How to integrate Daytona MCP with OpenAI Agents SDK

This guide walks you through connecting Daytona to the OpenAI Agents SDK using the Composio tool router. By the end, you'll have a working Daytona agent that can list daytona workspaces and current status, create cloud workspace for node project, stop idle daytona development workspaces through natural language commands. This guide will help you understand how to give your OpenAI Agents SDK agent real control over a Daytona account through Composio's Daytona MCP server. Before we dive in, let's take a quick look at the key ideas and tools involved.

Get started for freeGet a demo
Daytona logoDaytona
Api KeyOauth2

Daytona is a development environment management platform for cloud-based workspaces. Use it to provision, manage, and automate dev environments through APIs.

114 Tools

Introduction

This guide walks you through connecting Daytona to the OpenAI Agents SDK using the Composio tool router. By the end, you'll have a working Daytona agent that can list daytona workspaces and current status, create cloud workspace for node project, stop idle daytona development workspaces through natural language commands.

This guide will help you understand how to give your OpenAI Agents SDK agent real control over a Daytona account through Composio's Daytona MCP server.

Before we dive in, let's take a quick look at the key ideas and tools involved.

Also integrate Daytona with

Claude Agent SDKClaude CodeClaude CoworkCodexOpenClawHermesCLIGoogle ADKLangChainVercel AI SDKMastra AILlamaIndexCrewAI

TL;DR

Here's what you'll learn:
  • Get and set up your OpenAI and Composio API keys
  • Install the necessary dependencies
  • Initialize Composio and create a Tool Router session for Daytona
  • Configure an AI agent that can use Daytona as a tool
  • Run a live chat session where you can ask the agent to perform Daytona operations

What is OpenAI Agents SDK?

The OpenAI Agents SDK is a lightweight framework for building AI agents that can use tools and maintain conversation state. It provides a simple interface for creating agents with hosted MCP tool support.

Key features include:

  • Hosted MCP Tools: Connect to external services through hosted MCP endpoints
  • SQLite Sessions: Persist conversation history across interactions
  • Simple API: Clean interface with Agent, Runner, and tool configuration
  • Streaming Support: Real-time response streaming for interactive applications

What is the Daytona MCP server, and what's possible with it?

The Daytona MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Daytona account. It provides structured and secure access so your agent can perform Daytona operations on your behalf.

What is the Composio tool router, and how does it fit here?

What is Composio SDK?

Composio's Composio SDK helps agents find the right tools for a task at runtime. You can plug in multiple toolkits (like Gmail, HubSpot, and GitHub), and the agent will identify the relevant app and action to complete multi-step workflows. This can reduce token usage and improve the reliability of tool calls. Read more here: Getting started with Composio SDK

The tool router generates a secure MCP URL that your agents can access to perform actions.

How the Composio SDK works

The Composio SDK follows a three-phase workflow:

  1. Discovery: Searches for tools matching your task and returns relevant toolkits with their details.
  2. Authentication: Checks for active connections. If missing, creates an auth config and returns a connection URL via Auth Link.
  3. Execution: Executes the action using the authenticated connection.

Step-by-step Guide

Step by step09 STEPS
1

Prerequisites

Before starting, make sure you have:
  • Composio API Key and OpenAI API Key
  • Primary know-how of OpenAI Agents SDK
  • A live Daytona project
  • Some knowledge of Python or Typescript
2

Getting API Keys for OpenAI and Composio

OpenAI API Key
  • Go to the OpenAI dashboard and create an API key. You'll need credits to use the models, or you can connect to another model provider.
  • Keep the API key safe.
Composio API Key
3

Install dependencies

npm install @composio/openai-agents @openai/agents dotenv

Install the Composio SDK and the OpenAI Agents SDK.

4

Set up environment variables

bash
OPENAI_API_KEY=sk-...your-api-key
COMPOSIO_API_KEY=your-api-key
USER_ID=composio_user@gmail.com

Create a .env file and add your OpenAI and Composio API keys.

5

Import dependencies

import 'dotenv/config';
import { Composio } from '@composio/core';
import { OpenAIAgentsProvider } from '@composio/openai-agents';
import { Agent, hostedMcpTool, run, OpenAIConversationsSession } from '@openai/agents';
import * as readline from 'readline';
What's happening:
  • You're importing all necessary libraries.
  • The Composio and OpenAIAgentsProvider classes are imported to connect your OpenAI agent to Composio tools like Daytona.
6

Set up the Composio instance

dotenv.config();

const composioApiKey = process.env.COMPOSIO_API_KEY;
const userId = process.env.USER_ID;

if (!composioApiKey) {
  throw new Error('COMPOSIO_API_KEY is not set. Create a .env file with COMPOSIO_API_KEY=your_key');
}
if (!userId) {
  throw new Error('USER_ID is not set');
}

// Initialize Composio
const composio = new Composio({
  apiKey: composioApiKey,
  provider: new OpenAIAgentsProvider(),
});
What's happening:
  • dotenv.config() loads your .env file so COMPOSIO_API_KEY and USER_ID are available as environment variables.
  • Creating a Composio instance using the API Key and OpenAIAgentsProvider class.
7

Create a Tool Router session

// Create Tool Router session for Daytona
const session = await composio.create(userId as string, {
  toolkits: ['daytona'],
});
const mcpUrl = session.mcp.url;

What is happening:

  • You give the Tool Router the user id and the toolkits you want available. Here, it is only daytona.
  • The router checks the user's Daytona connection and prepares the MCP endpoint.
  • The returned session.mcp.url is the MCP URL that your agent will use to access Daytona.
  • This approach keeps things lightweight and lets the agent request Daytona tools only when needed during the conversation.
8

Configure the agent

// Configure agent with MCP tool
const agent = new Agent({
  name: 'Assistant',
  model: 'gpt-5',
  instructions:
    'You are a helpful assistant that can access Daytona. Help users perform Daytona operations through natural language.',
  tools: [
    hostedMcpTool({
      serverLabel: 'tool_router',
      serverUrl: mcpUrl,
      headers: { 'x-api-key': composioApiKey },
      requireApproval: 'never',
    }),
  ],
});
What's happening:
  • We're creating an Agent instance with a name, model (gpt-5), and clear instructions about its purpose.
  • The agent's instructions tell it that it can access Daytona and help with queries, inserts, updates, authentication, and fetching database information.
  • The tools array includes a hostedMcpTool that connects to the MCP server URL we created earlier.
  • The headers object includes the Composio API key for secure authentication with the MCP server.
  • requireApproval: 'never' means the agent can execute Daytona operations without asking for permission each time, making interactions smoother.
9

Start chat loop and handle conversation

// Keep conversation state across turns
const conversationSession = new OpenAIConversationsSession();

// Simple CLI
const rl = readline.createInterface({
  input: process.stdin,
  output: process.stdout,
  prompt: 'You: ',
});

console.log('\nComposio Tool Router session created.');
console.log('\nChat started. Type your requests below.');
console.log("Commands: 'exit', 'quit', or 'q' to end\n");

try {
  const first = await run(agent, 'What can you help me with?', { session: conversationSession });
  console.log(`Assistant: ${first.finalOutput}\n`);
} catch (e) {
  console.error('Error:', e instanceof Error ? e.message : e, '\n');
}

rl.prompt();

rl.on('line', async (userInput) => {
  const text = userInput.trim();

  if (['exit', 'quit', 'q'].includes(text.toLowerCase())) {
    console.log('Goodbye!');
    rl.close();
    process.exit(0);
  }

  if (!text) {
    rl.prompt();
    return;
  }

  try {
    const result = await run(agent, text, { session: conversationSession });
    console.log(`\nAssistant: ${result.finalOutput}\n`);
  } catch (e) {
    console.error('Error:', e instanceof Error ? e.message : e, '\n');
  }

  rl.prompt();
});

rl.on('close', () => {
  console.log('\n👋 Session ended.');
  process.exit(0);
});
What's happening:
  • The program prints a session URL that you visit to authorize Daytona.
  • After authorization, the chat begins.
  • Each message you type is processed by the agent using run().
  • The responses are printed to the console.
  • Typing exit, quit, or q cleanly ends the chat.

Complete Code

Here's the complete code to get you started with Daytona and OpenAI Agents SDK:

import 'dotenv/config';
import { Composio } from '@composio/core';
import { OpenAIAgentsProvider } from '@composio/openai-agents';
import { Agent, hostedMcpTool, run, OpenAIConversationsSession } from '@openai/agents';
import * as readline from 'readline';

const composioApiKey = process.env.COMPOSIO_API_KEY;
const userId = process.env.USER_ID;

if (!composioApiKey) {
  throw new Error('COMPOSIO_API_KEY is not set. Create a .env file with COMPOSIO_API_KEY=your_key');
}
if (!userId) {
  throw new Error('USER_ID is not set');
}

// Initialize Composio
const composio = new Composio({
  apiKey: composioApiKey,
  provider: new OpenAIAgentsProvider(),
});

async function main() {
  // Create Tool Router session
  const session = await composio.create(userId as string, {
    toolkits: ['daytona'],
  });
  const mcpUrl = session.mcp.url;

  // Configure agent with MCP tool
  const agent = new Agent({
    name: 'Assistant',
    model: 'gpt-5',
    instructions:
      'You are a helpful assistant that can access Daytona. Help users perform Daytona operations through natural language.',
    tools: [
      hostedMcpTool({
        serverLabel: 'tool_router',
        serverUrl: mcpUrl,
        headers: { 'x-api-key': composioApiKey },
        requireApproval: 'never',
      }),
    ],
  });

  // Keep conversation state across turns
  const conversationSession = new OpenAIConversationsSession();

  // Simple CLI
  const rl = readline.createInterface({
    input: process.stdin,
    output: process.stdout,
    prompt: 'You: ',
  });

  console.log('\nComposio Tool Router session created.');
  console.log('\nChat started. Type your requests below.');
  console.log("Commands: 'exit', 'quit', or 'q' to end\n");

  try {
    const first = await run(agent, 'What can you help me with?', { session: conversationSession });
    console.log(`Assistant: ${first.finalOutput}\n`);
  } catch (e) {
    console.error('Error:', e instanceof Error ? e.message : e, '\n');
  }

  rl.prompt();

  rl.on('line', async (userInput) => {
    const text = userInput.trim();

    if (['exit', 'quit', 'q'].includes(text.toLowerCase())) {
      console.log('Goodbye!');
      rl.close();
      process.exit(0);
    }

    if (!text) {
      rl.prompt();
      return;
    }

    try {
      const result = await run(agent, text, { session: conversationSession });
      console.log(`\nAssistant: ${result.finalOutput}\n`);
    } catch (e) {
      console.error('Error:', e instanceof Error ? e.message : e, '\n');
    }

    rl.prompt();
  });

  rl.on('close', () => {
    console.log('\nSession ended.');
    process.exit(0);
  });
}

main().catch((err) => {
  console.error('Fatal error:', err);
  process.exit(1);
});

Conclusion

This was a starter code for integrating Daytona MCP with OpenAI Agents SDK to build a functional AI agent that can interact with Daytona.

Key features:

  • Hosted MCP tool integration through Composio's Tool Router
  • SQLite session persistence for conversation history
  • Simple async chat loop for interactive testing
You can extend this by adding more toolkits, implementing custom business logic, or building a web interface around the agent.
TOOLS

Supported Tools

Every Daytona action and event your agent gets out of the box.

Archive Sandbox

Archives a sandbox in the Daytona platform.

Cancel Organization Invitation

Cancels a pending organization invitation.

Checkout Git Branch

[DEPRECATED] Checkout a branch or commit in a git repository within a sandbox.

Clone Repository

Clones a Git repository into a sandbox toolbox.

Create API Key

Creates a new API key for the organization.

Create Sandbox Backup

Initiates a backup operation for an existing sandbox environment.

Create Folder in Sandbox

Creates a new folder inside a sandbox's filesystem.

Create Organization

Creates a new organization in Daytona.

Create Organization Invitation

Creates an invitation to join an organization with specified roles and permissions.

Create Organization Role

Creates a new organization role with specified permissions.

Create Process Session

Creates a new session in the sandbox for process management.

Create PTY Session

Creates a new PTY (pseudo-terminal) session in a sandbox.

Create Docker Registry

Creates a new Docker registry for the organization.

Create Sandbox

Creates a new sandbox environment for development or testing purposes.

Create Snapshot

Creates a new snapshot resource that can be used as a base image for sandboxes.

Create SSH Access

Creates SSH access credentials for a sandbox environment.

Create Volume

Creates a new volume for storing data that can be attached to sandboxes.

Deactivate Snapshot

Deactivates a snapshot in the Daytona platform.

Delete API Key

Deletes an API key by its name.

Delete API Key for User

Deletes an API key for a specific user.

Delete Sandbox File

Deletes a file inside a sandbox by its path.

Delete Git Branch

Deletes a branch from a git repository inside a sandbox by its name.

Delete Organization

Deletes an organization.

Delete Organization OTEL Config

Deletes the OpenTelemetry (OTEL) configuration for an organization.

Delete Organization Role

Deletes an organization role.

Delete PTY Session

Deletes a PTY session and terminates the associated process.

Delete Recording

Deletes a recording from the Daytona platform by its ID.

Delete Docker Registry

Deletes a Docker registry from the Daytona platform.

Delete Sandbox

Deletes a sandbox from the Daytona platform by its ID or name.

Delete Session

Deletes a session from the Daytona platform by its ID.

Delete Snapshot

Deletes a snapshot from the Daytona platform by its ID.

Delete Volume

Deletes a volume from the Daytona platform by its ID.

Download File (Deprecated)

[DEPRECATED] Downloads a file from a sandbox's toolbox filesystem.

Download Multiple Files

Downloads multiple files from a sandbox as a multipart/form-data bundle.

Enroll in SMS MFA

Enrolls the authenticated user in SMS-based multi-factor authentication.

Execute Command

Executes a shell command within a running sandbox via the toolbox proxy.

Expire Signed Port Preview URL

Expires a signed preview URL for a sandbox port.

Find In Files (Deprecated)

[DEPRECATED] Searches for text or patterns in files within a sandbox.

Focus Accessibility Node

Focuses an accessibility node in a sandbox's computer use system.

Get API Key

Retrieves an API key by its name.

Get Available Account Providers

Retrieves all available account providers that can be used to authenticate and link accounts.

Get Build Logs URL

Retrieves the build logs URL for a specific sandbox by its ID or name.

Get Commit History

Gets commit history from a repository in a sandbox toolbox.

Get Computer Use Status

Retrieves the status of all VNC desktop processes in a sandbox.

Get Daytona Config

Retrieves the Daytona platform configuration including URLs, OIDC settings, analytics, rate limits, and other platform-level settings.

Get Display Info

Retrieves information about displays connected to a sandbox.

Get Entrypoint Logs

Retrieves entrypoint logs for a sandbox session.

Get File Info (Deprecated)

[DEPRECATED] Gets file info inside a sandbox toolbox.

Get Git History (Deprecated)

[DEPRECATED] Get commit history from a git repository in a sandbox toolbox.

Check Sandbox Access

Checks if the authenticated user has access to a specific sandbox.

Get Daytona Health Status

Retrieves the current health status of the Daytona service.

Get Organization

Retrieves detailed information about an organization by its unique identifier.

Get Organization Audit Logs

Retrieves audit logs for an organization.

Get Organization Invitations Count

Retrieves the count of organization invitations for the authenticated user.

Get Organization Usage Overview

Retrieves the current usage overview for an organization, including CPU, memory, disk, snapshot, and volume usage metrics across all regions.

Get Process Status

Retrieves the status of a specific VNC process in a sandbox.

Get Project Dir (Deprecated)

[DEPRECATED] Gets the project directory path within a sandbox toolbox.

Get PTY Session

Retrieves information about a PTY (pseudo-terminal) session in a sandbox.

Get Push Access

Retrieves temporary storage access credentials for pushing objects to object storage.

Get Docker Registry

Retrieves details of a specific Docker registry by its unique identifier.

Get Sandbox

Retrieves details of a specific sandbox by its ID or name.

Get Session Command Logs

Retrieves logs for a specific command executed within a session.

Get Session (Deprecated)

[DEPRECATED] Retrieves details of a specific session in a sandbox toolbox.

Get Snapshot

Retrieves details of a specific snapshot by its ID or name.

Get Snapshot Build Logs

Retrieves build logs for a specific snapshot.

Get Toolbox Proxy URL

Retrieves the toolbox proxy URL for a sandbox by its ID or name.

Get Transient Push Access

Retrieves temporary registry access credentials for pushing snapshots.

Get Authenticated User

Retrieves the profile of the authenticated user.

Get User Home Dir (Deprecated)

[DEPRECATED] Gets the user home directory path for a sandbox.

Get Volume

Retrieves details of a specific volume by its ID.

Get Windows

Retrieves information about all windows in a sandbox.

Get Working Directory

Gets the current working directory inside a sandbox toolbox.

Get Work Dir (Deprecated)

[DEPRECATED] Retrieves the working directory path of a sandbox toolbox.

List API Keys

Lists all API keys for the organization.

List Available Regions

Lists all available regions for the organization.

List Files (Deprecated)

[DEPRECATED] Lists files and directories in a sandbox toolbox.

List Git Branches (Deprecated)

[DEPRECATED] Lists all git branches from a repository in a sandbox toolbox.

List Organization Invitations

Lists all pending organization invitations.

List Organization Invitations for User

Lists all organization invitations for the authenticated user.

List organization members

Lists all members of a specific organization.

List organization roles

Lists all roles available in an organization.

List Organizations

Lists all organizations that the authenticated user has access to.

List Process Sessions

Lists all active process sessions in a sandbox.

List PTY Sessions

Lists all active PTY sessions in a sandbox.

List registries

Lists all docker registries available in the organization.

List Sandboxes

Lists all sandboxes for the organization.

List Sandboxes Paginated

Lists all sandboxes with pagination support.

List shared regions

Tool to list all shared regions.

List Snapshots

Lists all snapshots for the organization.

List Volumes

Lists all volumes in the organization.

Replace In Files

Replaces text or patterns in multiple files within a sandbox.

Replace Sandbox Labels

Replaces all labels on a sandbox with a new set of key-value pairs.

Resize PTY Session

Resizes an active PTY session with new terminal dimensions.

Revoke SSH Access

Revokes SSH access credentials for a sandbox environment.

Search Files

[DEPRECATED] Search for files inside a sandbox toolbox.

Set Sandbox Auto Archive Interval

Sets the auto-archive interval for a sandbox.

Set Auto Delete Interval

Sets the auto-delete interval for a sandbox.

Set Autostop Interval

Sets the auto-stop interval for a sandbox in the Daytona platform.

Start Computer Use

Starts all VNC desktop processes (Xvfb, xfce4, x11vnc, novnc) for a sandbox.

Start LSP Server

Starts an LSP server process inside a sandbox project.

Start VNC Process

Restarts a specific VNC process within a sandbox in the Daytona platform.

Start Sandbox

Starts a sandbox in the Daytona platform.

Stop LSP Server

Stops an LSP server process inside a sandbox project.

Stop Sandbox

Stops a running sandbox in the Daytona platform.

Take Compressed Screenshot

Takes a compressed screenshot of the entire screen in a sandbox.

Unlink Account

Unlinks a connected provider account (such as GitHub, GitLab, or Bitbucket) from the authenticated user's Daytona profile.

Update Experimental Config

Updates experimental configuration for an organization on the Daytona platform.

Update Last Activity

Updates the last activity timestamp for a sandbox in the Daytona platform.

Update Organization Invitation

Updates an organization invitation with new role and permissions.

Update Organization OpenTelemetry Config

Updates the OpenTelemetry configuration for an organization.

Update Organization Role

Updates an organization role with a new name, description, and permissions.

Update Public Status

Updates the public visibility status of a sandbox in the Daytona platform.

Update Docker Registry

Updates a Docker registry configuration.

Update Sandbox Default Limited Network Egress

Updates the sandbox default limited network egress setting for an organization.

FRAMEWORKS

How to build Daytona MCP Agent with another framework

Claude Agent SDK logo

Claude Agent SDK

Use Daytona MCP with Claude Agent SDK

Claude Code logo

Claude Code

Use Daytona MCP with Claude Code

Claude Cowork logo

Claude Cowork

Use Daytona MCP with Claude Cowork

Codex logo

Codex

Use Daytona MCP with Codex

OpenClaw logo

OpenClaw

Use Daytona MCP with OpenClaw

Hermes logo

Hermes

Use Daytona MCP with Hermes

CLI logo

CLI

Use Daytona MCP with CLI

Google ADK logo

Google ADK

Use Daytona MCP with Google ADK

LangChain logo

LangChain

Use Daytona MCP with LangChain

Vercel AI SDK logo

Vercel AI SDK

Use Daytona MCP with Vercel AI SDK

Mastra AI logo

Mastra AI

Use Daytona MCP with Mastra AI

LlamaIndex logo

LlamaIndex

Use Daytona MCP with LlamaIndex

CrewAI logo

CrewAI

Use Daytona MCP with CrewAI

FAQ

Frequently asked questions

With a standalone Daytona MCP server, the agents and LLMs can only access a fixed set of Daytona tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Daytona and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. OpenAI Agents SDK fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Daytona tools.

Yes, absolutely. You can configure which Daytona scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Daytona data and credentials are handled as safely as possible.

Start with Daytona.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Daytona tool your agent needs.Free to start.

Start building
Customer stories

Teams ship real agents on Composio

GET STARTED FOR FREEBOOK A DEMO
agent.aiZoomLettaGleanHubSpotAWSWabi

Karan skipped his own birthday party to fix our critical issue. It was 10pm and he diverted his Waymo to help us instead. This really sets the bar — it shows the commitment you need when users rely on your software.

Harsha Gaddipati
Harsha Gaddipati
Co-founder, Slashy

A lot of students tell us that the moment their connected tools start talking to each other inside Opennote feels almost magical. The agent just knows them, and it's immensely helped keep new users on the platform.

Abhi Arya
Abhi Arya
Co-founder, Opennote

We chose Composio over Pipedream because it delivered depth where it mattered — niche tools and tricky edge cases other platforms simply ignored. That gave us confidence to scale without compromising.

Nirman Dave
Nirman Dave
CEO, Zams

As a solo builder, shipping fast is life or death. The only way I can outcompete incumbents is by outmanoeuvring them. Getting bogged down managing agent auth would have been a death sentence.

Ryan Yu
Ryan Yu
Founder, Extra Thursday

Before Composio, adding tool integrations was slow and resource-intensive. Each one could take weeks of engineering time, and maintaining them meant constantly keeping up with API changes.

Tomisin Jenrola
Tomisin Jenrola
Founder & CEO, SwarmZero

With hands-on help from their founder, we integrated Gmail and Google Drive in just 30 minutes. This level of personal support and commitment is exactly what startups should strive for.

Jerome Leclanche
Jerome Leclanche
Co-Founder, Ingram Technologies