it can authorize actions even when provider tokens are redacted. Derive user IDs from authenticated sessions and verify connection ownership before execution; browser- or model-supplied IDs are not authorization. For example, resolve org_42:user_7 from your authenticated backend after checking workspace membership.

Start with managed authentication for your own tools for backend calls, or the SDK quickstart for agent integrations. Review token custody before choosing a deployment.

  • Composio Cloud: The default hosted deployment. Composio stores credentials and can decrypt them to authenticate provider requests.
  • Private VPC: An Enterprise arrangement within a private network. Agree storage, operator access, and key ownership; a VPC alone does not establish who can decrypt credentials.
  • Self-hosted: An Enterprise arrangement in your environment, with Helm support. Your team operates the agreed infrastructure; confirm decryption access, logs, and backups.
  • Customer-managed keys: A separate deployment arranged with Composio, not a dashboard toggle. A proxy in your cloud handles credentials under keys in your KMS; Composio does not hold the keys needed to decrypt them.

Give your AI what it needs to finish the job

Add Composio to the AI you already use. Free to start, and set up in minutes.