# Composio

Aiolum story: https://aiolum.com/story/composio/ · added 2026-11-07 · updated 2026-11-07

**In short.** Composio (Tool and authentication layer for AI agents, United States): Over US$1M annual recurring revenue, January 2026. Evidence grade C: the founder's own figures, not verified by anyone else. Team: 2 co-founders, Soham Ganatra and Karan Vaidya, started it in 2023; about 25 people in January 2026 after about US$29M of outside funding, the CEO told Forbes India. Launched 2023; still running.

Tool and authentication layer for AI agents · United States · AI-native · started small, grew after funding · still running · group: Developer tools and coding agents

- Outcome: Over US$1M annual recurring revenue, January 2026 (evidence grade of the headline number: C; headline in US dollars: 1000000)
- Launch: 2023; months from launch to the outcome: 30
- Team: 2 co-founders, Soham Ganatra and Karan Vaidya, started it in 2023; about 25 people in January 2026 after about US$29M of outside funding, the CEO told Forbes India
- Outside funding: About US$29M: a US$4M seed round, then a US$25M Series A led by Lightspeed Venture Partners, announced 22 July 2025
- Main factor: Open-source developer adoption
- Meters, 1 to 4: evidence strength 1, copyable pattern 1, capital needed 3
- Tags: AI-native, Small team, Funded, Running, B2B, Developer tools

Links:

- Visit composio.dev: https://composio.dev/

**The product.** A layer between AI agents and the apps they must use. A developer adds the Composio SDK to an agent, and the agent can call tools in more than 1,500 apps such as Gmail, Slack, GitHub and Salesforce, while Composio runs the logins, stores and refreshes each user's access tokens, and records every call. It is sold as a developer platform, an MCP gateway, a command-line tool for coding agents and an enterprise version.

**Why it worked.** Every team that builds an agent must connect it to other software, and the hard part is not the API call but the login: running the OAuth flow, storing tokens, refreshing them and scoping permissions for each user. Composio took over that chore for all apps at once, gave the SDK away as open source, and charges for usage above a large free tier.

Evidence grades: A = disclosed by a public company, a filing or a payment processor, or verified by one; B = two or more independent reports agree, or a journalist confirmed it; C = a founder claim that no one else verified; D = reported, not verified: one founder claim or a third-party estimate with no second source; E = no revenue figure found, so the headline is a non-money fact and the other facts carry their own grades; calc = computed on this page from graded facts.

## Summary

Composio sells infrastructure for AI agents, programs in which a language model decides which actions to take and then takes them. Each action is a tool call: the model asks for a named function, for example "send this email", and a program runs it. To act in Gmail or Salesforce on behalf of a person, an agent needs that person's permission through OAuth, the standard login flow that gives an app a revocable access token instead of a password. Composio runs these logins and token refreshes for more than 1,500 apps, and also offers them through MCP (Model Context Protocol), a common format in which AI assistants such as Claude, ChatGPT or Cursor discover and call tools.

Soham Ganatra (CEO) and Karan Vaidya (CTO), who met at a Physics Olympiad camp and later shared a room at IIT Bombay, started the company in 2023, Forbes India and their investor Lightspeed wrote. They first tried to automate coding with language models, then saw that connecting agents to applications was the bigger problem. In July 2025 Ganatra told The Economic Times that the company had more than 200 paying companies and over US$1 million in annual recurring revenue (ARR, the yearly value of the subscriptions and usage contracts running at that moment), when it announced a US$25 million Series A. In January 2026 he told Forbes India that ARR was "$1 million+", that more than 200,000 developers used the platform, and that the team was about 25 people.

Both revenue figures are statements by the CEO to journalists, grade C. They agree, but both are floors ("over", "plus"), not exact figures, and no payment processor has confirmed them. The company raised about US$29 million and says it is not profitable on purpose. In May 2026 an attacker reached its internal systems and customer credentials; the company published the details and a long list of fixes. This page tells the small start, the funding and the growth after it, and what happened to earlier companies that sold one connection to many other services.

## Pricing

Composio prices on 7 November 2026, from the company's pricing page (grade C)

| Plan | Per month, billed yearly (US$) | Per month, billed monthly (US$) | Limit |
|---|---|---|---|
| Hobby | 0 | 0 | 100,000 tool calls, 50,000 trigger events and 3 team members a month; US$2 of starting credit |
| Pro |  | 29 | US$29 of usage credit a month included; unlimited team members; then 0.0003 credits a tool call |
| Enterprise | custom |  | committed volume, SSO and SCIM, customer-managed keys, dedicated support |

Prices are per month for a workspace, not per seat. Hobby is free, hard-capped and needs no credit card. Pro costs US$29 a month and includes US$29 of usage credit, which expires at the end of each month; above the free allowance a tool call costs 0.0003 credits and a trigger event 0.003 credits. Add-ons such as sandbox execution and shared connections are charged per call. Enterprise has custom prices with committed volume, annual invoicing, single sign-on and support agreements. No yearly discount is shown.

## How much revenue does Composio make? The numbers, graded

A two-founder start in 2023, over US$1 million of annual recurring revenue by July 2025 and January 2026 as the CEO stated it, and about 25 people after US$29 million of funding

| Fact | Value | Grade | Note | Sources |
|---|---|---|---|---|
| Annual recurring revenue, January 2026 | more than US$1 million | C | CEO Soham Ganatra in a Forbes India interview, 23 January 2026 (from the 9 January 2026 issue): "It's $1 million+ in annualised recurring revenue, but we can't disclose more than that." | [2] |
| Annual recurring revenue, July 2025 | over US$1 million | C | Ganatra told The Economic Times, 22 July 2025, "without disclosing specific revenue details". This agrees with the January 2026 statement, so the headline is grade C; both are floors. | [1] |
| Monthly equivalent of the headline | more than about US$83,000 a month | calc | Calculated: US$1 million divided by 12. A lower bound, because the CEO gave only a floor. | [2] |
| Paying customers, July 2025 | more than 200 companies | C | The Economic Times, from the CEO. He named startups from recent Y Combinator batches (April, OpenNote, Airweave, Den, Dash) as customers. | [1] |
| Revenue per paying company, July 2025 | about US$5,000 a year | calc | Calculated: US$1 million divided by 200 companies. Both numbers are floors, so this is only an order of size. | [1] |
| Developers on the platform | more than 100,000 in July 2025; more than 200,000 in January 2026 | C | The Economic Times and Lightspeed in July 2025; Forbes India in January 2026. A doubling in six months, as the company counts developers. | [1, 5, 3] |
| Tool calls a month, January 2026 | more than 100 million | C | The CEO to Forbes India: "That's a crazy number." | [2, 3] |
| Platform totals, November 2026 | 1,500+ managed app integrations, 1B+ tool calls run, 1M+ accounts connected | C | Company's enterprise page, read 7 November 2026. | [10] |
| Founded | 2023, by Soham Ganatra and Karan Vaidya | C | Forbes India: "Founded in 2023"; the CEO: "That's when Composio made sense to start, in 2023." The Economic Times and Lightspeed call the two the co-founders. Registered as Sampark Inc., SiliconANGLE wrote; Forbes India calls it "A US-based startup". | [3, 2, 1, 5, 4] |
| Team, January 2026 | about 25 people, with four or five more planned | C | The CEO to Forbes India: "We're about 25 people. We plan to add four or five more." He said AI makes hiring needs "probably a third of what they would have been historically". | [2, 3] |
| Outside funding | about US$29 million | C | A US$4 million seed round (Elevation Capital and Together Fund) and a US$25 million Series A led by Lightspeed Venture Partners, announced 22 July 2025. The seed date is not in the downloaded sources. In January 2026 the CEO told Forbes India "About $30 million across two rounds" and put the Series A "in February", which differs from the July announcement. | [1, 4, 6, 2] |
| Profit, January 2026 | not profitable, by choice | C | The CEO to Forbes India: "No, and we're not trying to be anytime soon." | [2, 3] |
| Prices, November 2026 | Hobby free; Pro US$29 a month with US$29 of credit; Enterprise custom | C | Pricing page, read 7 November 2026. A tool call above the free 100,000 a month costs 0.0003 credits. | [8] |
| Open-source SDK | MIT license; 31.0k stars and 4.9k forks on GitHub | B | GitHub repository ComposioHQ/composio, read 7 November 2026: TypeScript and Python SDKs, a CLI, and adapters for OpenAI Agents, Claude Agent SDK, Vercel AI SDK and LangChain. Lightspeed counted over 25,000 stars in July 2025. | [12, 5] |
| Security incident, May 2026 | about 0.3% of active connections leaked, including 5,001 GitHub connections; 5,241 API keys potentially exposed | C | Company's incident page, published 21 May 2026 and updated 16 September 2026. | [7] |
| Time from founding to the January 2026 figure | about 30 months | calc | Calculated: the sources give only the year 2023, so the middle of 2023 is used; the true value lies between 25 and 36 months. | [2, 3] |

How to read this table: a grade C value is a statement by the company, its CEO or its investor, as printed by a journalist or on the company's own pages. Grade B is a count shown by GitHub. A "calc" value was computed on this page from the rows above it. No revenue value is grade A or B.

## When did Composio launch, and how did it grow? Timeline

From two roommates' coding-agent idea to a tool layer with more than 200,000 developers, in about 30 months. Each entry carries its grade.

- **Before 2023** (grade C [2, 5]): Ganatra is the first employee at Bureau, a risk and fraud data startup, for about three years, where "nearly half the team was working just on integrations". Vaidya is an engineer at Rubrik. Both lead integration work.
- **2023** (grade C [3, 5]): The two found Composio. They first aim to use language models to automate coding agents, then turn to the problem of connecting agents to applications.
- **Before July 2025** (grade C [1]): A US$4 million seed round from Elevation Capital and Together Fund.
- **22 July 2025** (grade C [1, 4, 5, 6]): US$25 million Series A led by Lightspeed, US$29 million in total. More than 100,000 developers, more than 200 paying companies and over US$1 million in ARR, the CEO told The Economic Times. Over 25,000 GitHub stars.
- **January 2026** (grade C [2, 3]): Forbes India 30 Under 30: more than 200,000 developers, more than 100 million tool calls a month, "$1 million+" in ARR, about 25 people, not profitable.
- **21 May 2026** (grade C [7]): Composio discloses that an attacker accessed internal systems and compromised customer credentials, and starts revoking connections and keys.
- **16 September 2026** (grade C [7]): Latest version of the incident page: outside reviews by IntrusionOps, AppSecure and Latacora; envelope encryption for OAuth credentials.
- **November 2026** (grade C [10, 8, 12]): 1,500+ managed apps, more than 1 billion tool calls run in total, a Pro plan at US$29 a month, and 31.0k stars on GitHub.

## Why did Composio work?

### Open source as the front door

The SDK is free under the MIT license on GitHub, with TypeScript and Python versions. A developer who needs Gmail or Slack access for an agent can install it in minutes without talking to anyone. Lightspeed described the growth as "organic, developer-led adoption" and cited the GitHub stars as the signal.

### Take over the login chore

SiliconANGLE called token management "one of the most complicated chores" in building an agent. Composio runs the OAuth flow, stores and refreshes each user's tokens and handles permissions for every app, so one integration with Composio replaces hundreds of separate ones.

### Work with every model and framework

The repository ships adapters for OpenAI Agents, Claude Agent SDK, Vercel AI SDK and LangChain, and the enterprise page lists nine model providers. When a customer changes models, Composio stays. The CEO told Forbes India that "LLMs are commoditising faster than software".

### Free until usage is large

The free plan includes 100,000 tool calls a month, and Pro starts at US$29 a month with usage credit, according to the pricing page. That explains how the company could report more than 200,000 developers and a revenue it described only as "$1 million+" at the same time.

## How it was built

These details come from the company's GitHub repository, its own pages and its incident report. The repository counts are grade B; the rest is grade C.

- One SDK monorepo on GitHub: @composio/core for TypeScript, the composio package for Python, a command-line tool, and adapters for agent frameworks.
- Managed OAuth for each toolkit, with automatic token refresh and rotation; developers can also bring their own OAuth apps or API keys.
- A sandboxed tool-execution environment that runs tool calls and code for agents; the May 2026 attacker reached it through an internal agentic monitoring tool.
- Infrastructure on AWS and code on GitHub, both reviewed by the security firm Latacora after the incident.
- SOC 2 Type II attested and ISO 27001:2022 certified, according to the enterprise page; after May 2026, envelope encryption for OAuth credentials and API keys stored only as hashes.
- The SDK is open source; the hosted service, which holds the tokens, is what customers pay for.

Sources: [12, 13, 7, 10]

## Who tried this before Composio, and why did they fail?

Four companies in our database of failed startups sold one connection to many outside services, or one backend for many developers, and failed. The values below are from that database and are not independently verified.

The failed startups come from our database of dead startups, retold here in our own words; Its entries are AI-assisted summaries of public sources, so they carry no evidence grade.

### Singly (2011 to 2016; funding US$2.7M; cause: Competition)

- Promise: One API to collect and sync a user's data from many social networks and online services.
- Why it died: It depended on third-party APIs that changed or closed, and its later owner lost interest.
- Record: 

### Xkit (2018 to 2021; funding US$2M; cause: Competition)

- Promise: Make API integrations easy so developers spend time on their app, not on connections to other apps.
- Why it died: Zapier and do-it-yourself cloud tools took the market, and keeping the integrations working cost more than it earned.
- Record: 

### WunderGraph (2020 to 2024; funding US$3M; cause: Ran Out of Cash)

- Promise: An open-source framework that joins GraphQL, REST and databases into one typed API.
- Why it died: Open-source use did not turn into enough paying customers; enterprise sales were slow while large platforms added the same gateway features.
- Record: 

### Parse.com (2011 to 2017; funding US$85M; cause: Unit Economics)

- Promise: A backend as a service, so mobile developers could ship apps without running servers or databases.
- Why it died: Facebook bought it, did not find a way to earn from developer tools, and shut it down.
- Record: 

## What changed

Singly and Xkit sold the same promise as Composio: connect once, reach many services. Both stood between their customers and APIs that they did not control, and paid for every change in those APIs. WunderGraph and Parse.com show the other two risks: open-source use that does not turn into revenue, and a large platform that adds the feature or buys and closes the company.

Two things differ. The buyer is new: an AI agent needs tools in hundreds of apps on behalf of each user, so per-user OAuth and token storage, which a human-facing app needed for a handful of services, became a large problem that every agent team meets at once. And the AI assistants agreed on a common tool format, MCP, so one gateway can serve Claude, ChatGPT, Cursor and coding agents together. The old risks remain: the revenue the CEO reported is small next to the usage, the company is not profitable, and a breach in May 2026 showed what it means to hold the keys to a million connected accounts.

## Can one person copy Composio now?

**Verdict: Not the size. The wedge, yes.**

Composio is now a funded company of about 25 people, and a solo founder cannot copy a catalog of 1,500 maintained integrations. The idea under it is open to a small team: find the chore that every builder of a new kind of software must do and nobody wants to do, give away the code, and charge for running it.

1. Pick a chore that every team building on a new platform repeats, such as logins, permissions or retries.
2. Publish the client code as open source so developers can try it alone, and run the hard part (token storage, monitoring) as a paid service.
3. Support every model and framework, so a customer who changes provider keeps you.
4. Treat security as the product from the first day, because you hold other people's credentials.

**What is still open.** Narrow tool layers for agents in one industry (health records, accounting systems, government portals), audit and permission tools for the agents that companies already run, and connectors for apps that the large catalogs cover badly.

## What could go wrong for Composio?

- **A floor, stated by the CEO.** Both revenue figures come from CEO Soham Ganatra: "over $1 million" to The Economic Times in July 2025 and "$1 million+" to Forbes India in January 2026, where he added "we can't disclose more than that". They agree, so the grade is C, but they say nothing about growth between the two dates, and no payment processor, filing or investor has given a figure. An Okara blog post of 29 October 2026 mentions a GetLatka estimate; that is a third-party estimate and was not used here.
- **The team grew after funding.** Two co-founders started Composio in 2023 (Forbes India, The Economic Times, Lightspeed). After a US$4 million seed round and a US$25 million Series A, the CEO said in January 2026 that the company had about 25 people and planned four or five more hires. The headline figure is from that period, so the team field is "grew".
- **Logos on the home page.** The home page shows a "Trusted by" row of 15 logos: AWS, Arizona State University, Athena, Browser Use, ClickFunnels, Emergent, Glean, Google, Hostinger, Island, Kimi, Nous Research, Pelago Health, Wix and Zoom (read 7 November 2026). Three of them, Glean, Browser Use and Pelago Health, have case studies on the company's customers page. The other twelve were not matched by a case study or by any other downloaded source; the customer names in The Economic Times are different Y Combinator startups.
- **The May 2026 security incident.** The company wrote that in May 2026 "an attacker accessed internal Composio systems and compromised customer credentials": about 0.3% of active connections leaked, including 5,001 GitHub connections, and 5,241 API keys were potentially exposed. It revoked connections and keys, engaged IntrusionOps for incident response, had AppSecure and Latacora review the fixes, and moved OAuth credentials to envelope encryption. The downloaded sources mention no regulator action or lawsuit; customer losses after the incident are not known.
- **Competition.** On this site, Metorial sells an open-source MCP and skills gateway for AI agents, with 3.4K GitHub stars and paid plans in November 2026; Composio is much larger by usage and funding. The CEO told Forbes India in January 2026 that the model makers are competitors "but not in an existential way": "If Anthropic moves into this area, that's fine."
- **Dependence on model providers.** Composio does not sell a model; it sells the tools that models call. The enterprise page lists OpenAI, Anthropic, Google, xAI, Meta, DeepSeek, Qwen, Perplexity and Mistral as supported providers, and the repository ships adapters for OpenAI Agents and the Claude Agent SDK. The risk is less a price change than the assistant makers building their own connectors; the pricing page also lists "Sandbox LLM tokens", model calls that Composio runs and bills for its sandbox.
- **Social-media toolkits.** The catalog includes social and sales apps. The LinkedIn toolkit page (read 7 November 2026) says it works with "managed OAuth" through LinkedIn's API, for example "Creates a new post on LinkedIn for the authenticated user or an organization they manage", and its description also mentions "Search profiles". What an agent does with such tools is the customer's choice.

## Sources

1. The Economic Times, 22 July 2025, by Pranav Mukul: Agentic AI startup Composio raises $25 million in funding round led by Lightspeed Venture Partners — https://economictimes.indiatimes.com/tech/funding/agentic-ai-startup-composio-raises-25-million-in-funding-round-led-by-lightspeed-venture-partners/articleshow/122838611.cms (grade C). Read in full. The CEO's statements to the journalist: over US$1 million ARR, 200+ paying companies, 100,000+ developers, US$29 million raised, the co-founders.
2. Forbes India, 23 January 2026 (9 January 2026 issue), by Himani Kothari: Talent may eventually decide who wins the AI race: Composio co-founder — https://www.forbesindia.com/article/30-under-30-2026/talent-may-eventually-decide-who-wins-the-ai-race-composio-co-founder/2990635/1 (grade C). Read in full. Interview with the CEO: "$1 million+" ARR, about 25 people, about US$30 million raised, not profitable, founded in 2023.
3. Forbes India, 22 January 2026, by Himani Kothari: Soham Ganatra: Making machines that learn from mistakes — https://www.forbesindia.com/article/30-under-30-2026/soham-ganatra-making-machines-that-learn-from-mistakes/2990590/1 (grade C). Read in full. 30 Under 30 profile: founded in 2023, US-based, 200,000+ developers, 100 million+ tool calls a month, about 25 employees.
4. SiliconANGLE, 22 July 2025: Composio raises $25M in funding to ease AI agent development — https://siliconangle.com/2025/07/22/composio-raises-25m-funding-ease-ai-agent-development/ (grade C). Read in full. Source for the legal name Sampark Inc., the funding total and the description of token management.
5. Lightspeed Venture Partners, 22 July 2025: Investing in Composio: Building the Backbone of AI Agent Intelligence — https://lsvp.com/stories/investing-in-composio-building-the-backbone-of-ai-agent-intelligence/ (grade C). Read in full. The lead investor's memo: the founders' background, the first coding-agent idea, 100,000+ developers and 25,000+ GitHub stars.
6. Composio blog, 22 July 2025, by Soham Ganatra: We raised $29M to build skills that evolve with your agents — https://composio.dev/blog/series-a (grade C). Read in full. The company's funding announcement.
7. Composio, published 21 May 2026, updated 16 September 2026: Composio May 2026 security incident update — https://composio.dev/blog/composio-may-2026-security-incident (grade C). Read the summary, the reviewer table, the leaked-connection figures and the original timeline.
8. Composio pricing page, read 7 November 2026 — https://composio.dev/pricing (grade C). Read the plans, the usage rates and the add-on table.
9. Composio home page, read 7 November 2026 — https://composio.dev/ (grade C). Read in full, including the names (image alt texts) of the "Trusted by" logos.
10. Composio Enterprise page, read 7 November 2026 — https://composio.dev/enterprise (grade C). Read in full. Source for the platform totals, the supported model providers and the SOC 2 and ISO 27001 statements.
11. Composio customers page and Built with Composio page, read 7 November 2026 — https://composio.dev/customers (grade C). Read the list of case studies (Glean, Browser Use, Pelago Health and others) to match the home-page logos; also read https://composio.dev/built-with for the same names.
12. GitHub: ComposioHQ/composio repository, read 7 November 2026 — https://github.com/ComposioHQ/composio (grade B). Read the repository page: description, MIT license, star and fork counts, and the README list of SDKs and framework adapters.
13. Composio LinkedIn toolkit page, read 7 November 2026 — https://composio.dev/toolkits/linkedin (grade C). Read in full. Example of a toolkit: OAuth2 connection, token refresh and the list of LinkedIn API actions.
14. Okara blog, 29 October 2026, by Fatima Rizwan: Composio Revenue and Funding: How Composio Grew to $1M+ ARR — https://okara.ai/blog/composio-revenue-growth (grade C). Read in full. A retelling by a marketing company; used only to find the original articles, which were then read. No figure on this page rests on it alone.
15. Database of failed startups, local export — /method/#dead (grade C). Local export. AI-written summaries, not independently verified. Source for the failed predecessors.

Contact: aiolum@livyden.com. Run Composio? Send corrections or a verified figure to aiolum@livyden.com (subject: Correction: Composio).