100 app toolkit research map for Composio

An agent-assisted pass across requested apps to find auth patterns, API access gates, MCP/toolkit readiness, blockers, and the best near-term build queue.

78apps buildable today (78%)
18partial or gated (18%)
4not yet buildable (4%)
68have OAuth somewhere in the auth model
100apps assigned a verification or triage label

What matters

  • OAuth dominates distribution, but tokens dominate first-party use. CRM, support, productivity, ads, and commerce often need OAuth for multi-tenant installs; infra, data, email, and scraping tools commonly start with API keys.
  • The easiest wins are already agent-shaped. Developer platforms, productivity tools, support desks, and ecommerce platforms have broad public APIs, clear docs, and MCP/community integration precedent, treated as a discovery signal rather than production proof.
  • The hardest blockers are not technical endpoints. Ads, fintech, Amazon SP-API, and enterprise commerce are mostly blocked by review, compliance, tenant admin approval, or paid data licenses.
  • Outreach-first apps are mostly missing a product-specific developer surface. Pumble, fanbasis, Paygent Connect, NotebookLM, and Consensus should go to outreach or partner-discovery before engineering starts.
79 apps had a practical self-serve or trial path for a developer to start research without a partnership.

Self-serve did not always mean production-ready. Google Ads, Plaid, Amazon SP-API, Meta/LinkedIn Ads, and finance platforms still need review before broad customer use.

Build queue

Ship nowGitHub, Slack, Notion, Airtable, Linear, Shopify, Stripe, HubSpot, Zendesk, Intercom

Broad public APIs, familiar OAuth/token patterns, clear docs, and strong agent-tool precedent.

Ship with caveatsGoogle Ads, Meta Ads, Amazon SP-API, Plaid, QuickBooks, Salesforce Commerce Cloud

Technically buildable, but production use needs review, admin approval, business verification, or compliance controls.

Outreach firstfanbasis, Paygent Connect, Consensus, NotebookLM, Pumble

Public developer surface is missing, narrow, unclear, or not the actual product API requested.

Design carefullySnowflake, Cloudflare, Datadog, Binance, Ramp

Powerful write actions or sensitive data make permissions, guardrails, and default read-only modes important.

Category buildability matrix

CRM and Sales

9/10 buildable, 1/10 partial, 0/10 not yet

Support and Helpdesk

8/10 buildable, 2/10 partial, 0/10 not yet

Communications and Messaging

9/10 buildable, 0/10 partial, 1/10 not yet

Marketing, Ads, Email and Social

9/10 buildable, 1/10 partial, 0/10 not yet

Ecommerce

7/10 buildable, 2/10 partial, 1/10 not yet

Data, SEO and Scraping

7/10 buildable, 3/10 partial, 0/10 not yet

Developer, Infra and Data platforms

10/10 buildable, 0/10 partial, 0/10 not yet

Productivity and Project Management

10/10 buildable, 0/10 partial, 0/10 not yet

Finance and Fintech

5/10 buildable, 5/10 partial, 0/10 not yet

AI, Research and Media-native

4/10 buildable, 4/10 partial, 2/10 not yet

Agent workflow

1

Seed

Started from the 100-app list, official domains, and developer-doc hints.

2

Fetch

evidence_agent.py visits every evidence URL, strips page chrome, and extracts text from official docs pages.

3

Extract

Deterministic rules detect OAuth, API keys, tokens, Basic auth, REST, GraphQL, webhooks, MCP, review, and gated-access signals.

4

Verify

The agent compares extracted signals with the TSV, routes low-signal rows to human review, and a 12-app sample is checked manually.

5

Package

research_agent.py emits this HTML, agent_trace.json, and the verification report for reruns.

Verification funnel

100apps researched and assigned a confidence label
99evidence URLs returned an HTTP status
84agent-supported by second-pass fetched-page signals
12apps manually sampled across easy, gated, ambiguous, and no-public-API cases
12/12final manual sample matched checked evidence after corrections

The fetcher only marks rows agent-supported when the evidence page text contains enough matching auth/API or blocker signals. The remaining rows are still covered: 7 are curated-docs reviewed and 8 are explicit follow-up/outreach cases.

Agent-routed review queue

This is the full set of rows the evidence agent routed out of full auto-confirmation. That is useful operationally: they become manual checks, outreach targets, paid-plan checks, or admin-validation tasks.

AppAgent statusReasonEvidence snippet / link
LiveAgent needs_human_review missing_auth_signal Evidence URL: https://support.liveagent.com/docs/api/v3/ | Auth finding: API key | API surface finding: Broad REST API | Buildability blocker: Older docs and account-specific endpointsOpen evidence
Gladly needs_human_review missing_auth_signal Main Home - Gladly Developer Gladly Developer Developer Gladly.com Toggle Menu Home Developer API REST API Chat Web SDK Chat iOS SDK Chat Android SDK Help Center Tutorials Help and Support A platform with people at the heart of it Looking to extend Gladly, useOpen evidence
Lark (Larksuite) needs_human_review missing_auth_signal, missing_surface_signal, missing_access_signal Evidence URL: https://open.larksuite.com/document/ | Auth finding: OAuth2; app access tokens | API surface finding: Broad Open Platform APIs | Buildability blocker: Region/product naming and tenant approvalOpen evidence
Pumble blocked_or_missing HTTP 404 en today off. We’ll look into it. Go to Home Communication and collaboration software for businesses Book a demo Log in Sign up Product Overview Apps Integrations What's new Roadmap API Plans Free Pro Business Enterprise See pricing Features Channels Messages Open evidence
Threads (Meta) needs_human_review missing_auth_signal, missing_access_signal in the App Dashboard. ### [Reference](https://developers.facebook.com/documentation/threads/reference) The Threads API endpoints and their parameters. ### Guides Learn how to make posts, retrieve media, and troubleshoot issues. * [Single Thread Posts](https://Open evidence
Salesforce Commerce Cloud needs_human_review missing_auth_signal Commerce Cloud | Salesforce Developer Center Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More Read More ReOpen evidence
Squarespace needs_human_review missing_auth_signal ding What can you build on Squarespace? Integration, customization, or extension. Our docs can get you started, and the rest is up to you. 01 App creation Use our APIs to connect your business to Squarespace and reach more customers. 02 Advanced commerce managOpen evidence
Gumroad needs_human_review missing_auth_signal Evidence URL: https://gumroad.com/api | Auth finding: OAuth2 | API surface finding: REST API moderate | Buildability blocker: API surface smaller and product-specificOpen evidence
Clay needs_human_review missing_auth_signal ted Inbound ​ How to Use HG Insights in Clay ​ TAM Sourcing ​ Clay in ChatGPT ​ Clay Ads ​ Audiences ​ Functions ​ Clay MCP for Reps ​ Clay MCP for Ops Course index ​ Log in Sign up ​ Overview ​ Courses ​ Docs ​ Use case templates ​ Certifications ​ Cohorts ​ Open evidence
Neo4j needs_human_review missing_auth_signal trieve query statistics Profile queries Coordinate transactions and enforce causal consistency Error handling Reference Endpoints Headers Result formats Is this page helpful? HTTP API Introduction Raise an issue Introduction Not available on Aura Deprecated inOpen evidence
Binance needs_human_review missing_auth_signal Evidence URL: https://developers.binance.com/en/docs/products/spot/rest-api | Auth finding: API key/secret; HMAC | API surface finding: Broad REST and WebSocket APIs | Buildability blocker: Trading safety, regional restrictions, KYCOpen evidence
iPayX needs_human_review missing_auth_signal, missing_surface_signal, missing_access_signal iPayX Protocol — FINTRAC-registered FX forensic audit layerOpen evidence
PitchBook blocked_or_missing HTTP 403 Evidence URL: https://pitchbook.com/data | Auth finding: API token/license | API surface finding: Data/API products | Buildability blocker: Commercial data license and sales access | Fetch note: HTTP 403Open evidence
Otter AI blocked_or_missing HTTP 403 Evidence URL: https://help.otter.ai/ | Auth finding: MCP/OAuth depending connector | API surface finding: API not broadly public; MCP server noted | Buildability blocker: Public API surface limited; MCP may be connector path | Fetch note: HTTP 403Open evidence
Fathom needs_human_review missing_auth_signal omer success For marketing For sales For teams Integrations Asana ChatGPT Claude Hubspot Salesforce Zapier Public API & MCP See All Integrations → Resources What's New Resource Hub Partner with Fathom Developer Hub Help Center Pricing Sign Up sign up free BookOpen evidence
Consensus blocked_or_missing HTTP 403 Evidence URL: https://consensus.app/ | Auth finding: OAuth requested per assignment; public API unclear | API surface finding: Public API not clearly documented | Buildability blocker: OAuth/API access requested but not public | Fetch note: HTTP 403Open evidence

Verification sample

Initial pass accuracy on this sample was 9/12. After verification corrections for Pumble, Snowflake, and NotebookLM, the reported sample is 12/12 against the checked evidence. This is the key human loop: ambiguous APIs are downgraded, not guessed.

Salesforce

Pass

Docs expose multiple APIs and OAuth patterns; dev org path is self-serve.

HubSpot

Pass

Auth docs state OAuth for public apps and private app access tokens for single-account use.

Google Ads

Pass

Developer token is required; test access is self-serve while production levels are reviewed.

Amazon Selling Partner

Pass

Sandbox path exists, but production public apps require developer registration, roles, and review.

Pumble

Corrected

First pass treated webhooks as an API. Verification downgraded it to not-yet buildable.

fanbasis

Pass

No stable public developer docs were found; kept as outreach/not-yet instead of guessing.

GitHub

Pass

REST and GraphQL APIs plus GitHub App/PAT/OAuth auth are well documented.

Snowflake

Corrected

Added SQL API auth nuance: key-pair JWT, OAuth, username/password, and PAT patterns.

Notion

Pass

Internal tokens and OAuth are documented; page sharing remains the main agent blocker.

Stripe

Pass

API keys and Connect OAuth are documented; live activation/compliance is the limiter.

NotebookLM

Corrected

First pass overfit Gemini docs. Verification changed verdict to no standalone public API.

Devin

Pass

Docs expose API/MCP integration path, with account/action-safety as the limiter.

Clean table

#AppWhat it doesAuthAccessAPI surface / MCPVerdict / blockerConfidenceProof
1 SalesforceCRM and Sales Enterprise CRM with sales, service, and platform objects. OAuth2; JWT bearer; username-password legacy Self-serve dev org, production needs org/admin setup Broad REST, Bulk, Streaming, Metadata, GraphQL APIsMCP/community signal, not independently verified BuildableAdmin scopes and object model complexity Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
2 HubSpotCRM and Sales CRM and marketing platform for contacts, companies, deals, and engagement data. OAuth2; private app bearer token Self-serve free developer account and private apps Broad REST APIs across CRM, marketing, files, conversationsMCP/community signal, not independently verified BuildableMarketplace OAuth review for public distribution Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
3 PipedriveCRM and Sales Sales CRM for deals, activities, people, and pipelines. OAuth2; API token Self-serve trial and developer app flow Broad REST APINone found BuildableOAuth app review and per-account permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
4 AttioCRM and Sales Modern CRM/workspace for flexible records and relationship data. OAuth2; API key Self-serve developer docs and workspace tokens Broad REST API with objects, records, lists, notesNone found BuildableSchema mapping needed per workspace Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
5 TwentyCRM and Sales Open-source CRM with configurable companies, people, and opportunities. API key; bearer token Self-serve open source and cloud REST and GraphQL surfacesMCP wrapper potential, not independently verified BuildableOpen-source deployments vary by version Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
6 PodioCRM and Sales Citrix work management/CRM-style app platform. OAuth2; app auth; password grant legacy Self-serve account, app tokens available Broad REST APINone found BuildableLegacy OAuth patterns and app-specific permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
7 Zoho CRMCRM and Sales CRM for leads, contacts, deals, campaigns, and workflows. OAuth2 Self-serve developer console, org scopes/admin needed Broad REST APIMCP/community signal, not independently verified BuildableRegional domains and scope granularity Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
8 CloseCRM and Sales Sales CRM focused on calls, email, leads, and opportunities. API key; OAuth2 Self-serve API keys in account Broad REST APINone found BuildableCommercial account required beyond trial Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
9 CopperCRM and Sales Google Workspace-native CRM for contacts, leads, and opportunities. API key; OAuth2 Gated by account/admin for API keys REST APINone found BuildableAPI access depends on paid plan/admin Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
10 DealCloudCRM and Sales Deal management CRM for financial services. OAuth2; bearer token Gated/customer access REST API documentedPublic MCP not found Partially buildableCustomer credentials and tenant access Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
11 ZendeskSupport and Helpdesk Support platform for tickets, users, help center, chat, and messaging. OAuth2; API token; basic plus token Self-serve trial, admin setup Broad REST APIsMCP/community signal, not independently verified BuildableTenant subdomains and admin scopes Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
12 IntercomSupport and Helpdesk Customer messaging and support platform. OAuth2; access token Self-serve developer workspace Broad REST APIMCP/community signal, not independently verified BuildableApp review for public apps Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
13 FreshdeskSupport and Helpdesk Helpdesk ticketing, contacts, companies, and knowledge base. API key; OAuth2 Self-serve trial and API key Broad REST APINone found BuildablePlan limits and product-specific APIs Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
14 FrontSupport and Helpdesk Shared inbox and customer operations platform. OAuth2; API token Self-serve developer portal Broad REST APINone found BuildableWorkspace permissions and rate limits Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
15 PylonSupport and Helpdesk B2B support platform for Slack/Teams/email customer channels. API key; OAuth indications Gated/customer workspace likely REST API docsPublic MCP not found Partially buildableAccess appears customer/workspace gated Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
16 LiveAgentSupport and Helpdesk Helpdesk/live chat software for tickets, chats, calls, and customers. API key Self-serve trial Broad REST APINone found BuildableOlder docs and account-specific endpoints Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
17 PlainSupport and Helpdesk API-first customer support platform. API key; OAuth for customer portal patterns Self-serve developer docs, workspace needed GraphQL APINone found BuildableGraphQL schema and support workflow design Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
18 Help ScoutSupport and Helpdesk Helpdesk mailbox, docs, customers, and conversations. OAuth2 Self-serve app registration Broad REST APIsMCP/community signal, not independently verified BuildableOAuth scopes and mailbox permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
19 GorgiasSupport and Helpdesk Ecommerce helpdesk for tickets, customers, and orders. Basic auth; API key/token Self-serve for customers, plan dependent REST APINone found BuildablePlan/admin access and ecommerce context Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
20 GladlySupport and Helpdesk Customer service platform for conversations and people profiles. OAuth2; API token Gated/customer access REST APIPublic MCP not found Partially buildableEnterprise sales/admin access Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
21 SlackCommunications and Messaging Team messaging platform with channels, users, files, and workflow APIs. OAuth2; bot/user tokens Self-serve app creation, workspace install Broad Web API, Events, Socket ModeOfficial or community MCP signal BuildableWorkspace admin approval for installs/scopes Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
22 TwilioCommunications and Messaging Communications APIs for SMS, voice, WhatsApp, email, and verification. API key/secret; account SID auth; OAuth beta areas Self-serve trial Broad REST APIsMCP/community signal, not independently verified BuildablePhone number compliance and paid usage Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
23 Zoho CliqCommunications and Messaging Team chat and collaboration platform. OAuth2; bot/webhook tokens Self-serve Zoho developer console REST APIs, bots, webhooksNone found BuildableZoho regional OAuth and org permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
24 Lark (Larksuite)Communications and Messaging Collaboration suite with messaging, docs, calendar, and approval APIs. OAuth2; app access tokens Self-serve app console, org approval for installs Broad Open Platform APIsMCP/community signal, not independently verified BuildableRegion/product naming and tenant approval Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
25 PumbleCommunications and Messaging Team chat app from CAKE.com. Webhooks; limited public API unclear Gated/limited Incoming webhooks, public API not clearly broadPublic MCP not found Not yetNo broad documented public API found Human-reviewedIncluded in the manual verification sample and checked against source docs/product pages. Evidence
26 DiscordCommunications and Messaging Community chat, voice, and bot platform. OAuth2; bot token Self-serve developer portal Broad REST/Gateway APIsMCP/community signal, not independently verified BuildableGateway/event handling and bot permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
27 TelegramCommunications and Messaging Messaging platform with bot and client APIs. Bot token; MTProto auth Self-serve BotFather Broad Bot API and MTProtoMCP/community signal, not independently verified BuildableBot API limits versus full user-client API Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
28 WhatsApp BusinessCommunications and Messaging Meta WhatsApp messaging for business conversations. OAuth2; system user tokens Self-serve Cloud API, business verification for scale Graph API endpoints for messaging and templatesMCP/community signal, not independently verified BuildableBusiness verification, templates, phone compliance Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
29 AircallCommunications and Messaging Cloud phone system for calls, numbers, users, and analytics. OAuth2; API ID/token Self-serve docs, customer account needed REST API and webhooksNone found BuildableCommercial phone account and call compliance Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
30 VonageCommunications and Messaging Communications APIs for SMS, voice, verify, video, and number insights. API key/secret; JWT; OAuth in some products Self-serve developer account Broad REST APIsMCP/community signal, not independently verified BuildableProduct-specific auth differences Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
31 Google AdsMarketing, Ads, Email and Social Google advertising platform for campaign management and reporting. OAuth2 plus developer token Self-serve test token; production access reviewed Broad Google Ads APIMCP/community signal, not independently verified BuildableDeveloper token access level and policy review Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
32 Meta AdsMarketing, Ads, Email and Social Meta marketing APIs for ads, audiences, campaigns, and insights. OAuth2; system user tokens Self-serve app, advanced access reviewed Broad Graph/Marketing APIMCP/community signal, not independently verified BuildableApp review and business verification for advanced scopes Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
33 LinkedIn AdsMarketing, Ads, Email and Social LinkedIn marketing APIs for ad accounts, campaigns, creatives, and analytics. OAuth2 Partner/developer access gated Broad REST APIsPublic MCP not found Partially buildableMarketing API access review/partner gating Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
34 GoHighLevelMarketing, Ads, Email and Social Agency CRM/marketing automation platform. OAuth2; API key/private integration tokens Self-serve for accounts, marketplace approval for distribution Broad REST APIMCP/community signal, not independently verified BuildableAgency/location model and marketplace review Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
35 MailchimpMarketing, Ads, Email and Social Email marketing and audience automation platform. OAuth2; API key Self-serve account and developer apps Broad REST Marketing APIMCP/community signal, not independently verified BuildableAccount plan limits and data-center specific base URLs Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
36 KlaviyoMarketing, Ads, Email and Social Marketing automation for ecommerce email/SMS and profiles/events. API key; OAuth2 Self-serve developer account and private keys Broad REST APIsMCP/community signal, not independently verified BuildableAPI revision headers and scope planning Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
37 systeme.ioMarketing, Ads, Email and Social Funnel, email marketing, course, and automation builder. API key Self-serve for account holders REST API appears moderateNone found BuildablePublic docs less mature than major vendors Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
38 PinterestMarketing, Ads, Email and Social Pinterest content and ads platform. OAuth2 Self-serve developer app, access reviewed for some scopes REST APIMCP/community signal, not independently verified BuildableApp review for protected endpoints Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
39 Threads (Meta)Marketing, Ads, Email and Social Meta social publishing and insights API for Threads. OAuth2 Self-serve app, Meta review for advanced use Graph-based Threads APIMCP/community signal, not independently verified BuildableApp review and feature maturity Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
40 SendGridMarketing, Ads, Email and Social Transactional and marketing email API. API key Self-serve trial/account Broad REST APIsMCP/community signal, not independently verified BuildableEmail sender verification and compliance Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
41 ShopifyEcommerce Commerce platform for stores, products, orders, customers, and admin workflows. OAuth2; access tokens Self-serve partner/dev store Broad REST and GraphQL Admin APIsOfficial or community MCP signal BuildableApp review for public apps and protected data Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
42 WooCommerceEcommerce WordPress ecommerce plugin for stores and orders. Consumer key/secret; Basic/OAuth1 Self-serve if site owner/admin REST APIMCP/community signal, not independently verified BuildableSite-specific auth and plugin/version variance Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
43 BigCommerceEcommerce SaaS ecommerce platform for catalogs, carts, orders, and storefronts. OAuth2; access tokens Self-serve sandbox/trial Broad REST and GraphQL APIsMCP/community signal, not independently verified BuildableApp marketplace review for distribution Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
44 Salesforce Commerce CloudEcommerce Enterprise commerce platform for storefront/order/customer APIs. OAuth2; SLAS/client credentials Gated/customer access Broad Commerce APIsPublic MCP not found Partially buildableEnterprise tenant and Salesforce access setup Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
45 Magento (Adobe Commerce)Ecommerce Adobe ecommerce platform for catalogs, carts, orders, and customers. OAuth1/integration tokens; bearer tokens Self-serve open source, Adobe Commerce paid REST and GraphQL APIsMCP/community signal, not independently verified BuildableDeployment-specific modules and admin setup Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
46 SquarespaceEcommerce Website/ecommerce platform for orders, products, inventory, and profiles. OAuth2; API key Self-serve developer platform, commerce plan needs account REST APIsMCP/community signal, not independently verified BuildableEndpoint coverage narrower than Shopify Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
47 EcwidEcommerce Lightweight ecommerce store platform. OAuth2; secret token Self-serve developer app Broad REST APINone found BuildableStore-specific app install flow Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
48 GumroadEcommerce Creator commerce platform for products, sales, and subscribers. OAuth2 Self-serve app registration REST API moderateMCP/community signal, not independently verified BuildableAPI surface smaller and product-specific Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
49 Amazon Selling PartnerEcommerce Seller/vendor commerce APIs for listings, orders, reports, and fulfillment. Login with Amazon OAuth; AWS SigV4 Sandbox self-serve; production gated/reviewed Broad SP-APIMCP/community signal, not independently verified Partially buildableSeller/vendor role approval and security review Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
50 fanbasisEcommerce Creator monetization/fan engagement platform with payment and AI commerce tooling. Public auth docs not found Gated/unknown; docs not public Marketing page mentions APIs/SDKs and MCP beta; public developer docs not foundPublic MCP not found Not yetNo stable public developer docs or credential path found despite API/MCP marketing signals Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
51 DataForSEOData, SEO and Scraping SEO and SERP data APIs for rankings, keywords, backlinks, and ads. Basic auth Self-serve paid/trial API account Broad REST APIsMCP/community signal, not independently verified BuildableUsage is paid and quota-driven Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
52 SE RankingData, SEO and Scraping SEO platform for rankings, keywords, audits, and backlinks. API key Self-serve paid plan/trial REST API moderateNone found BuildableAPI availability depends on plan Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
53 AhrefsData, SEO and Scraping SEO data platform for backlinks, keywords, and site explorer. API token Gated/paid enterprise-ish API REST API broad for SEO dataPublic MCP not found Partially buildablePaid API subscription and limits Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
54 MrScraperData, SEO and Scraping Web scraping API/service. API key Self-serve account REST API moderateNone found BuildableAnti-abuse and extraction reliability Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
55 ApifyData, SEO and Scraping Cloud platform for actors, scraping, and browser automation. API token Self-serve free tier Broad REST API and SDKsOfficial or community MCP signal BuildableActor-specific input/output schemas Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
56 FirecrawlData, SEO and Scraping Web crawling/scraping API for LLM-ready extraction. API key Self-serve free/paid API Broad REST APIOfficial or community MCP signal BuildableExtraction quality varies by site Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
57 Bright DataData, SEO and Scraping Proxy, scraping, and web data platform. API key; bearer token Self-serve account, some products compliance reviewed Broad REST APIsMCP/community signal, not independently verified BuildableKYC/compliance for proxy and scraping use Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
58 SherlockData, SEO and Scraping Open-source OSINT tool for checking usernames across sites. No hosted auth; CLI GitHub self-serve CLI/library, not SaaS APIMCP wrapper potential, not independently verified BuildableToolkit wraps CLI rather than remote app API Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
59 Waterfall.ioData, SEO and Scraping Contact/company intelligence and enrichment platform. API key likely Gated/contact sales API docs not broadly publicPublic MCP not found Partially buildableAccess/docs appear sales-gated Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
60 ClayData, SEO and Scraping Data enrichment and outbound workflow platform. API key; webhooks Self-serve product, API details account-gated HTTP API/webhooks narrowerMCP/community signal, not independently verified Partially buildableAPI docs and keys tied to account/plan Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
61 GitHubDeveloper, Infra and Data platforms Developer platform for repos, issues, pull requests, actions, and users. OAuth2; GitHub App tokens; PATs Self-serve developer apps Broad REST and GraphQL APIsOfficial or community MCP signal BuildableInstallation permissions and org approval Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
62 VercelDeveloper, Infra and Data platforms Frontend cloud platform for deployments, projects, domains, and teams. OAuth2; bearer tokens Self-serve account/team Broad REST APIOfficial or community MCP signal BuildableTeam scopes and deployment side effects Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
63 NetlifyDeveloper, Infra and Data platforms Web hosting platform for sites, deploys, forms, and functions. OAuth2; personal access token Self-serve account Broad REST APIMCP/community signal, not independently verified BuildableSite/team permission modeling Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
64 CloudflareDeveloper, Infra and Data platforms Internet infrastructure for DNS, CDN, Workers, security, and storage. API token; API key Self-serve account Broad REST APIsOfficial or community MCP signal BuildableDangerous write scopes need careful guardrails Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
65 SupabaseDeveloper, Infra and Data platforms Postgres backend platform with auth, storage, edge functions, and database APIs. API keys; JWT; Postgres auth Self-serve free tier Broad platform APIs and direct PostgresOfficial or community MCP signal BuildableProject-level secrets and database safety Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
66 Neo4jDeveloper, Infra and Data platforms Graph database platform and Aura cloud service. Basic auth; bearer tokens; API keys for Aura Self-serve Aura trial and local REST admin APIs plus Bolt/GraphQL optionsMCP/community signal, not independently verified BuildableDatabase query safety and schema discovery Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
67 SnowflakeDeveloper, Infra and Data platforms Cloud data warehouse and data platform. Key-pair JWT; OAuth; username/password; PATs Self-serve trial, enterprise admin for prod SQL API, REST APIs, driversMCP/community signal, not independently verified BuildableAccount/admin network policies and warehouse cost Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
68 MongoDB AtlasDeveloper, Infra and Data platforms Managed MongoDB platform for clusters, projects, users, and data APIs. API keys; OAuth/service accounts Self-serve free tier Broad Admin API and Data APIOfficial or community MCP signal BuildableProject-level permissions and data safety Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
69 DatadogDeveloper, Infra and Data platforms Observability platform for metrics, logs, traces, monitors, and incidents. API key plus application key Self-serve trial/account Broad REST APIsOfficial or community MCP signal BuildableWrite actions can affect alerts/incidents Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
70 SentryDeveloper, Infra and Data platforms Error monitoring and performance platform. Auth token; OAuth2 Self-serve account Broad REST APIOfficial or community MCP signal BuildableOrg/project scopes and issue mutation safety Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
71 NotionProductivity and Project Management Workspace docs, databases, pages, users, and comments. OAuth2; internal integration token Self-serve integrations Broad REST APIOfficial or community MCP signal BuildablePer-page sharing required for internal integrations Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
72 AirtableProductivity and Project Management Database/spreadsheet collaboration platform. OAuth2; personal access tokens Self-serve developer hub Broad Web APIOfficial or community MCP signal BuildableBase-level permissions and schema variance Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
73 LinearProductivity and Project Management Issue tracking and product planning tool. OAuth2; API key Self-serve developer settings Broad GraphQL APIOfficial or community MCP signal BuildableGraphQL schema and workspace permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
74 JiraProductivity and Project Management Atlassian issue/project management platform. OAuth2; API token; Forge app auth Self-serve dev, org/admin approval often needed Broad REST APIsOfficial or community MCP signal BuildableCloud/server differences and admin app approval Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
75 AsanaProductivity and Project Management Work management for tasks, projects, teams, goals, and portfolios. OAuth2; personal access token Self-serve developer app Broad REST APIOfficial or community MCP signal BuildableWorkspace permissions and app approval Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
76 Monday.comProductivity and Project Management Work OS for boards, items, automations, and workflows. OAuth2; API token Self-serve developer/apps Broad GraphQL APIOfficial or community MCP signal BuildableGraphQL complexity/rate budgets Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
77 ClickUpProductivity and Project Management Project management and docs platform. OAuth2; personal token Self-serve developer app Broad REST APIMCP/community signal, not independently verified BuildableWorkspace/team hierarchy complexity Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
78 CodaProductivity and Project Management Docs platform with tables, packs, and automation. API token; OAuth for Packs Self-serve account Broad REST APIMCP/community signal, not independently verified BuildableDocument/table schema discovery Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
79 SmartsheetProductivity and Project Management Work management and spreadsheet-like project platform. OAuth2; access token Self-serve developer account Broad REST APIMCP/community signal, not independently verified BuildableEnterprise admin controls and rate limits Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
80 HarvestProductivity and Project Management Time tracking and invoicing platform. OAuth2; personal access token Self-serve developer app Broad REST APINone found BuildableAccount ID header and workspace permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
81 StripeFinance and Fintech Payments and financial infrastructure for charges, customers, invoices, and accounts. API key; OAuth for Connect Self-serve test mode, live activation needed Broad REST APIOfficial or community MCP signal BuildablePayment compliance and live account activation Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
82 PlaidFinance and Fintech Financial data connectivity for bank accounts, transactions, identity, and payments. API keys; link tokens Self-serve sandbox, production access reviewed Broad REST APIMCP/community signal, not independently verified BuildableProduction review and regulated data handling Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
83 BinanceFinance and Fintech Crypto exchange APIs for market data, trading, wallets, and accounts. API key/secret; HMAC Self-serve account/API keys Broad REST and WebSocket APIsMCP/community signal, not independently verified BuildableTrading safety, regional restrictions, KYC Curated-docs reviewedOfficial docs were identified and curated; second-pass extraction did not confirm every field automatically. Evidence
84 Paygent ConnectFinance and Fintech NMI-powered merchant payment gateway/connectivity path for payment processing. API key/token likely via merchant gateway credentials Gated/merchant-provider access NMI payment APIs/SDKs public docs; Paygent-specific docs unclearPublic MCP not found Partially buildablePaygent-specific public docs timed out; NMI merchant/API access is provider-gated Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
85 iPayXFinance and Fintech AI/payments product with developer docs. API key likely Gated/unclear Docs site exists, surface unclearPublic MCP not found Partially buildableNeed account/docs validation Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
86 QuickBooksFinance and Fintech Intuit accounting platform for companies, invoices, customers, and reports. OAuth2 Self-serve sandbox/dev app, production review possible Broad REST APIMCP/community signal, not independently verified BuildableAccounting data permissions and app review Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
87 XeroFinance and Fintech Accounting platform for invoices, contacts, bank transactions, and reports. OAuth2 Self-serve developer app Broad REST APIMCP/community signal, not independently verified BuildableTenant connections and accounting permissions Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
88 BrexFinance and Fintech Corporate card, spend management, and banking platform. OAuth2; API token Gated/customer/admin access REST APIsPublic MCP not found Partially buildableCustomer/admin access and finance controls Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
89 RampFinance and Fintech Corporate card and spend management platform. OAuth2 Gated/customer/admin access Broad REST APIPublic MCP not found Partially buildablePartner/customer access and spend controls Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
90 PitchBookFinance and Fintech Private markets data and research platform. API token/license Gated/contract only Data/API productsPublic MCP not found Partially buildableCommercial data license and sales access Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
91 NotebookLMAI, Research and Media-native Google AI note/research product; enterprise capability points to Gemini/Workspace APIs. Google OAuth/service account for related APIs Gated/no standalone public NotebookLM API No standalone public NotebookLM developer API foundPublic MCP not found Not yetNo direct public API; use Gemini/Drive alternatives Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
92 Otter AIAI, Research and Media-native Meeting transcription and notes product. MCP/OAuth depending connector Gated for API; MCP docs available API not broadly public; MCP server notedExisting MCP noted Partially buildablePublic API surface limited; MCP may be connector path Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
93 FathomAI, Research and Media-native AI meeting recorder and summary tool. OAuth/API access unclear Gated/unclear Public API and MCP are mentioned; detailed API docs/access unclearPublic MCP not found Partially buildablePublic API/MCP signal exists, but developer access and auth details are unclear Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
94 ConsensusAI, Research and Media-native AI academic search/research product. OAuth requested per assignment; public API unclear Gated/unclear Public API not clearly documentedPublic MCP not found Not yetOAuth/API access requested but not public Needs follow-upAgent could not fully verify this from public docs; treat as outreach, admin, paid-plan, or partner-gated. Evidence
95 ReductoAI, Research and Media-native Document parsing API for complex PDFs and unstructured files. API key Self-serve/contact depending tier REST APIMCP/community signal, not independently verified BuildablePaid usage and document privacy Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
96 DevinAI, Research and Media-native AI software engineer product with API/MCP integrations. API key/token; MCP Self-serve/customer account likely API and MCP docsOfficial MCP BuildableAccount availability and action safety Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
97 higgsfieldAI, Research and Media-native AI video/content suite with CLI hint. CLI auth unclear Gated/unclear CLI/product surface, API docs unclearPublic MCP not found Partially buildableNo broad public API verified Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
98 Mermaid CLIAI, Research and Media-native Command-line renderer for Mermaid diagrams. No remote auth; local CLI Open source self-serve CLI, npm packageMCP wrapper potential, not independently verified BuildableWrap CLI, not app API Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
99 YouTube TranscriptAI, Research and Media-native Transcript extraction API/service. API key Self-serve paid/free API REST API narrowMCP wrapper potential, not independently verified BuildableNarrow surface and YouTube policy dependence Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence
100 GrainAI, Research and Media-native Meeting recording, notes, clips, and conversation intelligence. OAuth/API token unclear Gated/customer access API docs not broadly obviousPublic MCP not found Partially buildablePublic developer access unclear Agent-supportedFetched evidence contained enough auth/API/access signals for the row or blocker. Evidence

Runnable proof

Source repo: github.com/Eshaj20/composio-app-research. Reproduce the agent run with:

python scripts/evidence_agent.py
python scripts/research_agent.py
npm run build

Machine-readable output

Generated from data/apps.tsv by the evidence agent and report generator. The runs write data/evidence_checks.json, data/verification_report.json, and agent_trace.json.

{
  "auth": {
    "OAuth present": 68,
    "Key/token": 26,
    "Unclear/other": 3,
    "Basic": 1,
    "No remote auth": 2
  },
  "access": {
    "Self-serve": 79,
    "Gated": 21
  },
  "verdict": {
    "Buildable": 78,
    "Partially buildable": 18,
    "Not yet": 4
  },
  "category_verdicts": {
    "CRM and Sales": {
      "Buildable": 9,
      "Partially buildable": 1
    },
    "Support and Helpdesk": {
      "Buildable": 8,
      "Partially buildable": 2
    },
    "Communications and Messaging": {
      "Buildable": 9,
      "Not yet": 1
    },
    "Marketing, Ads, Email and Social": {
      "Buildable": 9,
      "Partially buildable": 1
    },
    "Ecommerce": {
      "Buildable": 7,
      "Partially buildable": 2,
      "Not yet": 1
    },
    "Data, SEO and Scraping": {
      "Buildable": 7,
      "Partially buildable": 3
    },
    "Developer, Infra and Data platforms": {
      "Buildable": 10
    },
    "Productivity and Project Management": {
      "Buildable": 10
    },
    "Finance and Fintech": {
      "Buildable": 5,
      "Partially buildable": 5
    },
    "AI, Research and Media-native": {
      "Not yet": 2,
      "Partially buildable": 4,
      "Buildable": 4
    }
  },
  "category_access": {
    "CRM and Sales": {
      "Self-serve": 8,
      "Gated": 2
    },
    "Support and Helpdesk": {
      "Self-serve": 8,
      "Gated": 2
    },
    "Communications and Messaging": {
      "Self-serve": 9,
      "Gated": 1
    },
    "Marketing, Ads, Email and Social": {
      "Self-serve": 9,
      "Gated": 1
    },
    "Ecommerce": {
      "Self-serve": 8,
      "Gated": 2
    },
    "Data, SEO and Scraping": {
      "Self-serve": 8,
      "Gated": 2
    },
    "Developer, Infra and Data platforms": {
      "Self-serve": 10
    },
    "Productivity and Project Management": {
      "Self-serve": 10
    },
    "Finance and Fintech": {
      "Self-serve": 5,
      "Gated": 5
    },
    "AI, Research and Media-native": {
      "Gated": 6,
      "Self-serve": 4
    }
  },
  "top_blockers": [
    [
      "Admin scopes and object model complexity",
      1
    ],
    [
      "Marketplace OAuth review for public distribution",
      1
    ],
    [
      "OAuth app review and per-account permissions",
      1
    ],
    [
      "Schema mapping needed per workspace",
      1
    ],
    [
      "Open-source deployments vary by version",
      1
    ],
    [
      "Legacy OAuth patterns and app-specific permissions",
      1
    ],
    [
      "Regional domains and scope granularity",
      1
    ],
    [
      "Commercial account required beyond trial",
      1
    ],
    [
      "API access depends on paid plan/admin",
      1
    ],
    [
      "Customer credentials and tenant access",
      1
    ],
    [
      "Tenant subdomains and admin scopes",
      1
    ],
    [
      "App review for public apps",
      1
    ]
  ]
}