Animoca Minds Auth Staging

Initiate OAuth for a toolkit. Creates a connection link. Give the user redirectUrl to open in a browser, then poll GET /v1/composio/connected-accounts/{connectedAccountId} until status is ACTIVE.

Revoke and delete a connected account. Token revoke upstream, then delete — for ALL of the user's ACTIVE accounts of the same toolkit (disconnect-all). Ownership enforced (404). If the target's upstream delete fails, that status is returned and no sibling is deleted.

Execute a tool action. Executes against the caller's Composio user. If connectedAccountId is omitted, Composio auto-resolves a connection for the user; if supplied, this server first verifies it belongs to the caller (404 otherwise). Tool slug must match ^[a-zA-Z0-9_-]+$; disabled tools are 403.

Poll connection status. Ownership enforced (fail-closed) — an account whose user_id is not the caller's, or is missing, returns 404 (anti-enumeration). Dedupe on promotion — when the polled account is ACTIVE, best-effort keeps only the user's newest ACTIVE account of the same toolkit (by created_at, possibly deleting the polled one); the poll response is unaffected.

API version. Returns package name and the deployed API version (matches info.version of the spec).

One tool with its input schema. Same projection as a GET /v1/composio/tools item. The toolkit must be on the allow-list and the tool must not be disabled (403 otherwise). User IDs are stripped from descriptions for flagged toolkits.

Exact toolkit lookup by slug. Mirrors Composio's native detail endpoint. Bare object (not wrapped in items). Allow-list enforced.

List the caller's connected accounts. Scoped server-side to the caller's Composio user; allow-list filtered. Native params pass through (e.g. toolkit_slugs=github,slack). Defaults to statuses=ACTIVE. Follows all remaining upstream pages, including when a cursor is supplied; limit controls page size, not total result count.

List toolkits. Allow-list filtered (server config). Every upstream page is read before filtering. Plan listings (no search or other native filter) are served from a per-instance in-memory cache refreshed hourly; if a refresh fails the previous copy is served. A query search and any other native filter go to Composio uncached. limit / cursor page the filtered list on this server; without limit the whole list is returned.

List or search tools. With toolkit: every tool of that toolkit (one upstream page when limit is set). Without a toolkit, a search term (query) is REQUIRED and is searched in every allow-listed toolkit the caller has an ACTIVE connected account for. Without limit every upstream page is returned (per toolkit); with limit, one upstream page of that size per toolkit (cursor passes through); include_deprecated defaults to false. Disabled tools (config) are filtered; user IDs are stripped from descriptions for flagged toolkits.