1. Conduid
  2. Developer Tools
  3. Composer
MCP server · Developer Tools

Composer

MCP Composer

Unclaimed Apache-2.0 science
61Good

Scored yesterday · breakdown

About Composer

Composer is an MCP server published by IBM in the Developer Tools category: mCP Composer.

The repository has 21 stars and 1 forks, with the last commit 15 hours ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add composer -- npx -y @oaslananka/composer
npx
npx -y @oaslananka/composer
uvx
uvx mcp-server-composer
pip
pip install mcp-server-composer

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Composer

Powered by Claude · Grounded in docs

I know everything about Composer. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

mcp_composer-v0.2.1mcp-composer 0.2.1 · 8 Oct 2026Summary Patch release on top of 0.2.0 that includes post-tag OSS prep work: Dependency bumps (aiohttp, pandas, sentence-transformers, google-genai, coverage, twine, …) Logger SecretRedactionFilter mock-safe fix (unblocks Dependabot CI)…
mcp_composer-v0.2.0mcp-composer 0.2.0 · 8 Oct 2026mcp-composer 0.2.0 — Release Notes Tag: `mcp_composer-v0.2.0` Builds on: `v0.1.0.9` Repository: IBM/mcp-composer Overview 0.2.0 is the first open-source release published under the IBM…
v0.1.0.9 Release Notes - MCP Composer v0.1.0.9 · 7 Dec 2025🎉 New Features A2A (Agent-to-Agent) Service Integration Agent Registration & Management: Register, list, and unregister A2A-compliant agents dynamically Agent Communication: Send messages to registered agents and receive responses with…
v0.1.0.7Release Notes - MCP Composer v0.1.0.7 · 19 Nov 2025Release Date: 29/08/2025 Version: 0.1.0.7 🎉 Overview This release introduces significant enhancements to OpenAPI integration, problem-solving capabilities, and authentication mechanisms. We've added a layered OpenAPI factory pattern…
v0.1.0.8.10 Release Notes - MCP Composer v0.1.0.8.10 · 19 Nov 2025Release Date: November 2025 Version: 0.1.0.8.10 🎉 Overview This release introduces significant improvements to project initialization, catalog generation, security scanning, and research capabilities. We've simplified the Deep Research…

README

MCP Composer

MCP Composer is a FastMCP server that mounts other MCP servers and exposes their tools through one endpoint. Register servers at runtime with JSON. Supported member types are HTTP, stdio, OpenAPI, and GraphQL.

Install

Python 3.11, 3.12, or 3.13 and uv.

git clone https://github.com/ibm/mcp-composer.git
cd mcp-composer/modules/mcp_composer
uv sync --group dev

The package is mcp-composer. There is no separate application package.

Run

mcp-composer --mode http --host 127.0.0.1 --port 9000

HTTP binds to loopback unless you configure authentication. A non-loopback bind without auth is rejected. Stdio member servers run only when the resolved command is listed in MCP_COMPOSER_STDIO_ALLOWLIST.

Point the composer at a member list:

mcp-composer --mode http --host 127.0.0.1 --port 9000 \
  --config_path example/member_servers.json

A fuller sample is example/unified_config.json. Guides are in docs/guide.

Domain composers

These processes start one tool surface and still mount member servers from the usual config. They bind 127.0.0.1.

cd modules/mcp_composer
uv run composers/think_composer.py
uv run composers/catalog_composer.py

Think Composer (think-composer) exposes sequential_thinking. Catalog Composer mounts the skill, agent, and workflow catalogs. See Think Composer and Catalog Composer.

Project

License Apache 2.0
Contributing CONTRIBUTING.md
Security SECURITY.md
Code of conduct CODE_OF_CONDUCT.md
Changelog CHANGELOG.md

Report vulnerabilities privately. See SECURITY.md.

README fetched from the repository 7 hours ago. The original is authoritative.

Questions

About Composer

How do I install Composer?

Run claude mcp add composer -- npx -y @oaslananka/composer, then add the server to your MCP client's configuration.

Is Composer safe to use with an AI agent?

Its trust score is 61 out of 100 (good). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Composer still maintained?

Yes — the latest release is mcp_composer-v0.2.1 (8 Oct 2026), and the last commit was 15 hours ago. The repository has 21 stars and 16 open issues.