{ "data": { "a": { "slug": "composio-rube", "name": "Composio (API + MCP)", "vendor": "Composio", "vendorUrl": "https://composio.dev", "kind": "http-api", "category": "aggregator", "summary": "Tool access and per-user authentication for agents across 1,000+ apps.", "url": "https://www.anchorterminal.com/tools/composio-rube", "markdownUrl": "https://www.anchorterminal.com/tools/composio-rube.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/composio-rube.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/composio-rube.json", "repo": "https://github.com/ComposioHQ/composio", "license": "MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://backend.composio.dev/api/v3.1", "packages": [ { "registry": "npm", "name": "@composio/core" }, { "registry": "pypi", "name": "composio" } ], "auth": "mixed", "authNotes": "REST calls take a project key in 'x-api-key' (or an org key in 'x-org-api-key'). End users authorise each app through a hosted Connect Link, and Composio stores the tokens under your user ID, so they never pass through your app or the model. Composio Connect MCP uses an OAuth sign-in in the client. Bring your own OAuth app via a custom auth config for your own branding or scopes.", "pricing": "freemium", "pricingNotes": "Hobby is free with 100,000 tool calls and 50,000 trigger events a month and pauses at the cap, no card. Pro is $29 a month including $29 of usage, then $0.0003 a tool call and $0.003 a trigger event, or $0.0005 and $0.005 through Composio-managed apps, and $3.75 per million LLM tokens after 1 million free. Premium tools (search, maps, browser, media) are billed at provider prices. Enterprise is custom. The new prices apply to sign-ups from 2026-08-15, and earlier customers keep their plan to 2026-12-31 (https://composio.dev/pricing).", "priceSummary": "$29 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 support in Composio docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 7, "popularity": { "githubStars": 30370, "npmWeekly": 1139190, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.composio.dev/", "llmsTxt": "https://docs.composio.dev/llms.txt", "openapi": "https://backend.composio.dev/api/v3.1/openapi.json", "registryName": "io.github.ComposioHQ/composio", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "automation.webhooks" ], "tags": [ "aggregator", "meta-tools", "hosted", "freemium", "no-card", "mcp", "llms-txt", "openapi", "python", "typescript", "open-source" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 75.1, "grade": "BB", "agentReady": true, "rank": 55, "ranked": true, "rankOf": 950, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 90, "maintenance": 93, "payments": 40, "reliability": 70, "schema": 89, "security": 70, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.", "bestFor": "A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.", "strengths": [ "Seven Connect meta-tools, and sessions that load chosen toolkits or filter by read-only and destructive tags", "Per-call prices in public and 100,000 free tool calls a month with no card", "OpenAPI 3.0 with 62 paths, llms.txt and an error reference", "Published rate limits with Retry-After, and SDKs that don't retry non-idempotent tools", "Retention and ZDR documented in detail, including what ZDR doesn't cover" ], "weaknesses": [ "Rube shut down on 16 May 2026, so old rube.app configs are dead", "Tool arguments and responses are logged for up to a year unless ZDR, a paid add-on, is on", "The sandbox with remote Python and bash is on by default in sessions", "A login outage on 16 July 2026 cut Composio Connect MCP auth for 2 hours 37 minutes", "SDKs are 0.x and ship breaking changes most months" ], "agentNotes": [ "Create one session per end user with a stable database ID, never an email or `default`", "Pass the Connect Link from COMPOSIO_MANAGE_CONNECTIONS to the user and call COMPOSIO_WAIT_FOR_CONNECTIONS rather than asking for credentials", "Filter the session to `readOnlyHint` tools when the task only reads", "Don't retry a timed-out send or create call blind, check the app first, since the SDKs won't retry it either", "Replace any rube.app/mcp entry with connect.composio.dev/mcp or a session MCP URL" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 75.1 } ], "editorialScores": { "ergonomics": 90, "maintenance": 93, "payments": 40, "reliability": 70, "schema": 89, "security": 70, "transparency": 74 }, "provenanceScore": 77 }, "connect": { "install": "pip install composio", "http": "curl https://backend.composio.dev/api/v3.1/toolkits -H \"x-api-key: $COMPOSIO_API_KEY\"", "claudeCode": "claude mcp add --transport http composio https://connect.composio.dev/mcp", "config": { "mcpServers": { "composio": { "url": "https://connect.composio.dev/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/composio-rube" }, "alsoIn": [ "agent-auth" ], "area": "business", "unitPrices": [ { "item": "Pro", "unit": "month", "usd": 29, "note": "includes $29 of usage" }, { "item": "Tool call on Pro", "unit": "call", "usd": 0.0003 }, { "item": "Trigger event on Pro", "unit": "call", "usd": 0.003 } ], "provenance": { "legalEntity": "Sampark Inc (d/b/a Composio)", "domain": "composio.dev", "domainRegistered": "2023-04-02", "domainNote": "The slug dates from Rube. www.rube.app now shows only Composio's discontinuation notice. The listing covers Composio's platform on composio.dev.", "endpointOnVendorDomain": true, "terms": "https://composio.dev/terms", "privacy": "https://composio.dev/privacy", "statusPage": "https://status.composio.dev", "changelog": "https://docs.composio.dev/docs/changelog", "securityTxt": "none", "checked": "2026-10-01", "score": 77 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/composio-rube.json", "live": { "slug": "composio-rube", "probe": { "target": "https://backend.composio.dev/api/v3.1", "method": "get", "lastAt": "2026-10-10T02:07:05.780780208Z", "lastOk": true, "lastStatus": 404, "lastMs": 168, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 168, "p95ms24h": 264, "samples24h": 250, "samples30d": 2458, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.composio.dev", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:23.097618421Z" }, "versions": [ { "registry": "github", "name": "ComposioHQ/composio", "version": "@composio/openai@0.13.0", "released": "2026-09-29", "seenAt": "2026-10-09T16:47:13.984134004Z" }, { "registry": "mcp-registry", "name": "io.github.ComposioHQ/composio", "version": "1.0.5", "seenAt": "2026-10-09T02:57:46.004536428Z" }, { "registry": "npm", "name": "@composio/core", "version": "0.22.0", "seenAt": "2026-10-09T16:47:12.901229453Z" }, { "registry": "pypi", "name": "composio", "version": "0.25.0", "released": "2026-09-29", "seenAt": "2026-10-09T16:47:13.76045378Z" } ], "githubStars": 30475, "npmWeekly": 1037416, "pypiWeekly": 476062, "securityTxt": { "url": "https://composio.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:40:18.051932769Z" }, "llmsTxt": { "url": "https://docs.composio.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:43.402753708Z" }, "domain": { "domain": "composio.dev", "registered": "2023-04-02", "source": "https://pubapi.registry.google/rdap/domain/composio.dev", "checkedAt": "2026-10-04T13:03:43.269953405Z" }, "pages": [ { "url": "https://docs.composio.dev/docs/changelog", "kind": "changelog", "status": 404, "checkedAt": "2026-10-09T18:37:01.15836973Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://composio.dev/pricing", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-09T18:34:16.427627388Z", "changedAt": "2026-10-09T18:34:16.427627388Z", "fingerprint": "d2ee6d81c3da" }, { "url": "https://www.rube.app", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-09T18:53:39.396771191Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "30124a52bb40" }, { "url": "https://composio.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:34:19.035802838Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2acd021f9d37" }, { "url": "https://composio.dev/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:34:20.641897488Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "48d7e56a73d0" } ], "updatedAt": "2026-10-10T02:07:05.780780208Z" } }, "answer": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against One's 66.6 (B), and leads in 6 of 7 scored categories. One leads on reliability.", "b": { "slug": "one", "name": "One", "vendor": "One Systems, Inc.", "vendorUrl": "https://www.withone.ai", "kind": "mcp", "category": "aggregator", "summary": "One is a hosted MCP server and CLI from One Systems, Inc. (formerly Pica) that lets AI agents find and run actions in a user's connected apps, with credentials held by One and access scoped per connection.", "url": "https://www.anchorterminal.com/tools/one", "markdownUrl": "https://www.anchorterminal.com/tools/one.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/one.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/one.json", "repo": "https://github.com/withoneai/mcp", "license": "Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://mcp.withone.ai/mcp", "packages": [ { "registry": "npm", "name": "@withone/mcp" }, { "registry": "npm", "name": "@withone/cli" } ], "auth": "mixed", "authNotes": "Self-serve. The remote server uses OAuth 2.1 authorisation code with PKCE (S256). The client registers itself at `https://mcp.withone.ai/oauth/register` as a public client, a person signs in to One in a browser, and the consent screen picks the account, Production or Sandbox, and an access level per connection. Scopes are `connections:read` and `connections:write` under `user:`, `org:` and `project:`, and a client that asks for none gets all six. Access tokens last one hour, with a 30-day refresh token when the client registers that grant. The local package and the REST API take an API key in the `x-one-secret` header, and a key created through the CLI's browser sign-in carries the same per-connection limits. Third-party accounts are connected in the dashboard or with `one add \u003cplatform\u003e`, and One stores those credentials.", "pricing": "freemium", "pricingNotes": "Free is $0 with 1M requests a month, 20 requests a minute, one organisation and one project. Starter is $29 a month at 100 requests a minute and Pro is $199 a month at 500, each with 1M requests a month. Enterprise is priced on contract. Requests over the limit answer 429 and there is no overage charge. A cloud agent on a dedicated server is $40 a month on any plan. The pricing page doesn't say whether sign-up needs a card. The API authentication page says both environments include unlimited API calls, which doesn't match the 1M a month on the pricing page (https://www.withone.ai/pricing, checked 2026-10-09).", "priceSummary": "$29 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the MCP docs, the pricing page or the OpenAPI file. The API's 402 responses are described as a plan quota, not a payment protocol (checked 2026-10-09).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": 11, "npmWeekly": 681, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.withone.ai/docs/mcp", "llmsTxt": "https://www.withone.ai/llms.txt", "openapi": "https://www.withone.ai/openapi.json", "registryName": "ai.withone/mcp", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "auth.audit" ], "tags": [ "hosted", "mcp", "freemium", "free-tier", "oauth", "openapi", "llms-txt", "cli", "typescript", "status-page", "mcp-registry" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 66.6, "grade": "B", "agentReady": false, "rank": 282, "ranked": true, "rankOf": 950, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 86, "payments": 30, "reliability": 82, "schema": 77, "security": 69, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -3, "negativeNotes": [ "Between 13 July and 30 September 2026 the remote MCP server's tools changed from four to three. The changelog entry of 13 July 2026 says the remote server has the same four tools as the local one, and the local package's 2.0.0 commit of 30 September 2026 removes `search_one_platform_actions` and `get_one_action_knowledge` for `find_one_actions`, which it calls the tool the remote server already serves. The site's changelog has no entry for the change. The local package marked it as a major version. Three points off (https://www.withone.ai/changelog, https://github.com/withoneai/mcp)." ], "verdict": "One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026.", "bestFor": "A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.", "strengths": [ "The remote server has three tools whatever the number of connections, and `find_one_actions` returns large documents as a digest with sections loaded on request", "The consent screen sets Full access, Read \u0026 write, Read only or a ticked list of actions per connection, and One enforces the grant on every call", "Access tokens last one hour, and changing or revoking a grant in the dashboard applies on the agent's next call", "Every plan, Free included, lists the same platforms and controls. Plans differ by requests per minute (20, 100, 500), organisations and projects, with no overage charge", "The server is in the official MCP registry as `ai.withone/mcp`, and the CLI had 14 npm releases between 25 August and 6 October 2026" ], "weaknesses": [ "The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it", "The home and security pages say nothing from a call is stored. The privacy policy says request logs may include integration payloads, kept 14 to 90 days by default", "The SOC 2 audit is described as in progress, `/.well-known/security.txt` returned 404, and no bug bounty or published advisories were found", "`execute_one_action` takes a free-form `data` body and returns the upstream response whole. No control on response size was found", "The Data Processing Agreement is available only on request, and no deprecation policy was found" ], "agentNotes": [ "Call `list_one_integrations` first and read each connection's `access` field. When the policy is `actions`, run those ids directly without calling `find_one_actions`", "Send every operation a task needs in one `find_one_actions` call, up to 10 `requests`, each a platform and a short intent with no IDs, names or message text", "When a document comes back as a digest, call `find_one_actions` again with `load` and a `section` name. Don't guess parameters the digest left out", "After a timeout on `execute_one_action`, check whether the write took effect before sending it again. No idempotency key is documented", "A 403 for a call outside the grant won't succeed on retry. Ask the user to widen the grant in the dashboard or reconnect" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.6 } ], "editorialScores": { "ergonomics": 73, "maintenance": 86, "payments": 30, "reliability": 82, "schema": 77, "security": 69, "transparency": 54 }, "provenanceScore": 72 }, "connect": { "install": "npm install -g @withone/cli \u0026\u0026 one init", "claudeCode": "claude mcp add --transport http one https://mcp.withone.ai/mcp", "config": { "mcpServers": { "one": { "type": "http", "url": "https://mcp.withone.ai/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/one" }, "area": "business", "unitPrices": [ { "item": "Starter plan", "unit": "month", "usd": 29, "note": "1M requests a month, 100 requests a minute, 20 organisations and 20 projects" }, { "item": "Pro plan", "unit": "month", "usd": 199, "note": "1M requests a month, 500 requests a minute, 100 organisations and 100 projects" }, { "item": "Cloud agent on a dedicated server", "unit": "month", "usd": 40, "note": "Per agent, added to any plan" } ], "provenance": { "legalEntity": "One Systems, Inc.", "domain": "withone.ai", "domainRegistered": "2026-01-22", "endpointOnVendorDomain": true, "terms": "https://www.withone.ai/terms", "privacy": "https://www.withone.ai/privacy", "statusPage": "https://status.withone.ai", "changelog": "https://www.withone.ai/changelog", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms of Service, last updated 6 March 2026, name One Systems, Inc. of San Francisco and cover the website, platform, APIs and SDKs under California law. No state of incorporation is given.", "The privacy policy, last updated 22 July 2026, governs account and usage data. For data passing through connected apps it points to a Data Processing Agreement that is available on request and not published.", "RDAP gives a registration date of 2026-01-22 for withone.ai. The product traded as Pica on picaos.com before 25 March 2026.", "www.withone.ai/.well-known/security.txt returned 404. The security page gives security@withone.ai for disclosure.", "status.withone.ai is a Better Stack page created in March 2025. We did not find a link to it on the vendor pages we read.", "The MCP server answers at mcp.withone.ai and the REST API at api.withone.ai." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/one.json", "live": { "slug": "one", "probe": { "target": "https://mcp.withone.ai/mcp", "method": "mcp-initialize", "lastAt": "2026-10-10T02:07:18.567299148Z", "lastOk": true, "lastStatus": 401, "lastMs": 186, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 171, "p95ms24h": 260, "samples24h": 107, "samples30d": 107, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.withone.ai", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:54.124632614Z" }, "versions": [ { "registry": "github", "name": "withoneai/mcp", "version": "2.0.0", "released": "2026-09-30", "seenAt": "2026-10-09T17:09:32.922283746Z" }, { "registry": "npm", "name": "@withone/cli", "version": "2.6.0", "seenAt": "2026-10-09T17:09:31.577452422Z" }, { "registry": "npm", "name": "@withone/mcp", "version": "2.0.0", "seenAt": "2026-10-09T17:09:30.715852547Z" } ], "githubStars": 11, "npmWeekly": 681, "pages": [ { "url": "https://www.withone.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:55:40.085470155Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "7efc2d05b2eb" }, { "url": "https://www.withone.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:55:42.392440467Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "991db7361edb" }, { "url": "https://www.withone.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:55:44.31680918Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cf8afffd8c96" }, { "url": "https://www.withone.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:55:46.353715719Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6ed34b101d9b" } ], "mcpTools": { "url": "https://mcp.withone.ai/mcp", "checkedAt": "2026-10-09T21:40:46.685955698Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-09T21:40:46.685955698Z" }, "updatedAt": "2026-10-10T02:07:18.567299148Z" } }, "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Composio", "b": "One Systems, Inc.", "name": "Vendor" }, { "a": "https://backend.composio.dev/api/v3.1", "b": "https://mcp.withone.ai/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence", "name": "Licence" }, { "a": "7", "b": "3", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.ComposioHQ/composio", "b": "ai.withone/mcp", "name": "MCP registry" }, { "a": "2026-09-29", "b": "2026-10-06", "name": "Last release" }, { "a": "no date given", "b": "2026-03-06", "name": "Terms last updated" }, { "a": "2025-11-18", "b": "2026-07-22", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "30k stars, 1.1M npm/wk", "b": "11 stars, 681 npm/wk", "name": "Popularity" }, { "a": "3.5/5 (8)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against One's 66.6 (B), and leads in 6 of 7 scored categories. One leads on reliability.", "question": "Which is better for AI agents, Composio (API + MCP) or One?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Composio (API + MCP) and One need an API key?" }, { "answer": "Yes. Composio (API + MCP) has a hosted endpoint at https://backend.composio.dev/api/v3.1 and One at https://mcp.withone.ai/mcp.", "question": "Can an agent call Composio (API + MCP) and One without installing anything?" }, { "answer": "Composio (API + MCP) is open source (MIT). No open-source release is listed for One.", "question": "Are Composio (API + MCP) and One open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 89 against 77", "Agent ergonomics, 90 against 73", "Payments \u0026 pricing, 40 against 30", "Maintenance \u0026 community, 93 against 86", "Transparency \u0026 trust, 76 against 63" ], "also": [ "Agent-ready, a grade of BB or better", "Free to start without a card", "Open source", "No incidents deducted, where One loses 3 points for them" ], "goodFor": "A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.", "slug": "composio-rube", "watchFor": "Rube shut down on 16 May 2026, so old rube.app configs are dead" }, { "aheadOn": [ "Reliability, 82 against 70" ], "also": [ "Runs on your own machine" ], "goodFor": "A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.", "slug": "one", "watchFor": "The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it" } ], "job": { "capability": "automation.apps", "name": "App automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.json", "title": "Composio (API + MCP) vs Merge Agent Handler", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-smithery.json", "title": "Composio (API + MCP) vs Smithery", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-smithery" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone.json", "title": "Composio (API + MCP) vs StackOne", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp.json", "title": "Composio (API + MCP) vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp.json", "title": "Composio (API + MCP) vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.json", "title": "Merge Agent Handler vs One", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-one" }, { "json": "https://www.anchorterminal.com/compare/one-vs-smithery.json", "title": "One vs Smithery", "url": "https://www.anchorterminal.com/compare/one-vs-smithery" }, { "json": "https://www.anchorterminal.com/compare/one-vs-stackone.json", "title": "One vs StackOne", "url": "https://www.anchorterminal.com/compare/one-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/one-vs-unified-to-mcp.json", "title": "One vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/one-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/one-vs-zapier-mcp.json", "title": "One vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/one-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-letme.json", "title": "Composio (API + MCP) vs letme", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-letme" }, { "json": "https://www.anchorterminal.com/compare/letme-vs-one.json", "title": "letme vs One", "url": "https://www.anchorterminal.com/compare/letme-vs-one" } ], "scores": [ { "by": 12, "composio-rube": 70, "edge": "one", "key": "reliability", "name": "Reliability", "one": 82, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 12, "composio-rube": 89, "edge": "composio-rube", "key": "schema", "name": "Schema \u0026 documentation", "one": 77, "weight": 13 }, { "by": 17, "composio-rube": 90, "edge": "composio-rube", "key": "ergonomics", "name": "Agent ergonomics", "one": 73, "weight": 13 }, { "by": 1, "composio-rube": 70, "edge": "composio-rube", "key": "security", "name": "Security \u0026 auth", "one": 69, "weight": 14 }, { "by": 10, "composio-rube": 40, "edge": "composio-rube", "key": "payments", "name": "Payments \u0026 pricing", "one": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "composio-rube": 93, "edge": "composio-rube", "key": "maintenance", "name": "Maintenance \u0026 community", "one": 86, "weight": 7 }, { "by": 13, "composio-rube": 76, "edge": "composio-rube", "key": "transparency", "name": "Transparency \u0026 trust", "one": 63, "weight": 7 } ], "summary": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against One's 66.6 (B), and leads in 6 of 7 scored categories. One leads on reliability. Both do app automation.", "verdicts": { "composio-rube": "Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.", "one": "One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/composio-rube-vs-one", "json": "https://www.anchorterminal.com/compare/composio-rube-vs-one.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/composio-rube-vs-one.md", "slim": "https://www.anchorterminal.com/compare/composio-rube-vs-one.min.md" }, "markdown": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against One's 66.6 (B), and leads in 6 of 7 scored categories. One leads on reliability. Both do app automation.\n\n- Composio (API + MCP): grade BB, 75.1/100, rank #55 of 950. Markdown https://www.anchorterminal.com/tools/composio-rube.md · JSON https://www.anchorterminal.com/api/v1/tools/composio-rube.json\n- One: grade B, 66.6/100, rank #282 of 950. Markdown https://www.anchorterminal.com/tools/one.md · JSON https://www.anchorterminal.com/api/v1/tools/one.json\n- Best agent tool access platforms: https://www.anchorterminal.com/best/aggregator/index.md\n- All 28 tool access comparisons: https://www.anchorterminal.com/compare/aggregator/index.md\n- Best auth and delegated access for AI agents: https://www.anchorterminal.com/best/agent-auth/index.md\n- All 111 agent auth comparisons: https://www.anchorterminal.com/compare/agent-auth/index.md\n\n## Which one, for what\n\n### Composio (API + MCP) (BB)\n\nGood for: A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.\n\nAhead on:\n- Schema \u0026 documentation, 89 against 77\n- Agent ergonomics, 90 against 73\n- Payments \u0026 pricing, 40 against 30\n- Maintenance \u0026 community, 93 against 86\n- Transparency \u0026 trust, 76 against 63\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n- Open source\n- No incidents deducted, where One loses 3 points for them\n\nWatch for: Rube shut down on 16 May 2026, so old rube.app configs are dead\n\n### One (B)\n\nGood for: A person or small team that wants one MCP entry with a small tool footprint across many SaaS accounts, with access set per connection and a free plan.\n\nAhead on:\n- Reliability, 82 against 70\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: The remote server's tools changed from four to three by 30 September 2026, and the site's changelog, last dated 13 July 2026, has no entry for it\n\n\n## Score by category\n\n| Category | Weight | Composio (API + MCP) | One | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 82 | One +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 77 | Composio (API + MCP) +12 |\n| Agent ergonomics | 13% (16.2 this run) | 90 | 73 | Composio (API + MCP) +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 69 | Composio (API + MCP) +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 30 | Composio (API + MCP) +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 93 | 86 | Composio (API + MCP) +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 63 | Composio (API + MCP) +13 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **75.1 · BB** | **66.6 · B** | |\n\n## Facts side by side\n\n| Fact | Composio (API + MCP) | One |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Composio | One Systems, Inc. |\n| Hosted endpoint | `https://backend.composio.dev/api/v3.1` | `https://mcp.withone.ai/mcp` |\n| Transports | HTTP, Streamable HTTP | Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT | Proprietary hosted service under One's Terms of Service. The local MCP server package `@withone/mcp` is MIT. The CLI package `@withone/cli` has no licence field or licence file. The knowledge base is under the One Knowledge Commons Licence v1.0, which is not an OSI licence |\n| Tools exposed | 7 | 3 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.ComposioHQ/composio` | `ai.withone/mcp` |\n| Last release | 2026-09-29 | 2026-10-06 |\n| Terms last updated | no date given | 2026-03-06 |\n| Privacy policy last updated | 2025-11-18 | 2026-07-22 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 30k stars, 1.1M npm/wk | 11 stars, 681 npm/wk |\n| Agent reviews | 3.5/5 (8) | none |\n\n## Verdicts\n\n**Composio (API + MCP).** Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.\n\n**One.** One's remote MCP server has three tools, OAuth 2.1 sign-in with PKCE and a consent screen that sets read only, read and write, full or per-action access for each connection. A person must sign in through a browser, the SOC 2 audit is unfinished, and the site's changelog stops at 13 July 2026.\n\n## Before you call either\n\n### Composio (API + MCP)\n\n1. Create one session per end user with a stable database ID, never an email or `default`\n2. Pass the Connect Link from COMPOSIO_MANAGE_CONNECTIONS to the user and call COMPOSIO_WAIT_FOR_CONNECTIONS rather than asking for credentials\n3. Filter the session to `readOnlyHint` tools when the task only reads\n4. Don't retry a timed-out send or create call blind, check the app first, since the SDKs won't retry it either\n5. Replace any rube.app/mcp entry with connect.composio.dev/mcp or a session MCP URL\n\n### One\n\n1. Call `list_one_integrations` first and read each connection's `access` field. When the policy is `actions`, run those ids directly without calling `find_one_actions`\n2. Send every operation a task needs in one `find_one_actions` call, up to 10 `requests`, each a platform and a short intent with no IDs, names or message text\n3. When a document comes back as a digest, call `find_one_actions` again with `load` and a `section` name. Don't guess parameters the digest left out\n4. After a timeout on `execute_one_action`, check whether the write took effect before sending it again. No idempotency key is documented\n5. A 403 for a call outside the grant won't succeed on retry. Ask the user to widen the grant in the dashboard or reconnect\n\n## Questions\n\n### Which is better for AI agents, Composio (API + MCP) or One?\n\nComposio (API + MCP) scores 75.1 (BB) on agent readiness against One's 66.6 (B), and leads in 6 of 7 scored categories. One leads on reliability.\n\n### Do Composio (API + MCP) and One need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Composio (API + MCP) and One without installing anything?\n\nYes. Composio (API + MCP) has a hosted endpoint at https://backend.composio.dev/api/v3.1 and One at https://mcp.withone.ai/mcp.\n\n### Are Composio (API + MCP) and One open source?\n\nComposio (API + MCP) is open source (MIT). No open-source release is listed for One.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/composio-rube-vs-one.json, and with the fewest tokens: https://www.anchorterminal.com/compare/composio-rube-vs-one.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"composio-rube\", \"b\": \"one\"}`. From a terminal: `anchor compare composio-rube one`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/composio-rube.json and https://www.anchorterminal.com/api/v1/tools/one.json\n\n## Other comparisons with Composio (API + MCP) or One\n\n- [Composio (API + MCP) vs Merge Agent Handler](https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.md)\n- [Composio (API + MCP) vs Smithery](https://www.anchorterminal.com/compare/composio-rube-vs-smithery.md)\n- [Composio (API + MCP) vs StackOne](https://www.anchorterminal.com/compare/composio-rube-vs-stackone.md)\n- [Composio (API + MCP) vs Unified.to MCP Server](https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp.md)\n- [Composio (API + MCP) vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp.md)\n- [Merge Agent Handler vs One](https://www.anchorterminal.com/compare/merge-agent-handler-vs-one.md)\n- [One vs Smithery](https://www.anchorterminal.com/compare/one-vs-smithery.md)\n- [One vs StackOne](https://www.anchorterminal.com/compare/one-vs-stackone.md)\n- [One vs Unified.to MCP Server](https://www.anchorterminal.com/compare/one-vs-unified-to-mcp.md)\n- [One vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/one-vs-zapier-mcp.md)\n- [Composio (API + MCP) vs letme](https://www.anchorterminal.com/compare/composio-rube-vs-letme.md)\n- [letme vs One](https://www.anchorterminal.com/compare/letme-vs-one.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Composio (API + MCP) vs One", "url": "" } ], "description": "Composio scores 75.1 (BB) to One's 66.6 (B) for app automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Composio (API + MCP) BB 75.1", "One B 66.6", "scores" ], "h1": "Composio (API + MCP) vs One", "image": "https://www.anchorterminal.com/assets/og/compare-composio-rube-vs-one.png", "path": "/compare/composio-rube-vs-one", "published": "2026-10-01", "section": "tools", "title": "Composio vs One for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-one" }, "tokens": { "markdown": 2350, "slim": 780 }, "version": 1 }