How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Composio Tool Router API

(Labs) Tool router endpoints

Composio Tool Router API is one of 17 APIs that Composio publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Tool Router. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 16 operations across 15 paths, and defines 4 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 2 base URLs: https://backend.composio.dev, https://backend.composio.dev/api/v3.

16 operations 15 paths 4 schemas 4 GET1 PATCH11 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://backend.composio.dev/api/v3
Authentication
API Key, API Key, API Key, API Key, API Key
Resource Areas
1

Authentication & Security 5

Composio Tool Router API declares 5 security schemes for authenticating requests. An API key is passed in the header as x-api-key (ApiKeyAuth). An API key is passed in the header as x-user-api-key (UserApiKeyAuth). An API key is passed in the cookie as authToken (CookieAuth). An API key is passed in the header as x-org-api-key (OrgApiKeyAuth). An API key is passed in the header as x-api-key (apiKeyAuth).

  • ApiKeyAuth — Project API key authentication
  • UserApiKeyAuth — User API key authentication
  • CookieAuth — Cookie-based session authentication
  • OrgApiKeyAuth — Organization API key authentication
  • apiKeyAuth — API key for authenticating requests to the Composio platform. Obtain from the Composio dashboard at app.composio.dev.

Paths & Operations 16

Across 15 paths, the API surfaces 16 operations — 4 GET, 1 PATCH, 11 POST. Each is listed below with its method, path, parameters, and response codes.

Tool Router 16

(Labs) Tool router endpoints

POST
/api/v3/labs/tool_router/session
Create a new tool router session (Legacy)
postLabsToolRouterSession body → 201400401409500
POST
/api/v3/tool_router/session
Create a new tool router session
postToolRouterSession body → 201400401403408500
POST
/api/v3/tool_router/session/{session_id}/execute
Execute a tool within a tool router session
postToolRouterSessionBySessionIdExecute 1 param body → 200400401403404413429500
POST
/api/v3/tool_router/session/{session_id}/execute_meta
Execute a meta tool within a tool router session
postToolRouterSessionBySessionIdExecuteMeta 1 param body → 200400401403404413429500
GET
/api/v3/tool_router/session/{session_id}
Get a tool router session by ID
getToolRouterSessionBySessionId 1 param → 200400401404500
PATCH
/api/v3/tool_router/session/{session_id}
Patch a tool router session config
patchToolRouterSessionBySessionId 1 param body → 200400401404408409500
POST
/api/v3/tool_router/session/{session_id}/link
Create a link session for a toolkit in a tool router session
postToolRouterSessionBySessionIdLink 1 param body → 201400401403404500
POST
/api/v3/tool_router/session/{session_id}/proxy_execute
Execute proxy request within a tool router session
postToolRouterSessionBySessionIdProxyExecute 1 param body → 200400401403404413429500
GET
/api/v3/tool_router/session/{session_id}/toolkits
Get toolkits for a tool router session
getToolRouterSessionBySessionIdToolkits 6 params → 200400401403404500
GET
/api/v3/tool_router/session/{session_id}/tools
List tools with schemas for a tool router session
getToolRouterSessionBySessionIdTools 1 param body → 200400401403404413429500
POST
/api/v3/tool_router/session/{session_id}/search
Search for tools using a query
postToolRouterSessionBySessionIdSearch 1 param body → 200400401403404413429500
GET
/api/v3/tool_router/session/{session_id}/mounts/{mount_id}/items
List files in a session mount
getToolRouterSessionBySessionIdMountsByMountIdItems 5 params → 200400401404500
POST
/api/v3/tool_router/session/{session_id}/mounts/{mount_id}/download_url
Create a presigned download URL for a mount file
postToolRouterSessionBySessionIdMountsByMountIdDownloadUrl 2 params body → 201400401404500
POST
/api/v3/tool_router/session/{session_id}/mounts/{mount_id}/upload_url
Create a presigned upload URL for a mount file
postToolRouterSessionBySessionIdMountsByMountIdUploadUrl 2 params body → 201400401404500
POST
/api/v3/tool_router/session/{session_id}/mounts/{mount_id}/delete
Delete a file from a session mount
postToolRouterSessionBySessionIdMountsByMountIdDelete 2 params body → 200400401404500
POST
/toolRouter/session
Composio Create a tool router session
createSession body → 200401

Schemas 4

The contract defines 4 schemas that model the data the API accepts and returns. The most detailed are Tool (15 properties), ToolRouterToolkitsListResponse (5 properties), SessionResponse (2 properties), Error (1 property). Each schema is shown below with its type and property counts.

Tool
object
15 properties 14 required
Error
object
1 property 1 required
ToolRouterToolkitsListResponse
object
5 properties 4 required
SessionResponse
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

composio-tool-router-api-openapi.yml Raw ↑

Other APIs Composio publishes across the network.

Composio Auth Configs API
Composio Authentication API
Composio CLI API
Composio CLI Authentication API
Composio Connected Accounts API
Composio Files API
Composio Logs API
Composio MCP API
Composio Migration API
Composio Organization Management API
Composio Projects API
Composio Toolkits API
Where this information came from

This is an independent, third-party profile of Composio Tool Router API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.