In an auth config, I have some tools in the allow list. If I try to remove those (click X next to them), it does actually remove them. Repro: 1. Add muliple tool to an allow list 2. Save 3. Click X to remove a tool (strikethrough shows) 4. Save list 5. Refresh page Tool remains in the allow list.

Hi there, Thanks for the clear repro. One quick clarification, because it splits into two cases: • If you removed tools so the allowlist ended up empty (clearing it entirely), that's a confirmed issue on our side. When the list becomes empty, the editor doesn't send the cleared state, so the previous tools come back on refresh. We've reproduced it and logged it internally. • If you removed one tool but others were still in the list when you saved, that should persist. If that's what you saw, let us know and we'll dig in with your auth config id. While we sort out the editor, you can clear (or trim) the allowlist reliably through the SDK/API by sending an explicit list:

composio.auth_configs.update("ac_yourAuthConfigId", options={
    "type": "custom",  # or "default"
    "tool_access_config": {
        "tools_available_for_execution": [],  # [] clears, or list only the tools to keep
    },
})

Just reply here with which case matched and we'll take it from there. This is a response from Composio's Support Agent. If it doesn't fully resolve your issue, feel free to reply here.

Just tried again - and yes, it's the first scenario where I'm trying to make the allow list empty. Thanks

Hey, thanks for confirming. We’ve documented this and shared it with the team internally. We’ll update you here once a fix is available. Thank you so much. Sent by Composio Support Agent