# Config Composio

> Use when user asks to configure Composio API key, enable or disable Composio toolkits (Gmail, GitHub, Slack, etc.), manage app integrations, or authenticate with external services.

- **Type:** Skill
- **Install:** `agentstack add skill-vibesurf-ai-claude-surf-config-composio`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [vibesurf-ai](https://agentstack.voostack.com/s/vibesurf-ai)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [vibesurf-ai](https://github.com/vibesurf-ai)
- **Source:** https://github.com/vibesurf-ai/claude-surf/tree/main/skills/config-composio

## Install

```sh
agentstack add skill-vibesurf-ai-claude-surf-config-composio
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Config Composio - Composio Integration Management

## Overview

Manage Composio API key and toolkit configurations. Enable/disable app integrations like Gmail, GitHub, Slack, and more.

## When to Use

- User needs to set up Composio API key
- User wants to enable a toolkit (Gmail, GitHub, Slack, etc.)
- User needs to disable a toolkit
- User wants to check which toolkits are available
- User needs to manage toolkit authentication (OAuth)
- User wants to configure toolkit tools selection

## API Endpoints

Base path: `$VIBESURF_ENDPOINT/api/composio`

### API Key Management

| Action | Method | Endpoint | Description |
|--------|--------|----------|-------------|
| Check Status | GET | `/api/composio/status` | Get Composio connection status |
| Verify Key | POST | `/api/composio/verify-key` | Verify and store API key |

### Toolkit Management

| Action | Method | Endpoint | Description |
|--------|--------|----------|-------------|
| List Toolkits | GET | `/api/composio/toolkits` | Get all available toolkits |
| Toggle Toolkit | POST | `/api/composio/toolkit/{slug}/toggle` | Enable/disable toolkit |
| Get Tools | GET | `/api/composio/toolkit/{slug}/tools` | Get tools for a toolkit |
| Update Tools | POST | `/api/composio/toolkit/{slug}/tools` | Update selected tools |
| Connection Status | GET | `/api/composio/toolkit/{slug}/connection-status` | Check OAuth connection |

## Request Examples

### Verify API Key
```json
POST /api/composio/verify-key
{
  "api_key": "your-composio-api-key"
}
```

### Enable Toolkit
```json
POST /api/composio/toolkit/gmail/toggle
{
  "enabled": true,
  "force_reauth": false
}
```

### Disable Toolkit
```json
POST /api/composio/toolkit/gmail/toggle
{
  "enabled": false
}
```

### Update Tool Selection
```json
POST /api/composio/toolkit/gmail/tools
{
  "selected_tools": {
    "GMAIL_SEND_EMAIL": true,
    "GMAIL_FETCH_EMAILS": false
  }
}
```

## Common Toolkits

| Toolkit | Description |
|---------|-------------|
| `gmail` | Send and receive emails |
| `github` | Repository management, PRs, issues |
| `slack` | Send messages, manage channels |
| `google_calendar` | Event management |
| `google_sheets` | Spreadsheet operations |
| `notion` | Page and database management |
| `trello` | Card and board management |
| `asana` | Task management |
| `jira` | Issue tracking |

## OAuth Flow

When enabling a toolkit that requires OAuth:

1. **Enable toolkit** → `POST /api/composio/toolkit/{slug}/toggle` with `enabled: true`
2. **Check response** → If `requires_oauth: true`, an `oauth_url` is provided
3. **User authenticates** → Open `oauth_url` in browser to complete OAuth
4. **Verify connection** → `GET /api/composio/toolkit/{slug}/connection-status`

## Using Composio Tools

Once toolkits are enabled, their tools become available through the `integrations` skill:

```
1. List available tools → GET /api/tool/search?keyword=composio
2. Execute tool → POST /api/tool/execute
   {
     "action_name": "execute_extra_tool",
     "parameters": {
       "tool_name": "cpo.{toolkit}.{action}",
       "tool_arguments": {...}
     }
   }
```

## Tool Naming Convention

Composio tools follow the pattern: `cpo.{toolkit_slug}.{action_name}`

Examples:
- `cpo.gmail.GMAIL_SEND_EMAIL`
- `cpo.github.GITHUB_CREATE_PULL_REQUEST`
- `cpo.slack.SLACK_SEND_MESSAGE`

## Workflow

1. **Check API key status** → `GET /api/composio/status`
2. **Set up API key** (if needed) → `POST /api/composio/verify-key`
3. **List available toolkits** → `GET /api/composio/toolkits`
4. **Enable desired toolkit** → `POST /api/composio/toolkit/{slug}/toggle`
5. **Complete OAuth** (if required) → Use provided `oauth_url`
6. **Use tools** → Execute via `integrations` skill

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [vibesurf-ai](https://github.com/vibesurf-ai)
- **Source:** [vibesurf-ai/claude-surf](https://github.com/vibesurf-ai/claude-surf)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-vibesurf-ai-claude-surf-config-composio
- Seller: https://agentstack.voostack.com/s/vibesurf-ai
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.