# Composio 0.13.0

- Product: Composio (https://whatsnew.fyi/product/composio)
- Vendor: Composio
- Date: 2026-06-26
- Version: 0.13.0
- Original notes: https://github.com/ComposioHQ/composio/releases/tag/%40composio/core%400.13.0
- Permalink: https://whatsnew.fyi/product/composio/releases/0.13.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add first-class `composio.sessions.create()` API while keeping `composio.create()` as an alias
- **added** — Expose shared-connection ACL patch helper as `connectedAccounts.updateAcl()` while keeping `experimental.updateAcl()` as an alias
- **added** — Include SDK docs and source in the published package
- **changed** — Make MCP opt-in; sessions return native tools by default and the hosted MCP endpoint is only surfaced when creating with `{ mcp: true }`
- **changed** — Sessions now return `SessionWithoutMcp` type by default instead of including MCP in the type
- **changed** — Surface the resolved workbench config on Tool Router sessions via `Session.workbench` populated from the API response
- **changed** — Prefer `sandbox` for session code-execution configuration while continuing to accept the existing `workbench` alias
- **added** — Add `triggers.parse()` to parse and optionally verify incoming webhook requests
- **added** — Add `triggers.setWebhookSubscription()` to create or update the project webhook subscription from the TypeScript SDK

###### Minor Changes

- d17a268: Add the first-class `composio.sessions.create()` API while keeping `composio.create()` as an alias, expose the experimental shared-connection ACL patch helper as `connectedAccounts.updateAcl()` while keeping `experimental.updateAcl()` as an alias, and include SDK docs/source in the published package.

  **MCP is now opt-in.** Sessions return native tools by default; the hosted MCP endpoint is only surfaced on the type when you create the session with `{ mcp: true }`. The default `create()` / `use()` now return `SessionWithoutMcp` (the runtime object is unchanged — `session.mcp` still exists at runtime — but it is no longer in the type).

  Migration: read `session.mcp` only after creating with `{ mcp: true }`.

- d17a268: Surface the resolved workbench config on Tool Router sessions.

  - `Session.workbench` is now populated from the API response (on create/retrieve/attach/update). It exposes the resolved workbench config, e.g. `session.workbench?.enable` (defaults to `true` server-side).

  This lets callers create a session with the remote workbench disabled (`workbench: { enable: false }`) and detect that state — the foundation for running code in a sandbox you own via the experimental `@composio/experimental/workbench` helpers.

###### Patch Changes

- d17a268: Prefer `sandbox` for session code-execution configuration while continuing to accept the existing `workbench` alias.
- d17a268: Add `triggers.parse()` to parse and optionally verify incoming webhook requests.
- d17a268: Add `triggers.setWebhookSubscription()` to create or update the project webhook subscription from the TypeScript SDK.