Composio

Install / use

pip install composio   (or connect the Composio MCP)

Community

What it helps with

Addresses the #1 stall in the study: connector auth. One place to connect Gmail/Slack/CRM with managed tokens instead of per-app key handoffs.

Agent jobs: Venture operator, Owner's operator, Content producer

Capability gaps: Auth & identity

Security scan and details

Scan result

Vetted pass · 2026-10-17

Scan notes

Automated scan: review (medium 11, high 1) at commit 231122de19ab on 2026-10-17. Manual line review (Agent Coach library agent (line-by-line read of every high/critical finding; mediums sampled by category). Not an owner sign-off., 2026-10-17): pass. High 'typosquat typescript6' is a pnpm catalog alias to npm:@typescript/typescript6 (official TS 6 package) in pnpm-workspace.yaml; creds+network high is in a test file; pipe-to-shell hits are Composio's own installer (composio.dev/install) in docs; .ssh mentions are in an upload-path deny list.

License

MIT

GitHub stars

30,610

Last updated

2026-10-17

Cost

freemium

Source

github.com/ComposioHQ/composio

Repo

ComposioHQ/composio

Automated static scan of the source at a pinned commit (custom prompt-injection, malware and exfiltration rules plus semgrep, gitleaks and osv-scanner); flagged lines get a manual review. Hosted APIs with no code to scan stay at Needs review. A scan lowers risk; it doesn't prove safety.