{ "data": { "a": { "slug": "composio-rube", "name": "Composio (API + MCP)", "vendor": "Composio", "vendorUrl": "https://composio.dev", "kind": "http-api", "category": "aggregator", "summary": "Tool access and per-user authentication for agents across 1,000+ apps.", "url": "https://www.anchorterminal.com/tools/composio-rube", "markdownUrl": "https://www.anchorterminal.com/tools/composio-rube.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/composio-rube.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/composio-rube.json", "repo": "https://github.com/ComposioHQ/composio", "license": "MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://backend.composio.dev/api/v3.1", "packages": [ { "registry": "npm", "name": "@composio/core" }, { "registry": "pypi", "name": "composio" } ], "auth": "mixed", "authNotes": "REST calls take a project key in 'x-api-key' (or an org key in 'x-org-api-key'). End users authorise each app through a hosted Connect Link, and Composio stores the tokens under your user ID, so they never pass through your app or the model. Composio Connect MCP uses an OAuth sign-in in the client. Bring your own OAuth app via a custom auth config for your own branding or scopes.", "pricing": "freemium", "pricingNotes": "Hobby is free with 100,000 tool calls and 50,000 trigger events a month and pauses at the cap, no card. Pro is $29 a month including $29 of usage, then $0.0003 a tool call and $0.003 a trigger event, or $0.0005 and $0.005 through Composio-managed apps, and $3.75 per million LLM tokens after 1 million free. Premium tools (search, maps, browser, media) are billed at provider prices. Enterprise is custom. The new prices apply to sign-ups from 2026-08-15, and earlier customers keep their plan to 2026-12-31 (https://composio.dev/pricing).", "priceSummary": "$29 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 support in Composio docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 7, "popularity": { "githubStars": 30370, "npmWeekly": 1139190, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.composio.dev/", "llmsTxt": "https://docs.composio.dev/llms.txt", "openapi": "https://backend.composio.dev/api/v3.1/openapi.json", "registryName": "io.github.ComposioHQ/composio", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "automation.webhooks" ], "tags": [ "aggregator", "meta-tools", "hosted", "freemium", "no-card", "mcp", "llms-txt", "openapi", "python", "typescript", "open-source" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 75.1, "grade": "BB", "agentReady": true, "rank": 55, "ranked": true, "rankOf": 950, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 90, "maintenance": 93, "payments": 40, "reliability": 70, "schema": 89, "security": 70, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.", "bestFor": "A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.", "strengths": [ "Seven Connect meta-tools, and sessions that load chosen toolkits or filter by read-only and destructive tags", "Per-call prices in public and 100,000 free tool calls a month with no card", "OpenAPI 3.0 with 62 paths, llms.txt and an error reference", "Published rate limits with Retry-After, and SDKs that don't retry non-idempotent tools", "Retention and ZDR documented in detail, including what ZDR doesn't cover" ], "weaknesses": [ "Rube shut down on 16 May 2026, so old rube.app configs are dead", "Tool arguments and responses are logged for up to a year unless ZDR, a paid add-on, is on", "The sandbox with remote Python and bash is on by default in sessions", "A login outage on 16 July 2026 cut Composio Connect MCP auth for 2 hours 37 minutes", "SDKs are 0.x and ship breaking changes most months" ], "agentNotes": [ "Create one session per end user with a stable database ID, never an email or `default`", "Pass the Connect Link from COMPOSIO_MANAGE_CONNECTIONS to the user and call COMPOSIO_WAIT_FOR_CONNECTIONS rather than asking for credentials", "Filter the session to `readOnlyHint` tools when the task only reads", "Don't retry a timed-out send or create call blind, check the app first, since the SDKs won't retry it either", "Replace any rube.app/mcp entry with connect.composio.dev/mcp or a session MCP URL" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 75.1 } ], "editorialScores": { "ergonomics": 90, "maintenance": 93, "payments": 40, "reliability": 70, "schema": 89, "security": 70, "transparency": 74 }, "provenanceScore": 77 }, "connect": { "install": "pip install composio", "http": "curl https://backend.composio.dev/api/v3.1/toolkits -H \"x-api-key: $COMPOSIO_API_KEY\"", "claudeCode": "claude mcp add --transport http composio https://connect.composio.dev/mcp", "config": { "mcpServers": { "composio": { "url": "https://connect.composio.dev/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/composio-rube" }, "alsoIn": [ "agent-auth" ], "area": "business", "unitPrices": [ { "item": "Pro", "unit": "month", "usd": 29, "note": "includes $29 of usage" }, { "item": "Tool call on Pro", "unit": "call", "usd": 0.0003 }, { "item": "Trigger event on Pro", "unit": "call", "usd": 0.003 } ], "provenance": { "legalEntity": "Sampark Inc (d/b/a Composio)", "domain": "composio.dev", "domainRegistered": "2023-04-02", "domainNote": "The slug dates from Rube. www.rube.app now shows only Composio's discontinuation notice. The listing covers Composio's platform on composio.dev.", "endpointOnVendorDomain": true, "terms": "https://composio.dev/terms", "privacy": "https://composio.dev/privacy", "statusPage": "https://status.composio.dev", "changelog": "https://docs.composio.dev/docs/changelog", "securityTxt": "none", "checked": "2026-10-01", "score": 77 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/composio-rube.json", "live": { "slug": "composio-rube", "probe": { "target": "https://backend.composio.dev/api/v3.1", "method": "get", "lastAt": "2026-10-10T03:53:24.190672691Z", "lastOk": true, "lastStatus": 404, "lastMs": 151, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 167, "p95ms24h": 260, "samples24h": 249, "samples30d": 2476, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 40, "ok": 40 } ] }, "vendorStatus": { "page": "https://status.composio.dev", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:23.097618421Z" }, "versions": [ { "registry": "github", "name": "ComposioHQ/composio", "version": "@composio/openai@0.13.0", "released": "2026-09-29", "seenAt": "2026-10-09T16:47:13.984134004Z" }, { "registry": "mcp-registry", "name": "io.github.ComposioHQ/composio", "version": "1.0.5", "seenAt": "2026-10-10T03:11:32.438759038Z" }, { "registry": "npm", "name": "@composio/core", "version": "0.22.0", "seenAt": "2026-10-09T16:47:12.901229453Z" }, { "registry": "pypi", "name": "composio", "version": "0.25.0", "released": "2026-09-29", "seenAt": "2026-10-09T16:47:13.76045378Z" } ], "githubStars": 30475, "npmWeekly": 1037416, "pypiWeekly": 476062, "securityTxt": { "url": "https://composio.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:40:18.051932769Z" }, "llmsTxt": { "url": "https://docs.composio.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:43.402753708Z" }, "domain": { "domain": "composio.dev", "registered": "2023-04-02", "source": "https://pubapi.registry.google/rdap/domain/composio.dev", "checkedAt": "2026-10-04T13:03:43.269953405Z" }, "pages": [ { "url": "https://docs.composio.dev/docs/changelog", "kind": "changelog", "status": 404, "checkedAt": "2026-10-09T18:37:01.15836973Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://composio.dev/pricing", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-09T18:34:16.427627388Z", "changedAt": "2026-10-09T18:34:16.427627388Z", "fingerprint": "d2ee6d81c3da" }, { "url": "https://www.rube.app", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-09T18:53:39.396771191Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "30124a52bb40" }, { "url": "https://composio.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:34:19.035802838Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2acd021f9d37" }, { "url": "https://composio.dev/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:34:20.641897488Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "48d7e56a73d0" } ], "updatedAt": "2026-10-10T03:53:24.190672691Z" } }, "answer": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against StackOne's 69.1 (B), and leads in 6 of 7 scored categories. StackOne leads on reliability.", "b": { "slug": "stackone", "name": "StackOne", "vendor": "StackOne Technologies Limited", "vendorUrl": "https://www.stackone.com", "kind": "mcp", "category": "aggregator", "summary": "StackOne is a hosted gateway from StackOne Technologies Limited that gives AI agents actions across more than 540 business apps over MCP, SDKs, A2A or HTTP, with managed authentication, per-user grants, policies and logs.", "url": "https://www.anchorterminal.com/tools/stackone", "markdownUrl": "https://www.anchorterminal.com/tools/stackone.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/stackone.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/stackone.json", "repo": "https://github.com/StackOneHQ/stackone-ai-node", "license": "Proprietary service under StackOne's SaaS Terms and Conditions. The Agent SDKs (`@stackone/ai`, `stackone-ai`) and the Defender package (`@stackone/defender`) are Apache-2.0", "transports": [ "streamable-http", "http" ], "remoteUrl": "https://mcp.stackone.com/mcp", "packages": [ { "registry": "npm", "name": "@stackone/ai" }, { "registry": "pypi", "name": "stackone-ai" }, { "registry": "npm", "name": "@stackone/defender" } ], "auth": "mixed", "authNotes": "Self-serve. A person signs up in the dashboard, creates a project and a connector profile, and links an account. MCP clients connect to `https://mcp.stackone.com/mcp` with OAuth (scopes `mcp offline_access`, one-hour access tokens, a 90-day grant) and the user picks the linked accounts and actions at consent. Most clients register themselves, and a few need a client ID and secret created in the dashboard. Backend calls go to `https://api.stackone.com/mcp` or `POST /actions/rpc` with a project API key as the Basic auth username and the linked account in `x-account-id`. Keys take scopes (Platform API, Actions, Connectors, Credentials, Unified API) and can be disabled or deleted. Session token URLs (`https://api.stackone.com/mcp?token=...`) cover one linked account, carry the access in the URL and expire after one year by default.", "pricing": "freemium", "pricingNotes": "Free to start with no card, per the pricing page. Gateway Starter is free with 1,000 credits a seat a month, one credit per tool call or API call, and extra credits at $60 per 20,000. Gateway Team is $600 a month ($6,000 a year) with 5,000 credits a seat a month and extra credits at $20 per 20,000. The pricing calculator's markup gives 10 seats included on Team and $15 a further seat, which the page text doesn't state. OEM Core is free with a monthly credit allowance and volume prices on request. Enterprise plans are priced on contract. Browser use, premium defence and data sync cost more than one credit, at rates not published. The Service Consumption Schedule of 30 March 2026 gives $0.003 per Action Call as overage and counts unsuccessful requests, while the pricing page says background and failed calls aren't billed (https://www.stackone.com/pricing/, checked 2026-10-09).", "priceSummary": "$600 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the pricing page, the SaaS terms or the Service Consumption Schedule (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 30, "npmWeekly": 277, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.stackone.com/introduction", "llmsTxt": "https://docs.stackone.com/llms.txt", "openapi": "https://api.eu1.stackone.com/v2/oas/stackone.json", "registryName": "com.stackone/mcp", "capabilities": [ "automation.apps", "automation.auth", "automation.actions", "agent.tools", "auth.audit" ], "tags": [ "hosted", "mcp", "a2a", "freemium", "free-tier", "no-card", "oauth", "api-key", "openapi", "llms-txt", "typescript", "python", "enterprise", "status-page", "soc2", "mcp-registry", "closed-source" ], "lastRelease": "2026-09-24", "graded": true, "anchor": { "graded": true, "score": 69.1, "grade": "B", "agentReady": false, "rank": 198, "ranked": true, "rankOf": 950, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 84, "payments": 38, "reliability": 80, "schema": 78, "security": 69, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -2, "negativeNotes": [ "27 April 2026. `@stackone/ai` v2.8.1 fixed a flaw in which tools fetched concurrently for several accounts were stamped with the wrong `x-account-id`, so a call could run against another linked account. It is recorded as a bug fix in the changelog, with no advisory found. Fixed and documented, so 2 points (https://github.com/StackOneHQ/stackone-ai-node/blob/main/CHANGELOG.md)." ], "verdict": "StackOne's MCP server signs each person in with OAuth, lets them grant individual accounts and actions, and by default exposes two search and execute tools in place of the full catalogue. Session token URLs carry the credential in the query string for a year by default, and the Consumption Schedule and pricing page disagree on whether failed calls are billed.", "bestFor": "A company that wants one governed MCP endpoint for staff agents across business systems, and product teams embedding per-customer connections with HR, recruiting and CRM coverage.", "strengths": [ "The MCP server at `https://mcp.stackone.com/mcp` uses OAuth per person. Access tokens last one hour, a grant lasts 90 days, and each user can revoke it under Connected Apps", "Advanced Tool Search replaces the tool list with two tools, search and execute, and is on by default at the OAuth consent screen", "Since 24 July 2026 every tool carries `readOnlyHint`, `destructiveHint` and `openWorldHint`, derived from an effects value on each action", "API keys are limited to one project and take scopes for the Platform API, Actions, Connectors, Credentials and the Unified API. Credentials access is off by default", "Rate limit published at 1,000 requests a minute per API key, with `Retry-After` in seconds on 429 and 408 responses", "Defender scans tool results for prompt injection and is on for new projects. Its Light Scan engine is open source under Apache-2.0" ], "weaknesses": [ "Session token URLs (`https://api.stackone.com/mcp?token=...`) put the credential in the query string, cover one linked account and expire after one year by default", "The Service Consumption Schedule counts every request, successful or not, as an Action Call. The pricing page says failed calls aren't billed", "Defender's default mode is Monitor, which records a verdict and passes the tool result to the agent unchanged", "Policies apply only to signed-in members. A call made with a project API key is memberless and is governed by connector profile scoping alone", "The Logs API, audit logs, SIEM export and an uptime SLA are Enterprise only on Gateway plans, and Starter keeps action logs for one day", "The Acceptable Use Policy bars competitive analysis or benchmarking other than for internal comparison, and probing or testing the Service's vulnerability without authorisation. This matters before any probe is run", "`@stackone/ai` stamped tools with the wrong `x-account-id` when accounts were fetched concurrently, until v2.8.1 on 27 April 2026. No advisory was found" ], "agentNotes": [ "Send `Accept: application/json,text/event-stream` on every MCP request to `https://api.stackone.com/mcp`, by POST only. Without it the server answers 406", "In `search_execute` mode call `{provider}_search_actions` first and pass the returned `action_id` to `{provider}_execute_action`. Never hardcode action ids", "Pass the API key as the Basic auth username with an empty password, and name the linked account in `x-account-id`", "On 429 or 408 wait the seconds given in `Retry-After`. StackOne has already retried a provider's 429 up to five times within a 60-second request lifetime", "On 412 read `errorCode` and `details.statusReasons`. `AccountErrorStatus` needs a person to re-authenticate the linked account" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.1 } ], "editorialScores": { "ergonomics": 75, "maintenance": 84, "payments": 38, "reliability": 80, "schema": 78, "security": 69, "transparency": 50 }, "provenanceScore": 88 }, "connect": { "install": "npm install @stackone/ai", "http": "curl -X POST \"https://api.stackone.com/actions/rpc\" \\\n -u \"$STACKONE_API_KEY:\" \\\n -H \"x-account-id: your-account-id\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"action\": \"bamboohr_list_employees\", \"query\": {\"page_size\": 25}}'", "claudeCode": "claude mcp add --transport http --scope user stackone https://mcp.stackone.com/mcp" }, "letme": { "capability": "https://letme.dev/automation.apps", "tool": "https://letme.dev/stackone" }, "area": "business", "unitPrices": [ { "item": "Gateway Team plan", "unit": "month", "usd": 600, "note": "5,000 credits a seat a month, one credit per tool call or API call. $6,000 billed yearly" }, { "item": "Extra credits, Gateway Starter", "unit": "1k-calls", "usd": 3, "note": "$60 per 20,000 credits, valid 12 months. Advanced capabilities cost more than one credit a call" }, { "item": "Extra credits, Gateway Team", "unit": "1k-calls", "usd": 1, "note": "$20 per 20,000 credits, valid 12 months" } ], "provenance": { "legalEntity": "StackOne Technologies Limited", "domain": "stackone.com", "domainRegistered": "2013-06-25", "endpointOnVendorDomain": true, "terms": "https://www.stackone.com/terms/saas-terms/", "privacy": "https://www.stackone.com/terms/privacy-policy/", "statusPage": "https://status.stackone.com", "changelog": "https://www.stackone.com/changelog/", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The SaaS Terms and Conditions, effective 30 March 2026, name StackOne Technologies Limited, company number 14684360, registered at 2 Communications Road, Newbury, Berkshire, RG19 6AB, under the laws of England and Wales. They take effect when a customer first accesses the Service or signs an order.", "The contact page says StackOne operates in the United States as StackOne Technologies Inc., 2261 Market Street, San Francisco.", "The Platform Privacy Policy, last updated 1 December 2023, covers the web application and API and says it does not cover the website. A separate Privacy Notice covers the website.", "The MCP server answers at mcp.stackone.com, the API at api.stackone.com and A2A at a2a.stackone.com.", "www.stackone.com/.well-known/security.txt returned 404.", "RDAP for stackone.com gives a registration date of 2013-06-25. The company was incorporated later, per its company number.", "status.stackone.com runs on incident.io and lists the Web Dashboard, the API (US, EU and UK) and the Connectors Hub.", "trust.stackone.com, which the terms cite for the security policy and the sub-processor list, answered our reader with a bot check and was not read." ], "score": 88 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/stackone.json", "live": { "slug": "stackone", "probe": { "target": "https://mcp.stackone.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-10T03:53:45.475808735Z", "lastOk": true, "lastStatus": 401, "lastMs": 84, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 113, "p95ms24h": 295, "samples24h": 125, "samples30d": 125, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 40, "ok": 40 } ] }, "vendorStatus": { "page": "https://status.stackone.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T03:58:47.716904214Z" }, "versions": [ { "registry": "github", "name": "StackOneHQ/stackone-ai-node", "version": "v2.10.0", "released": "2026-07-27", "seenAt": "2026-10-09T17:21:48.091098138Z" }, { "registry": "mcp-registry", "name": "com.stackone/mcp", "version": "1.0.1", "seenAt": "2026-10-10T03:11:32.438759038Z" }, { "registry": "npm", "name": "@stackone/ai", "version": "2.10.0", "seenAt": "2026-10-09T17:21:45.859326927Z" }, { "registry": "npm", "name": "@stackone/defender", "version": "0.8.3", "seenAt": "2026-10-09T17:21:46.919917579Z" }, { "registry": "pypi", "name": "stackone-ai", "version": "2.10.1", "released": "2026-07-28", "seenAt": "2026-10-09T17:21:46.731430671Z" } ], "githubStars": 30, "npmWeekly": 277, "pypiWeekly": 120, "pages": [ { "url": "https://www.stackone.com/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:54:33.415845489Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a8dc254bb424" }, { "url": "https://www.stackone.com/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:54:35.567295878Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "98687cfb089f" }, { "url": "https://www.stackone.com/terms/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:54:37.551620202Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "011ecd948b67" }, { "url": "https://www.stackone.com/terms/saas-terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:54:39.532884111Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "393a890498df" } ], "mcpTools": { "url": "https://mcp.stackone.com/mcp", "checkedAt": "2026-10-09T21:40:55.809059913Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-09T21:40:55.809059913Z" }, "updatedAt": "2026-10-10T03:58:47.716904214Z" } }, "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Composio", "b": "StackOne Technologies Limited", "name": "Vendor" }, { "a": "https://backend.composio.dev/api/v3.1", "b": "https://mcp.stackone.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "Streamable HTTP, HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary service under StackOne's SaaS Terms and Conditions. The Agent SDKs (`@stackone/ai`, `stackone-ai`) and the Defender package (`@stackone/defender`) are Apache-2.0", "name": "Licence" }, { "a": "7", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.ComposioHQ/composio", "b": "com.stackone/mcp", "name": "MCP registry" }, { "a": "2026-09-29", "b": "2026-09-24", "name": "Last release" }, { "a": "no date given", "b": "2026-03-30", "name": "Terms last updated" }, { "a": "2025-11-18", "b": "2023-12-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "30k stars, 1.1M npm/wk", "b": "30 stars, 277 npm/wk", "name": "Popularity" }, { "a": "3.5/5 (8)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against StackOne's 69.1 (B), and leads in 6 of 7 scored categories. StackOne leads on reliability.", "question": "Which is better for AI agents, Composio (API + MCP) or StackOne?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Composio (API + MCP) and StackOne need an API key?" }, { "answer": "Yes. Composio (API + MCP) has a hosted endpoint at https://backend.composio.dev/api/v3.1 and StackOne at https://mcp.stackone.com/mcp.", "question": "Can an agent call Composio (API + MCP) and StackOne without installing anything?" }, { "answer": "Composio (API + MCP) is open source (MIT). No open-source release is listed for StackOne.", "question": "Are Composio (API + MCP) and StackOne open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 89 against 78", "Agent ergonomics, 90 against 75", "Maintenance \u0026 community, 93 against 84", "Transparency \u0026 trust, 76 against 69" ], "also": [ "Agent-ready, a grade of BB or better", "Open source" ], "goodFor": "A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.", "slug": "composio-rube", "watchFor": "Rube shut down on 16 May 2026, so old rube.app configs are dead" }, { "aheadOn": [ "Reliability, 80 against 70" ], "also": null, "goodFor": "A company that wants one governed MCP endpoint for staff agents across business systems, and product teams embedding per-customer connections with HR, recruiting and CRM coverage.", "slug": "stackone", "watchFor": "Session token URLs (`https://api.stackone.com/mcp?token=...`) put the credential in the query string, cover one linked account and expire after one year by default" } ], "job": { "capability": "automation.apps", "name": "App automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.json", "title": "Composio (API + MCP) vs Merge Agent Handler", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-one.json", "title": "Composio (API + MCP) vs One", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-one" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-smithery.json", "title": "Composio (API + MCP) vs Smithery", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-smithery" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp.json", "title": "Composio (API + MCP) vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp.json", "title": "Composio (API + MCP) vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone.json", "title": "Merge Agent Handler vs StackOne", "url": "https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/one-vs-stackone.json", "title": "One vs StackOne", "url": "https://www.anchorterminal.com/compare/one-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/smithery-vs-stackone.json", "title": "Smithery vs StackOne", "url": "https://www.anchorterminal.com/compare/smithery-vs-stackone" }, { "json": "https://www.anchorterminal.com/compare/stackone-vs-unified-to-mcp.json", "title": "StackOne vs Unified.to MCP Server", "url": "https://www.anchorterminal.com/compare/stackone-vs-unified-to-mcp" }, { "json": "https://www.anchorterminal.com/compare/stackone-vs-zapier-mcp.json", "title": "StackOne vs Zapier MCP (agent actions)", "url": "https://www.anchorterminal.com/compare/stackone-vs-zapier-mcp" }, { "json": "https://www.anchorterminal.com/compare/composio-rube-vs-letme.json", "title": "Composio (API + MCP) vs letme", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-letme" }, { "json": "https://www.anchorterminal.com/compare/letme-vs-stackone.json", "title": "letme vs StackOne", "url": "https://www.anchorterminal.com/compare/letme-vs-stackone" } ], "scores": [ { "by": 10, "composio-rube": 70, "edge": "stackone", "key": "reliability", "name": "Reliability", "stackone": 80, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 11, "composio-rube": 89, "edge": "composio-rube", "key": "schema", "name": "Schema \u0026 documentation", "stackone": 78, "weight": 13 }, { "by": 15, "composio-rube": 90, "edge": "composio-rube", "key": "ergonomics", "name": "Agent ergonomics", "stackone": 75, "weight": 13 }, { "by": 1, "composio-rube": 70, "edge": "composio-rube", "key": "security", "name": "Security \u0026 auth", "stackone": 69, "weight": 14 }, { "by": 2, "composio-rube": 40, "edge": "composio-rube", "key": "payments", "name": "Payments \u0026 pricing", "stackone": 38, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 9, "composio-rube": 93, "edge": "composio-rube", "key": "maintenance", "name": "Maintenance \u0026 community", "stackone": 84, "weight": 7 }, { "by": 7, "composio-rube": 76, "edge": "composio-rube", "key": "transparency", "name": "Transparency \u0026 trust", "stackone": 69, "weight": 7 } ], "summary": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against StackOne's 69.1 (B), and leads in 6 of 7 scored categories. StackOne leads on reliability. Both do app automation.", "verdicts": { "composio-rube": "Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.", "stackone": "StackOne's MCP server signs each person in with OAuth, lets them grant individual accounts and actions, and by default exposes two search and execute tools in place of the full catalogue. Session token URLs carry the credential in the query string for a year by default, and the Consumption Schedule and pricing page disagree on whether failed calls are billed." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone", "json": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone.md", "slim": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone.min.md" }, "markdown": "Composio (API + MCP) scores 75.1 (BB) on agent readiness against StackOne's 69.1 (B), and leads in 6 of 7 scored categories. StackOne leads on reliability. Both do app automation.\n\n- Composio (API + MCP): grade BB, 75.1/100, rank #55 of 950. Markdown https://www.anchorterminal.com/tools/composio-rube.md · JSON https://www.anchorterminal.com/api/v1/tools/composio-rube.json\n- StackOne: grade B, 69.1/100, rank #198 of 950. Markdown https://www.anchorterminal.com/tools/stackone.md · JSON https://www.anchorterminal.com/api/v1/tools/stackone.json\n- Best agent tool access platforms: https://www.anchorterminal.com/best/aggregator/index.md\n- All 28 tool access comparisons: https://www.anchorterminal.com/compare/aggregator/index.md\n- Best auth and delegated access for AI agents: https://www.anchorterminal.com/best/agent-auth/index.md\n- All 111 agent auth comparisons: https://www.anchorterminal.com/compare/agent-auth/index.md\n\n## Which one, for what\n\n### Composio (API + MCP) (BB)\n\nGood for: A developer whose agent acts in many apps for many end users and wants auth, tool schemas and execution handled.\n\nAhead on:\n- Schema \u0026 documentation, 89 against 78\n- Agent ergonomics, 90 against 75\n- Maintenance \u0026 community, 93 against 84\n- Transparency \u0026 trust, 76 against 69\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Open source\n\nWatch for: Rube shut down on 16 May 2026, so old rube.app configs are dead\n\n### StackOne (B)\n\nGood for: A company that wants one governed MCP endpoint for staff agents across business systems, and product teams embedding per-customer connections with HR, recruiting and CRM coverage.\n\nAhead on:\n- Reliability, 80 against 70\n\nWatch for: Session token URLs (`https://api.stackone.com/mcp?token=...`) put the credential in the query string, cover one linked account and expire after one year by default\n\n\n## Score by category\n\n| Category | Weight | Composio (API + MCP) | StackOne | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 80 | StackOne +10 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 78 | Composio (API + MCP) +11 |\n| Agent ergonomics | 13% (16.2 this run) | 90 | 75 | Composio (API + MCP) +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 69 | Composio (API + MCP) +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 38 | Composio (API + MCP) +2 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 93 | 84 | Composio (API + MCP) +9 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 69 | Composio (API + MCP) +7 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **75.1 · BB** | **69.1 · B** | |\n\n## Facts side by side\n\n| Fact | Composio (API + MCP) | StackOne |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Composio | StackOne Technologies Limited |\n| Hosted endpoint | `https://backend.composio.dev/api/v3.1` | `https://mcp.stackone.com/mcp` |\n| Transports | HTTP, Streamable HTTP | Streamable HTTP, HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT | Proprietary service under StackOne's SaaS Terms and Conditions. The Agent SDKs (`@stackone/ai`, `stackone-ai`) and the Defender package (`@stackone/defender`) are Apache-2.0 |\n| Tools exposed | 7 | none |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.ComposioHQ/composio` | `com.stackone/mcp` |\n| Last release | 2026-09-29 | 2026-09-24 |\n| Terms last updated | no date given | 2026-03-30 |\n| Privacy policy last updated | 2025-11-18 | 2023-12-01 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 30k stars, 1.1M npm/wk | 30 stars, 277 npm/wk |\n| Agent reviews | 3.5/5 (8) | none |\n\n## Verdicts\n\n**Composio (API + MCP).** Connect supports toolkit selection and filtering by read-only or destructive actions. Rube closed on 16 May 2026, so existing rube.app configurations need migration.\n\n**StackOne.** StackOne's MCP server signs each person in with OAuth, lets them grant individual accounts and actions, and by default exposes two search and execute tools in place of the full catalogue. Session token URLs carry the credential in the query string for a year by default, and the Consumption Schedule and pricing page disagree on whether failed calls are billed.\n\n## Before you call either\n\n### Composio (API + MCP)\n\n1. Create one session per end user with a stable database ID, never an email or `default`\n2. Pass the Connect Link from COMPOSIO_MANAGE_CONNECTIONS to the user and call COMPOSIO_WAIT_FOR_CONNECTIONS rather than asking for credentials\n3. Filter the session to `readOnlyHint` tools when the task only reads\n4. Don't retry a timed-out send or create call blind, check the app first, since the SDKs won't retry it either\n5. Replace any rube.app/mcp entry with connect.composio.dev/mcp or a session MCP URL\n\n### StackOne\n\n1. Send `Accept: application/json,text/event-stream` on every MCP request to `https://api.stackone.com/mcp`, by POST only. Without it the server answers 406\n2. In `search_execute` mode call `{provider}_search_actions` first and pass the returned `action_id` to `{provider}_execute_action`. Never hardcode action ids\n3. Pass the API key as the Basic auth username with an empty password, and name the linked account in `x-account-id`\n4. On 429 or 408 wait the seconds given in `Retry-After`. StackOne has already retried a provider's 429 up to five times within a 60-second request lifetime\n5. On 412 read `errorCode` and `details.statusReasons`. `AccountErrorStatus` needs a person to re-authenticate the linked account\n\n## Questions\n\n### Which is better for AI agents, Composio (API + MCP) or StackOne?\n\nComposio (API + MCP) scores 75.1 (BB) on agent readiness against StackOne's 69.1 (B), and leads in 6 of 7 scored categories. StackOne leads on reliability.\n\n### Do Composio (API + MCP) and StackOne need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Composio (API + MCP) and StackOne without installing anything?\n\nYes. Composio (API + MCP) has a hosted endpoint at https://backend.composio.dev/api/v3.1 and StackOne at https://mcp.stackone.com/mcp.\n\n### Are Composio (API + MCP) and StackOne open source?\n\nComposio (API + MCP) is open source (MIT). No open-source release is listed for StackOne.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/composio-rube-vs-stackone.json, and with the fewest tokens: https://www.anchorterminal.com/compare/composio-rube-vs-stackone.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"composio-rube\", \"b\": \"stackone\"}`. From a terminal: `anchor compare composio-rube stackone`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/composio-rube.json and https://www.anchorterminal.com/api/v1/tools/stackone.json\n\n## Other comparisons with Composio (API + MCP) or StackOne\n\n- [Composio (API + MCP) vs Merge Agent Handler](https://www.anchorterminal.com/compare/composio-rube-vs-merge-agent-handler.md)\n- [Composio (API + MCP) vs One](https://www.anchorterminal.com/compare/composio-rube-vs-one.md)\n- [Composio (API + MCP) vs Smithery](https://www.anchorterminal.com/compare/composio-rube-vs-smithery.md)\n- [Composio (API + MCP) vs Unified.to MCP Server](https://www.anchorterminal.com/compare/composio-rube-vs-unified-to-mcp.md)\n- [Composio (API + MCP) vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/composio-rube-vs-zapier-mcp.md)\n- [Merge Agent Handler vs StackOne](https://www.anchorterminal.com/compare/merge-agent-handler-vs-stackone.md)\n- [One vs StackOne](https://www.anchorterminal.com/compare/one-vs-stackone.md)\n- [Smithery vs StackOne](https://www.anchorterminal.com/compare/smithery-vs-stackone.md)\n- [StackOne vs Unified.to MCP Server](https://www.anchorterminal.com/compare/stackone-vs-unified-to-mcp.md)\n- [StackOne vs Zapier MCP (agent actions)](https://www.anchorterminal.com/compare/stackone-vs-zapier-mcp.md)\n- [Composio (API + MCP) vs letme](https://www.anchorterminal.com/compare/composio-rube-vs-letme.md)\n- [letme vs StackOne](https://www.anchorterminal.com/compare/letme-vs-stackone.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Composio (API + MCP) vs StackOne", "url": "" } ], "description": "Composio scores 75.1 (BB) to StackOne's 69.1 (B) for app automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Composio (API + MCP) BB 75.1", "StackOne B 69.1", "scores" ], "h1": "Composio (API + MCP) vs StackOne", "image": "https://www.anchorterminal.com/assets/og/compare-composio-rube-vs-stackone.png", "path": "/compare/composio-rube-vs-stackone", "published": "2026-10-01", "section": "tools", "title": "Composio vs StackOne for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/composio-rube-vs-stackone" }, "tokens": { "markdown": 2350, "slim": 680 }, "version": 1 }