Twenty
Build your Enterprise CRM at AI Speed
Twenty markets itself as the "#1 Open Source CRM": an open-source (57.4K GitHub stars), self-hostable or cloud-hosted CRM that gives technical teams building blocks to customize their data model, layout, and automations without vendor lock-in, with schema-generated REST and GraphQL APIs and a native MCP server for AI assistants.
Core capabilities
Vendor's own claim- Custom data modeling: unlimited custom objects, fields, and relations on all plans
- No-code workflows, views, and automations built from Settings
- Apps framework (npx create-twenty-app): ship custom objects, server-side logic functions, React components, AI skills and agents, views, and navigation in TypeScript
- Native MCP server on every Cloud workspace and on self-hosted instances, for Claude, ChatGPT, Cursor, and other MCP clients
- REST and GraphQL Core API generated per workspace, a Metadata API for managing the data model, webhooks on record create, update, and delete, and OAuth 2.0
- Email and calendar sync (Google or Microsoft, plus SMTP and CalDAV)
- Table, Kanban, and Calendar views, dashboards, and real-time updates with AI chat
- Self-hosting (free core, or a paid Organization license) or managed cloud deployment
API & agent surface
From official docs- Authentication
- Bearer token (Authorization: Bearer <API_KEY>) for the REST and GraphQL Core and Metadata APIs, with keys scopable to a role; OAuth 2.0 (authorization code with PKCE, or client credentials, with dynamic client registration) for external apps; the MCP server supports OAuth (recommended) or API-key bearer auth
- Base URL
- https://api.twenty.com/ (cloud) or https://{your-domain}/ (self-hosted)
- Rate limits
- API docs: 100 requests per minute, batch operations capped at 60 records per call. Pricing page (Cloud): 50 API calls per minute on Pro, 100 on Organization, custom on Enterprise
- Notable endpoints
- Core API (/rest/, /graphql/): CRUD on People, Companies, Opportunities, and custom objects, with filtering and relation traversal; batch create, update, or delete up to 60 records per request, plus GraphQL batch upsert
- Metadata API (/rest/metadata/, /metadata/): create, modify, and delete objects, fields, and relations programmatically
- Webhooks: HTTP POST to your URL when any record, including custom objects, is created, updated, or deleted
- OAuth: dynamic client registration (POST /oauth/register, RFC 7591)
- MCP server (/mcp): learn_tools (get the input schema for tools) and execute_tool (run a tool), mirroring the Twenty API rather than exposing a fixed named-tool list
- Machine-readable spec
- No OpenAPI link
Pricing
From official docs| Plan | Price | Included | Notable |
|---|---|---|---|
| Pro (Cloud) | $9/user/mo billed yearly, or $12/user/mo billed monthly | 50 workflow credits/year (yearly billing) or 5 workflow credits/month (monthly billing); 50 API calls per minute Unlimited | Full customization, Create custom apps, AI Agents with custom skills |
| Organization (Cloud) | $19/user/mo billed yearly, or $25/user/mo billed monthly | 100 API calls per minute Unlimited | Everything in Pro, Row-level permissions, SAML/OIDC SSO |
| Enterprise | From $50k/year | Custom API call limit Unlimited | Everything in Organization, Single-tenant isolation (Cloud), IP allow-listing (Cloud) |
| Free (Self-Hosted) | $0/user/mo | Up to 5 workspaces | Full customization, Create custom apps, Source code access |
| Organization (Self-Hosted) | $19/user/mo billed yearly, or $25/user/mo billed monthly | — | Everything in Pro, Row-level permissions, SAML/OIDC SSO |
Checked 2026-09-24 against their pricing page. Vendors change pricing without notice.
What is Twenty
Vendor's own claimThe repository is mostly licensed under AGPLv3, with certain files under a commercial license and MIT covering the app development toolkit (twenty-sdk, twenty-client-sdk, create-twenty-app, twenty-shared), the twenty-ui component library and the applications under packages/twenty-apps. Every workspace gets its own schema-derived REST and GraphQL API (adding a custom object immediately creates matching endpoints), plus a Metadata API for managing objects, fields, and relations programmatically.
Ideal customer profile
Vendor's own claimTechnical teams and engineering-led organizations that want a CRM they can fully customize and extend in code, want to self-host for data control, or want to avoid per-feature paywalls common on Salesforce and HubSpot; the vendor also targets larger orgs needing SSO, row-level permissions, single-tenant isolation, or air-gapped self-hosting at the Organization and Enterprise tiers.
Who should look elsewhere
Our readTwenty says custom objects, fields, views, and no-code workflows need no developer, but its differentiators (the Apps framework for custom apps and server-side logic, API-first extensibility, and self-hosting) assume someone who can write code or run infrastructure. SSO (SAML/OIDC), row-level permissions, audit logs, and encryption key rotation require the Organization plan ($19/user/mo billed yearly, $25 monthly), and single-tenant isolation, IP allow-listing, SCIM, and a security review and DPA require Enterprise (from $50k/year), so security-conscious teams on a budget will hit a wall quickly. Cloud Pro is also capped at 50 API calls per minute. Self-hosting the free core avoids per-seat cost but shifts hosting, upgrades, and backups onto the team's own infrastructure, and the free self-hosted tier gets community support only.
Twenty alternatives
Our readSystems of record for customer relationships that treat the data model as programmable, competing on API quality and flexibility rather than on breadth of built-in modules.
Category: Modern and developer-facing CRM. Membership is decided by 3 stated tests, not by category tags — see them and the full comparison.
Appears in comparison shortlists
Twenty FAQ
Is Twenty really open source?
Yes. Its LICENSE says the project is mostly AGPLv3, with certain files under a commercial license and MIT covering the app development toolkit (twenty-sdk, twenty-client-sdk, create-twenty-app, twenty-shared), the twenty-ui component library and the applications under packages/twenty-apps. You can self-host it or run it on Twenty's managed cloud.
Does Twenty publish a real OpenAPI/Swagger spec?
Not a static one. Twenty's API docs say there is no static API reference because each workspace has its own schema; workspace-specific API documentation with an interactive playground is available under Settings after creating an API key.
How much does Twenty cost?
Cloud Pro is $9/user/mo billed yearly ($12 monthly) and Organization is $19/user/mo billed yearly ($25 monthly); yearly billing saves 25%. Enterprise starts from $50k/year. Self-hosting is free on the Pro feature set (up to 5 workspaces, community support), and a self-hosted Organization license costs the same as Cloud Organization.
Does Twenty have an MCP server?
Yes. It supports OAuth (recommended) or API-key auth, is listed on every plan, and exposes tools through learn_tools and execute_tool rather than a fixed named list.
What are Twenty's API rate limits?
The API docs state 100 requests per minute with batch operations capped at 60 records per call. The pricing page lists Cloud API calls at 50 per minute on Pro, 100 per minute on Organization, and custom on Enterprise.
Can I build custom objects and apps on Twenty?
Yes. Custom objects and fields are unlimited on all plans and can be built from Settings without code; adding a custom object immediately generates matching REST and GraphQL endpoints. Developers can scaffold apps with npx create-twenty-app to ship custom objects, server-side logic functions, React components, AI skills and agents in TypeScript.
What does self-hosting require?
Twenty documents a Docker Compose install (a one-line script is available) and asks for at least 2GB of RAM. The free self-hosted tier includes the Pro feature set with community support on Discord; SSO, row-level permissions, Twenty team support, and a commercial license without AGPL obligations need the paid Organization (Self-Hosted) license.
Does Twenty have an official YouTube channel?
We could not find a YouTube link on Twenty's own site (header and footer link LinkedIn, X, GitHub, and Discord), so we did not record one rather than guess.
Verify before you buy
- Named MCP tool list: Twenty's MCP server exposes tools via learn_tools/execute_tool discovery rather than a documented fixed list, so no mcpToolNames were recorded
- A machine-readable OpenAPI specification was not included in the reviewed source set.
Need help setting it up?
This page tells you whether Twenty fits. Cheetah builds and runs the system it goes into — enrichment, sequencing, CRM and the joins between them.
Book a call →The directory stays free. There is nothing gated behind this.