Composio review, pricing and verdict

Last updated: 2026-11-08

Composio, founded in 2023 in San Francisco, connects AI agents to outside apps, reachable through a CLI, a hosted MCP endpoint and session SDKs. It manages OAuth and API-key authentication so agents never hold credentials, and adds an MCP Gateway, triggers, a browser tool and a sandbox. The vendor reports SOC 2 Type II certification.

About Composio

Composio is a San Francisco company founded in 2023 by Soham Ganatra and Karan Vaidya. It gives AI agents access to outside apps: the vendor lists 1,500+ integrations, including Gmail, Slack, Salesforce and GitHub. Composio runs the OAuth or API-key connection, stores the credentials, and executes the call, so the agent asks for an action and never holds a token.

There are three ways in. The CLI and the hosted MCP endpoint let a personal agent such as Claude, Codex or Cursor search for a tool, link an account and run it. Session SDKs are for products whose own users connect their accounts. The MCP Gateway puts Composio's managed tools and your own MCP servers behind one endpoint, with access policies set at organisation, team and user level and one audit trail for every agent action. Triggers deliver events from connected apps to your endpoint, a browser tool covers sites with no API, and a sandbox runs code. Firewall, a newer add-on, checks tool requests and tool results against your policies to catch instructions hidden in results.

It suits three buyers. Developers building agent products get managed auth for each end user instead of writing OAuth flows per app. Individuals wiring a coding agent to Gmail or Linear get one login for the lot. Platform teams at larger companies get SSO through SAML or OIDC, SCIM provisioning, and a choice of Composio Cloud, a private VPC or full self-hosting. It is not a workflow builder: Zapier and n8n automate fixed flows a person designs, while Composio exposes tools for a model to pick from. It is also not an orchestration framework like LangChain; it supplies the tools those frameworks call. Closer neighbours are gateways such as Orthogonal, which routes agents to paid third-party APIs, CometAPI and LiteLLM, which route to models. Our CometAPI vs Orthogonal guide explains where the gateway types differ, and Smart Match can narrow the choice for a specific stack.

Pricing is usage-based with a hard-capped free plan, a flat Pro plan and custom Enterprise terms, covered in the pricing notes below. Two cautions apply. Composio-managed apps share the provider's rate limits and the vendor says to move to your own OAuth app before scaling. Accounts created before the August 2026 schedule keep their earlier pricing for a limited period, so check which schedule applies to you.

Pricing

Hobby is $0 with no card: 100,000 tool calls a month (up to 20,000 on Composio-managed apps), 50,000 trigger events, 3 team members and $2 in credits, hard-capped so usage pauses at the limit. Pro is $29 a month and includes $29 in monthly credits (no rollover), unlimited team members, spend controls and add-ons; past the free amounts, own-app tool calls bill at $0.0003 in credits and trigger events at $0.003. Managed-app calls beyond the free 20,000 bill by app, from $0.0005 to $0.01 per call.

Firewall is $0.50 per 1M tokens on Pro. Enterprise is custom and adds SSO, SCIM, a BAA and an SLA. Per-app managed-app pricing applies to signups from 3 November 2026; earlier accounts are grandfathered to 31 December 2026.

Read from composio.dev/pricing on 2026-11-08.

Key Features

• Tool catalogue: App integrations including Gmail, Slack, Salesforce and GitHub, that an agent can search and call, per the vendor catalogue.
• Managed authentication: Composio runs OAuth and API-key connections for each end user, and credentials stay out of the model context.
• MCP Gateway: One managed MCP endpoint fronts Composio tools and your own MCP servers, with policies at organisation, team and user level.
• Triggers: Events from connected apps are delivered to your endpoint, billed per delivered event rather than per poll.
• Firewall: Decision models check tool requests and results against your policies to block instructions hidden in tool output.
• Browser and sandbox: Agents can drive a browser where no API exists and run code in a remote sandbox that can be disabled per session.
• Enterprise deployment: SAML or OIDC single sign-on, SCIM 2.0 provisioning, and Cloud, private VPC or self-hosted options.

Pros

• Hard-capped free plan with no card means a trial cannot produce a bill, and it covers real usage on your own apps.
• Per-user managed auth removes the work of building and rotating OAuth flows for each listed app.
• The vendor states SOC 2 Type II certification, a BAA on Enterprise, and tool-call payloads that are never stored, with audit records holding metadata only.
• Three entry points (CLI, hosted MCP endpoint, session SDKs) cover a personal agent and a multi-tenant product from one account.

Cons

• Composio-managed apps share one small free allowance across all of them, and the vendor says they are not built for production scale.
• Per-app rates for managed apps differ by a factor of twenty, so a Salesforce-heavy agent costs far more than a Gmail-heavy one.
• Pricing changed in 2026 (a new schedule in August, per-app managed rates from November), so older cost comparisons may be wrong.
• It supplies tools, not the agent: your application still owns orchestration, retries and exactly-once handling of downstream actions.

Visit Composio Official Website