SIGN UPLOG IN
X (Twitter)LinkedInGitHubDiscordYouTube

WorkOS MCP server for AI agents and assistants

Securely connect your AI agents and chatbots (Claude, ChatGPT, Cursor, etc) with WorkOS MCP or direct API to sync directories, manage users, create connections and invitations, and query user profiles through natural language.

Get started for freeGet a demo
WorkOS logoWorkOS
Api Key

WorkOS is an enterprise identity and user management API for directory sync, connections, invitations, and users. Use it to centralize SSO, provisioning, and directory synchronization across providers.

29 Tools

Try WorkOS now

Type what you want done — sign in and watch it run live in the Tool Router playground.

TOOL ROUTER PLAYGROUND
WorkOS
Try asking
TOOLS

Supported Tools

Every WorkOS action and event your agent gets out of the box.

Create Organization

Create a WorkOS organization in the connected environment.

Create Organization Membership

Grant an AuthKit user active membership in an organization.

Create User

Create a passwordless AuthKit user record in the connected WorkOS environment.

Delete Organization

Permanently delete a WorkOS organization.

Delete Organization Membership

Permanently remove an organization membership and its access.

Delete User

Permanently delete an AuthKit user.

Get Connection

Get one WorkOS connection by ID.

Get Directory

Get one WorkOS Directory Sync directory by ID.

Get Directory Group

Get one WorkOS Directory Sync group by its exact group ID.

Get Directory User

Get one WorkOS Directory Sync user by exact ID, including identity-provider attributes, roles, and any groups returned by WorkOS.

Get Invitation

Get WorkOS AuthKit invitation status and metadata by invitation ID without exposing acceptance credentials.

Get Organization

Get one WorkOS organization by its WorkOS ID or external ID.

Get Organization Membership

Get one WorkOS AuthKit organization membership by ID.

Get User

Get one WorkOS AuthKit user by WorkOS ID or external ID.

List Connections

List one page of WorkOS SSO and OAuth connections, optionally filtered by connection type, domain, organization, or name.

List Directories

List one page of WorkOS Directory Sync directories, optionally filtered by organization, directory name, or domain.

List Directory Groups

List one page of WorkOS Directory Sync groups for a directory, a directory user, or both.

List Directory Users

List one page of WorkOS Directory Sync users for a directory or group, optionally filtering a directory by exact identity-provider ID or primary email.

List Invitations

List one page of WorkOS AuthKit invitations by organization or exact recipient email without exposing acceptance credentials.

List Organization Memberships

List one page of WorkOS AuthKit organization memberships for a specific organization or user, optionally including inactive or pending memberships.

List Organizations

List one page of WorkOS organizations, optionally filtered by domain or organization name.

List Users

List one page of WorkOS AuthKit users, optionally filtered by organization or exact email address.

Resend Invitation

Send another real invitation email to the existing recipient of a pending WorkOS AuthKit invitation.

Revoke Invitation

Revoke a pending AuthKit invitation so it can no longer be accepted.

Send Invitation

Create an AuthKit invitation and immediately send a real invitation email to the recipient.

Set Organization Membership Status

Activate or deactivate a WorkOS organization membership without deleting it.

Update Organization

Update selected properties of an existing WorkOS organization.

Update Organization Membership Roles

Replace the role assignment on an existing WorkOS organization membership.

Update User

Update selected profile fields on an AuthKit user without invoking email delivery flows.

SETUP GUIDE

Connect WorkOS MCP Tool with your Agent

1

Install Composio

typescript
npm install @composio/core ai @ai-sdk/openai @ai-sdk/mcp
Install the Composio SDK for Python or TypeScript
2

Initialize Client and Create Tool Router Session

typescript
import { Composio } from '@composio/core';

const composio = new Composio({ apiKey: 'your-api-key' });
const session = await composio.create('your-user-id');
console.log(`Tool Router session created: ${session.mcp.url}`);

// Example: create an auth config for WorkOS (API key) and link a connected account
// WorkOS uses an API key; set YOUR_WORKOS_API_KEY in config
const authConfig = await composio.auth_configs.create({ toolkit: 'workos', auth_type: 'api_key', name: 'workos-api-key', config: { api_key: 'YOUR_WORKOS_API_KEY' } });
const connectedAccount = await composio.connected_accounts.link({ auth_config_id: authConfig.id, account_name: 'workos-enterprise-account' });

// Optionally create an MCP entry
const mcpEntry = await composio.mcp.create({ name: 'workos-tool-router', session_id: session.id });
console.log(`MCP entry created: ${mcpEntry.id}`);
Import and initialize the Composio client, then create a Tool Router session for WorkOS
3

Connect to AI Agent

typescript
import { openai } from '@ai-sdk/openai';
import { experimental_createMCPClient as createMCPClient } from '@ai-sdk/mcp';
import { generateText } from 'ai';

const client = await createMCPClient({
  transport: {
    type: 'http',
    url: session.mcp.url,
    headers: {
      'x-api-key': 'your-composio-api-key',
    },
  },
});

const tools = await client.tools();
const { text } = await generateText({
  model: openai('gpt-4o'),
  tools,
  messages: [{
    role: 'user',
    content: 'YOUR_SPECIFIC_PROMPT_HERE'
  }],
  maxSteps: 5,
});

console.log(`Agent: ${text}`);
Use the MCP server with your AI agent (Anthropic Claude or Mastra)
SETUP GUIDE

Connect WorkOS API Tool with your Agent

1

Install Composio

typescript
npm install @composio/openai
Install the Composio SDK
2

Initialize Composio and Create Tool Router Session

typescript
import OpenAI from 'openai';
import { Composio } from '@composio/core';
import { OpenAIResponsesProvider } from '@composio/openai';

const composio = new Composio({
  provider: new OpenAIResponsesProvider(),
});
const openai = new OpenAI({});
const session = await composio.create('your-user-id');
Import and initialize Composio client, then create a Tool Router session
3

Execute WorkOS Tools via Tool Router with Your Agent

typescript
const tools = session.tools;
const response = await openai.responses.create({
  model: 'gpt-4.1',
  tools: tools,
  input: [{
    role: 'user',
    content: 'YOUR_SPECIFIC_PROMPT_HERE'
  }],
});
const result = await composio.provider.handleToolCalls(
  'your-user-id',
  response.output
);
console.log(result);
Get tools from Tool Router session and execute WorkOS actions with your Agent

Why Use Composio?

AI Native WorkOS Integration

  • Supports both WorkOS MCP and direct API based integrations
  • Structured, LLM-friendly schemas for reliable tool execution
  • Rich coverage for reading, writing, and querying your WorkOS data

Managed Auth

  • Built-in API key handling with secure storage
  • Central place to manage, scope, and revoke WorkOS access
  • Per user and per environment credentials instead of hard-coded keys

Agent Optimized Design

  • Tools are tuned using real error and success rates to improve reliability over time
  • Comprehensive execution logs so you always know what ran, when, and on whose behalf

Enterprise Grade Security

  • Fine-grained RBAC so you control which agents and users can access WorkOS
  • Scoped, least privilege access to WorkOS resources
  • Full audit trail of agent actions to support review and compliance
FRAMEWORKS

Use WorkOS with any AI Agent Framework

Choose a Framework you want to connect WorkOS with

ChatGPT logo

ChatGPT

Use WorkOS MCP with ChatGPT

Claude Cowork logo

Claude Cowork

Use WorkOS MCP with Claude Cowork

Hermes logo

Hermes

Use WorkOS MCP with Hermes

Atomic Agent logo

Atomic Agent

Use WorkOS MCP with Atomic Agent

Rolling this out across your team?

Give your team centralized access control across every framework with Composio’s MCP Gateway.

EXPLORE MCP GATEWAY
FAQ

Frequently asked questions

Yes, WorkOS requires you to configure your own API key credentials. Once set up, Composio handles secure credential storage and API request handling for you.

Yes! Composio's Tool Router enables agents to use multiple toolkits. Learn more.

Yes. Composio is SOC 2 Type II compliant and is built to keep your WorkOS connection and credentials secure. OAuth tokens and API keys are encrypted, and sensitive customer data is protected at rest and in transit.

Composio also undergoes independent security testing and continuously monitors its systems for security threats. You can review the latest reports and policies in the Composio Trust Center.

Composio maintains and updates all toolkit integrations automatically, so your agents always work with the latest API versions.

Create the key in your WorkOS account settings, then paste it once on Composio's connection page. Composio stores it encrypted and uses it only for the WorkOS actions your agent runs. Nobody else in your workspace can read it, and you can revoke it inside WorkOS at any time.

When you connect a WorkOS account through Composio, every action runs under that account, so anything the agent creates, sends, or changes shows up in WorkOS as done by you. Keep an approval step in your prompt for actions with side effects, such as sending or deleting, and have the agent draft first.

Whatever the credentials you connect allow inside WorkOS. If WorkOS lets you scope a key to specific permissions, create a scoped one so the agent can only do what you intend. You can revoke the key inside WorkOS at any time.

Yes. Composio supports multiple connected accounts for the same app, and that works in Claude, ChatGPT, or any other assistant you connect through Composio. Give each WorkOS connection a name such as work or personal, and the assistant uses the one you mention in the request. Each account keeps its own credentials and nothing is merged.

The connection stops working the moment WorkOS rejects the old key. Create a new key in WorkOS and reconnect the account from the Composio dashboard or by asking your agent to reconnect WorkOS. Nothing else changes.

Composio's free Hobby plan includes 100,000 tool calls per month with no credit card, which covers most personal WorkOS use. Paid plans add higher limits and team features. Your WorkOS plan and its API limits still apply as usual.

Built-in connectors usually give one AI access to a limited set of apps. Many people use Composio because it lets their AI connect to more apps than it normally supports, or connect to multiple accounts for the same app (e.g. connect Claude to multiple WorkOS accounts).

With Composio, you connect WorkOS once and then use it across different AI assistants without setting it up separately in each one. Connect your apps to Composio once, then connect Composio to whichever AI you use, whether that's Claude, ChatGPT, Hermes, or your own custom assistant.

Start with WorkOS.It takes 30 seconds.

Managed auth, hosted MCP servers, and every WorkOS tool your agent needs.Free to start.

Start building