composio

mcp
Security Audit
Warn
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Warn
  • process.env — Environment variable access in .github/ISSUE_TEMPLATE/bug-report.yml
  • fs module — File system access in .github/workflows/build-cli-binaries.yml
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This project is an SDK and integration platform designed to connect AI agents to external SaaS applications and third-party APIs. It provides typed libraries and Model Context Protocol (MCP) tools to help developers build automation workflows and manage authentication across various services.

Security Assessment
Overall Risk: Medium. The tool inherently makes external network requests to connect with third-party APIs and manage OAuth authentications. It requires handling sensitive API keys via environment variables (e.g., `process.env`), though no hardcoded secrets were detected. Static analysis flagged environment variable usage and file system access, but these are strictly contained within its GitHub Actions workflows and issue templates rather than the core application code. No dangerous native permissions are requested by the runtime itself.

Quality Assessment
The codebase is an active fork that is regularly updated (last push was today). It uses a permissive MIT license and includes thorough documentation. However, it suffers from extremely low community visibility, having only 5 stars on this specific repository. Additionally, the README uses download badges linking to the main upstream project (ComposioHQ), which might be slightly misleading when evaluating the independent adoption and trust level of this specific fork.

Verdict
Use with caution.
SUMMARY

typescript python sdk ai-agents anthropic openapi langchain openai-agents llamaindex mastra vercel-ai mcp oauth saas llm integrations agent-tools automation cloudflare google-gemini tooling rag multi-provider developer-sdk composable-actions webhook-triggers

README.md
Composio · AI agent tools and integrations

Composio SDK · TypeScript & Python

Composable tools, integrations, and skills for AI agents — connect LLM apps to third-party APIs, SaaS products, triggers, and Model Context Protocol (MCP) workflows with typed SDKs for Node.js, Python, Vercel AI SDK, LangChain, LangGraph, LlamaIndex, OpenAI Agents, Anthropic, Google Gemini, and more.

Website · Documentation

GitHub (this copy): github.com/warpdot-dev/composioUpstream mirror reference: ComposioHQ/composio

GitHub Stars
PyPI Downloads
NPM Downloads
Discord

What this repository is

This monorepo contains the Composio SDKs for building agentic AI applications (org-hosted copy: warpdot-dev/composio): fetching toolkits, managing authentication and connected accounts, orchestrating actions across apps (email, calendars, ticketing, CRM, dev tools, etc.), and shipping production-ready integrations without hand-writing every REST client.

Use it when you are building AI agents, chatbots, automation workflows, RAG pipelines, or MCP servers that need reliable, documented access to external systems.


Table of contents


TypeScript SDK installation

npm install @composio/core
# or: yarn add @composio/core
# or: pnpm add @composio/core

Initialize the client (optionally pass apiKey from your Composio dashboard):

import { Composio } from '@composio/core';

const composio = new Composio({
  // apiKey: process.env.COMPOSIO_API_KEY,
});

Python SDK installation

Requires Python 3.10+.

pip install composio
# or: poetry add composio
from composio import Composio

composio = Composio(
  # api_key=os.environ["COMPOSIO_API_KEY"],
)

Quick examples (OpenAI Agents)

Minimal TypeScript / Node:

npm install @composio/openai-agents @openai/agents
import { Composio } from '@composio/core';
import { OpenAIAgentsProvider } from '@composio/openai-agents';
import { Agent, run } from '@openai/agents';

const composio = new Composio({
  provider: new OpenAIAgentsProvider(),
});

const userId = '[email protected]';

const tools = await composio.tools.get(userId, {
  toolkits: ['HACKERNEWS'],
});

const agent = new Agent({
  name: 'Hackernews assistant',
  tools: tools,
});

const result = await run(agent, 'What is the latest hackernews post about?');

console.log(JSON.stringify(result.finalOutput, null, 2));

Minimal Python:

pip install composio_openai_agents openai-agents
import asyncio
from agents import Agent, Runner
from composio import Composio
from composio_openai_agents import OpenAIAgentsProvider

composio = Composio(provider=OpenAIAgentsProvider())

user_id = "[email protected]"
tools = composio.tools.get(user_id=user_id, toolkits=["HACKERNEWS"])

agent = Agent(
    name="Hackernews Agent",
    instructions="You are a helpful assistant.",
    tools=tools,
)

async def main():
    result = await Runner.run(
        starting_agent=agent,
        input="What's the latest Hackernews post about?",
    )
    print(result.final_output)

asyncio.run(main())

Each language workspace has deeper guides and runnable samples under ts/ and python/.


OpenAPI specification

Regenerate SDK-facing API specs from Composio’s backend:

pnpm api:pull

This pulls https://backend.composio.dev/api/v3/openapi.json and refreshes local OpenAPI-derived docs. Builds typically run this step automatically.


Available SDKs

SDK Folder Highlights
TypeScript / JavaScript ts/ Type-safe client, browsers and Node.js, modular provider packages
Python python/ Async-friendly APIs, aligns with modern Python tooling

Links: TypeScript SDK README · Python SDK README


Provider support matrix

First-class adapters ship for major LLM providers and agent frameworks:

Provider / Framework TypeScript Python
OpenAI
OpenAI Agents
Anthropic Claude
LangChain
LangGraph ✅¹
LlamaIndex
Vercel AI SDK
Google Gemini
Google ADK
Mastra
Cloudflare Workers AI
CrewAI
AutoGen

¹ LangGraph on TypeScript is supported via @composio/langchain.

Missing a stack? Follow the custom provider guide to integrate any framework.


Packages

Core

Artifact Registry
@composio/core npm version
composio PyPI version

Provider packages

NPM PyPI equivalents
@composio/openai composio-openai
@composio/openai-agents composio-openai-agents
@composio/anthropic composio-anthropic
@composio/langchain composio-langchain
composio-langgraph
@composio/llamaindex composio-llamaindex
@composio/vercel
@composio/google composio-google, composio-gemini, composio-google-adk
@composio/mastra
@composio/cloudflare
composio-crewai, composio-autogen

Utilities (TypeScript)

Package
@composio/json-schema-to-zod
@composio/ts-builders

Looking for legacy SDK revisions? Browse the master lineage on GitHub (upstream: ComposioHQ/composio master).


Rube (Model Context Protocol)

Rube is an MCP server built with Composio. It exposes hundreds of integrations (email, messaging, calendars, repositories, docs) to Cursor, VS Code, Claude Desktop, Claude Code, and other MCP-compatible clients — authenticate once, then let your assistant take real actions in connected apps.


Contributing

Contributions are welcome. Please read CONTRIBUTING.md before opening a PR.


License

Distributed under the MIT License — see LICENSE.

Support & search-friendly keywords for discoverability

  • Topics: AI agents, autonomous agents, LLM tools, agent toolkits, Composio SDK, MCP, LangChain integrations, LlamaIndex tools, Anthropic Claude tools, OpenAI function calling, SaaS integrations, OAuth for agents, webhook triggers
  • GitHub mirrors: warpdot-dev/composioComposioHQ/composio
  • Issues or questions: open a GitHub issue, email [email protected], or browse docs.composio.dev

Reviews (0)

No results found