Composio review

Composio is a hosted service that sits between an AI agent and third-party apps. It supplies tools and connected accounts so an agent can call app actions without your team building and maintaining every integration and authentication flow itself. The vendor lists more than 1,500 app integrations and also offers Instant Tools, reusable skills and a private workspace for code-heavy tasks.

In an agent stack, Composio is the integration and action-control layer, not the model or the agent framework. Your agent chooses a tool; Composio provides access to the connected app and lets you set which actions are permitted. The service records actions with the user, tool and outcome, and supports CSV export. The homepage also lists a connection option for any MCP client, alongside install choices for Claude, ChatGPT, Codex and Cursor. This is a hosted product, not a library or self-hosted server described on the homepage.

The homepage presents integrations as tools agents can call, and shows installation options for Claude, ChatGPT, Codex and Cursor, plus a copyable MCP URL for any MCP client. That makes MCP the clearest named connection surface on the vendor's site. It also shows tool search and connected accounts, with actions controlled by permissions.

The homepage does not name programming languages, SDKs, a CLI or a REST API. Before choosing Composio for a codebase, confirm SDK support, authentication flows, action schemas and versioning in the vendor's developer docs. This matters because a Reddit user working with Composio reported missing-parameter errors, while another said it was hard to inspect action documentation and parameters. These are individual reports, not a reliability measurement, but they point to a practical integration task: validate the exact actions and input schemas your agent will call. The product also offers reusable skills with steps and cautions for recurring tasks.

Hobby is free and includes 100,000 tool calls and 50,000 trigger events per month, three team members, one million Sandbox LLM tokens, and $2 in credits. Pro costs $29 per month and includes $29 in monthly credits, unlimited team members, 10,000 API requests per minute, 20,000 managed-app tool calls and 10,000 managed-app trigger events. Enterprise pricing is custom.

On Pro, additional tool calls cost $0.0003 in credits each, trigger events $0.003 each, and Sandbox LLM tokens $3.75 per million. Managed-app polling events beyond 10,000 cost $0.006 each; realtime events beyond 10,000 cost $0.003 each. Managed-app tool-call overages are priced by app, with rates not listed. The first 1,000 additional managed-app connected accounts are free, then connections cost $0.10 each one time. Advanced white-labeling, IP allowlist, Firewall, BAA and zero data retention are paid add-ons with prices not listed. Check the current pricing page against your expected call mix before launch.

The vendor's homepage does not publish an open-source license or describe a self-hosted Composio deployment. A Reddit commenter said they could not find a self-hosting reference in the docs; that does not establish whether a private deployment is available, so ask the vendor directly about source access, hosting options and data residency before making them requirements.

Composio does offer CSV export for action records, but that is not the same as exporting connected-account credentials, agent configuration or integration data. If you leave, plan to replace authentication, action mappings and any skills built around Composio's tools. Direct APIs can reduce dependence on an integration layer for a small set of operations, but your team then owns each integration. Confirm export formats and migration support with the vendor.

The Pro plan lists a 10,000 API requests-per-minute limit, along with included managed-app call and trigger-event allowances. Costs above those allowances depend on event type, and managed-app tool-call overage rates vary by app. Model your expected calls, polling and connected accounts; confirm the specific app rates and any applicable limits before scaling. The pricing page lists SSO / SCIM and customer-managed keys for Enterprise, while BAA and zero data retention are paid Pro add-ons.

Composio says users can restrict actions per app and review recorded actions; its homepage also says prompt injections in emails and pages are blocked before the agent reads them. Treat those as product claims to validate against your threat model. Reddit users report tool errors caused by missing parameters and difficulty finding action details. These reports do not establish a general failure rate, but they make schema validation, retries and monitoring important production checks.