White-labeling (direct execution)

There are four places where Composio branding shows up during authentication:

Customizing the Connect Link

The Connect Link is the hosted page your users see when connecting their accounts. By default it shows Composio branding.

To replace it with your own branding:

1. Go to Project Settings → Auth Screen
2. Upload your Logo and set your App Title

This applies to all Connect Link flows across all toolkits. Each project has one logo and app title, so if you need different branding per product, use separate projects.

Using your own OAuth apps

OAuth toolkits like Google and GitHub show a consent screen that says which app is requesting access. By default this reads "Composio wants to connect to your account." To show your app name instead, register your own OAuth app and tell Composio to use it. This is done by creating a custom auth config with your own credentials. See when to use your own OAuth apps.

Register a new OAuth app with the toolkit. Set the callback URL to:

https://backend.composio.dev/api/v3/toolkits/auth/callback

You'll get a Client ID and Client Secret.

Step-by-step guides: Google | Slack | HubSpot | All toolkits </Step>

In the Composio dashboard:

1. Go to Authentication management → Create Auth Config
2. Select the toolkit (e.g., GitHub)
3. Choose OAuth2 scheme
4. Toggle on Use your own developer credentials
5. Enter your Client ID and Client Secret
6. Click Create

Copy the auth config ID (e.g., ac_1234abcd).

Pass your custom auth config ID when initiating a connection:

<Tabs groupId="language" items={['Python', 'TypeScript']} persist> <Tab value="Python">

from composio import Composio

composio = Composio(api_key="your_api_key")

# White-labeled: users see your brand on the consent screen
github_conn = composio.connected_accounts.initiate(
    user_id="user_123",
    auth_config_id="ac_your_github_config",
)
print(f"Redirect to: {github_conn.redirect_url}")

For toolkits you haven't white-labeled, use the auth config ID from Authentication management in your dashboard. </Step> </Steps>

When to use your own OAuth apps

• Production apps where end users see consent screens. They should see your brand, not Composio's.
• Enterprise customers who require your branding end-to-end.
• Toolkits where you need custom scopes beyond what Composio's default app provides.

For development and testing, Composio's managed auth works fine. No OAuth app setup required.

Switching from Composio-managed to your own OAuth app

Existing connected accounts are permanently tied to the auth config they were created with. Switching to a custom auth config does not affect them.

• Existing connections keep working. Tokens continue refreshing using the original auth config's credentials.
• New connections use your custom auth config. Users who connect after the switch will see your app name on the consent screen.
• To fully migrate a user, delete their old connected account and have them re-authenticate through your OAuth app.

Sending users directly to the OAuth provider

By default, when you initiate a connection, Composio returns a shortened redirect URL (backend.composio.dev/api/v3/s/...). The user's browser hits this URL first, then gets redirected to the OAuth provider. This means backend.composio.dev briefly appears in the browser.

To skip this and send users directly to the OAuth provider, pass long_redirect_url: true when initiating the connection:

<Tabs groupId="language" items={['Python', 'TypeScript']} persist> <Tab value="Python">

from composio import Composio

composio = Composio(api_key="your_api_key")

github_conn = composio.connected_accounts.initiate(
    user_id="user_123",
    auth_config_id="ac_your_github_config",
    config={
        "auth_scheme": "OAUTH2",
        "val": {"status": "INITIALIZING", "long_redirect_url": True},
    },
)
print(f"Redirect to: {github_conn.redirect_url}")

The redirect URL returned will point directly to the OAuth provider (e.g., accounts.google.com/o/oauth2/auth?...) instead of going through Composio first.

Routing the callback through your domain

After the user authorizes, the OAuth provider redirects back through backend.composio.dev so Composio can capture the auth token. Some toolkits also display this URL on the consent screen.

If you need to hide Composio's domain from this return redirect, you can proxy it through your own domain.

In your OAuth app's settings, set the authorized redirect URI to your own endpoint:

https://yourdomain.com/api/composio-redirect

This endpoint receives the OAuth callback and immediately 302-redirects it to Composio:

<Tabs groupId="language" items={['Python', 'TypeScript']} persist> <Tab value="Python">

from fastapi import FastAPI, Request
from fastapi.responses import RedirectResponse

app = FastAPI()

@app.get("/api/composio-redirect")
def composio_redirect(request: Request):
    composio_url = "https://backend.composio.dev/api/v3/toolkits/auth/callback"
    return RedirectResponse(url=f"{composio_url}?{request.url.query}")

export default function handler(req: NextApiRequest, res: NextApiResponse) { const composioUrl = "https://backend.composio.dev/api/v3/toolkits/auth/callback"; const params = new URLSearchParams(req.query as Record<string, string>); res.redirect(302, ${composioUrl}?${params.toString()}); }

</Tab>
</Tabs>

<Callout type="warn">
Your endpoint must return a **302 redirect**. Do not follow the redirect server-side or make a fetch call to Composio. The user's browser needs to be redirected so the OAuth flow completes correctly.
</Callout>
</Step>

<Step>
<StepTitle>Update your auth config</StepTitle>

In the Composio dashboard, update your auth config to use your custom redirect URI.

<Figure src="/images/custom-redirect-uri.png" alt="Auth Config Settings" caption="Setting the custom redirect URI in your auth config" size="sm" />
</Step>
</Steps>

Here's how the redirect flow works. Your proxy just forwards the browser redirect to Composio. It never touches the authorization code or token.

```mermaid
flowchart TD
    A[Your App] -->|User connects| B["OAuth toolkit (e.g. Google, GitHub)"]
    B -->|Redirects user| C[yourdomain.com]
    C -->|Forwards redirect| D[backend.composio.dev]
    D -.->|Redirects back| A

What to read next