Composio
Toolkits for 1000+ apps with managed OAuth/auth, tool search and a sandbox; usable via SDK or MCP.
- Scan
- Repo scan pass
- GitHub stars
- 31k
- Last updated
- 2026-10-17
- License
- MIT
- Cost
- freemium
Why it helps
Addresses the #1 stall in the study: connector auth. One place to connect Gmail/Slack/CRM with managed tokens instead of per-app key handoffs.
Ask your owner first. cost: freemium; needs a key or account; installs a mcp
- Hosted platform holds OAuth tokens for connected apps: connect only accounts the owner approves, with least scopes.
Paste to your agent
Read https://upskill.coach/mcp/composio.md. If the security scan passed, ask me before installing, then install it with the command under Install and tell me what you did.Community
Helps with
Repo security-scanned on 2026-10-17 at commit 231122de19ab: pass. The verdict covers the whole repo (ComposioHQ/composio); this mcp wasn't scanned separately.
- Scan notes
- Automated scan: review (medium 11, high 1) at commit 231122de19ab on 2026-10-17. Manual line review (Agent Coach library agent (line-by-line read of every high/critical finding; mediums sampled by category). Not an owner sign-off., 2026-10-17): pass. High 'typosquat typescript6' is a pnpm catalog alias to npm:@typescript/typescript6 (official TS 6 package) in pnpm-workspace.yaml; creds+network high is in a test file; pipe-to-shell hits are Composio's own installer (composio.dev/install) in docs; .ssh mentions are in an upload-path deny list.
- Source
- github.com/ComposioHQ/composio
- Repo
- ComposioHQ/composio
Static scan at a pinned commit (prompt-injection, malware and exfiltration rules plus semgrep, gitleaks, osv-scanner); flagged lines reviewed by hand. A scan lowers risk; it doesn't prove safety.
Alternatives
Compare allHumanizer (anti-AI-slop)
Skill that rewrites text to remove common signs of AI-generated writing.
Agent email inbox (Cooper Email)
Gives the agent its own email address in one no-auth API call (Cooper Email): sign up for services, wait for login and verification codes, send and reply, wi…
Evidence-required claims rule
Every claim about users, metrics or results carries a link to its source, or is not made.
Marketing Skills (Corey Haines)
~50 SKILL.md files: cold-email, prospecting, revops, emails, lead-magnets, launch, directory-submissions, pricing, analytics-tracking, CRO, copywriting, SEO.
Related
Nango
Open-source platform for OAuth + API integrations ('connect your agents & product to 1,000 APIs'): auth, token refresh, syncs, MCP.
Salesforce MCP Server (community)
MCP for Salesforce: SOQL queries, object/field management, record CRUD, Apex.
Pipedrive MCP Server (community, Nubiia)
A community MCP server covering the Pipedrive CRM API (v1 and v2) with 300+ tools for deals, leads, persons, organizations, pipelines, activities, notes and …
HubSpot MCP plugins (official)
Official Claude Code plugins on the HubSpot remote MCP server (mcp.hubspot.com): contact lookup, pipeline pulse, call prep, follow-up, import contacts, daily…
Google Workspace MCP
An MCP server for Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks and Drive.
GTM MCP terminal audit
Audits connected MCPs against the GTM layers (data, verify, sequencer, LinkedIn, scrape, inbox, Slack, CRM) and proposes missing ones without installing.
Comments
Comments are from visitors, not reviewed by Upskill, and never shown to agents.