SIGN UPLOG IN
X (Twitter)LinkedInGitHubDiscordYouTube

How to connect WorkOS to Claude

Connect Claude Web, Desktop and Cowork to WorkOS MCP. Sync new users from okta directory, create invitation links for pending users, and more using natural language, with authentication handled for you.

Get started for freeGet a demo
WorkOS logoWorkOS
Api Key

WorkOS is an enterprise identity and user management API for directory sync, connections, invitations, and users. Use it to centralize SSO, provisioning, and directory synchronization across providers.

29 Tools

Introduction

Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf.

This guide walks you through the easiest and most secure way to connect your WorkOS account to Claude via Composio Connect, enabling it to sync new users from Okta directory, create invitation links for pending users, list all connected identity providers and statuses, and more such actions on your behalf without compromising your account security.

Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three.

Also integrate WorkOS with

ChatGPTHermesAtomic Agent

Connecting WorkOS to Claude Web, Desktop, and Cowork

Two ways to add the Composio connector. Pick whichever you prefer.

1. Add with one click

Click the button. Claude opens with the Composio connector filled in. Click Add, then go to step 2.

Add to Claude

Add manually

In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top.

Claude Desktop connectors screen with Add custom connector selected

Click Add custom connector and paste in the Composio MCP server URL:

bash
https://connect.composio.dev/mcp
Add custom connector dialog with Composio MCP server URL

2. Authorize in your browser

Click Connect. You'll be redirected to a browser window where you can authorize Composio to continue.

Composio authorization screen for Claude Web, Desktop, and Cowork

3. Connect your WorkOS account

Back in Claude, ask it to connect to WorkOS or give it any WorkOS-related task.

For example, ask Claude to:

  • "Sync new users from Okta directory"
  • "Create invitation links for pending users"
  • "List all connected identity providers and statuses"

It will prompt you to authenticate and authorize access.

That's it. Composio's tools are now available in Claude, and your WorkOS account is ready to use.

What is the WorkOS Claude Connector, and what's possible with it?

The WorkOS MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your WorkOS account. It provides structured and secure access to your organizations, users, memberships, invitations, connections, and directories, so your agent can manage users, organize access, send invitations, review connections, and inspect directory data on your behalf.

  • Organization management: Have your agent create, review, update, list, or delete organizations based on your instructions.
  • User and membership administration: Let the agent create, find, update, or delete users, grant organization membership, change assigned roles, adjust membership status, or remove access.
  • Invitation management: Direct your agent to send invitations, check their status, list invitations by organization or recipient, resend pending invitations, or revoke them.
  • Directory Sync insights: Instruct your agent to review connected directories and retrieve directory users and groups, including user attributes, roles, and group details available in WorkOS.
  • Connection discovery: Have your agent find and review your SSO and OAuth connections by organization, domain, connection type, or name.

Troubleshooting

1. Why does Claude not use the Composio connector for WorkOS?

The connector can show as connected, but Claude must use it in each WorkOS conversation.

  • Click + at the lower left of the chat, or type /.
  • Hover Connectors.
  • Turn on Composio.
  • Ask Claude to connect to WorkOS again.

2. Why does Claude show an MCP server error before WorkOS connects?

Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for WorkOS.

  • Check that the connector URL is https://connect.composio.dev/mcp.
  • Connectors run from Anthropic's cloud, so your device network is usually not the problem.
  • Add the connector again from Customize > Connectors, then ask Claude to connect WorkOS.
  • If it fails again, send the error and the ofid_ reference id to support@composio.dev.

3. Why does the WorkOS authorization link not work?

The Composio connector is one server. Your WorkOS account connects separately when Claude asks for it.

  • If the browser does not open, or the link expires, ask Claude to retry the WorkOS connection.
  • Composio creates a fresh WorkOS authorization link.
  • Open that link in your browser and finish the WorkOS sign-in.

4. Why do WorkOS actions fail after they worked before?

The WorkOS connection can expire or lose permission.

  • Ask Claude to inspect the WorkOS connection.
  • If the connection is unhealthy, disconnect it when Claude prompts you.
  • Reconnect the WorkOS account and retry the action.
  • If Claude shows a permission prompt, approve it before Claude changes data in WorkOS.
  • If the action still fails with a permission error, check that the connected account has that permission in WorkOS itself.

5. How do I switch to a different WorkOS account?

Claude can manage the WorkOS connection for you.

  • Ask Claude to disconnect or delete the current WorkOS account.
  • Ask Claude to connect WorkOS again.
  • Open the new Composio authorization link for WorkOS.
  • Sign in with the other WorkOS account in the browser.
  • After the account connects, ask Claude to retry the WorkOS task.

6. Why is my WorkOS connection missing in Claude Desktop or on a Team plan?

The connector belongs to your Claude account, so your WorkOS connection works in Claude Web, Desktop, and Cowork.

  • In Claude Desktop, open Customize > Connectors.
  • Next to Composio, click ⋮ and click Clear cache.
  • If WorkOS tools still do not appear, click ⋮, disconnect, remove the connector, and add it again.
  • On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect WorkOS.
TOOLS

Supported Tools

Every WorkOS action and event your agent gets out of the box.

Create Organization

Create a WorkOS organization in the connected environment.

Create Organization Membership

Grant an AuthKit user active membership in an organization.

Create User

Create a passwordless AuthKit user record in the connected WorkOS environment.

Delete Organization

Permanently delete a WorkOS organization.

Delete Organization Membership

Permanently remove an organization membership and its access.

Delete User

Permanently delete an AuthKit user.

Get Connection

Get one WorkOS connection by ID.

Get Directory

Get one WorkOS Directory Sync directory by ID.

Get Directory Group

Get one WorkOS Directory Sync group by its exact group ID.

Get Directory User

Get one WorkOS Directory Sync user by exact ID, including identity-provider attributes, roles, and any groups returned by WorkOS.

Get Invitation

Get WorkOS AuthKit invitation status and metadata by invitation ID without exposing acceptance credentials.

Get Organization

Get one WorkOS organization by its WorkOS ID or external ID.

Get Organization Membership

Get one WorkOS AuthKit organization membership by ID.

Get User

Get one WorkOS AuthKit user by WorkOS ID or external ID.

List Connections

List one page of WorkOS SSO and OAuth connections, optionally filtered by connection type, domain, organization, or name.

List Directories

List one page of WorkOS Directory Sync directories, optionally filtered by organization, directory name, or domain.

List Directory Groups

List one page of WorkOS Directory Sync groups for a directory, a directory user, or both.

List Directory Users

List one page of WorkOS Directory Sync users for a directory or group, optionally filtering a directory by exact identity-provider ID or primary email.

List Invitations

List one page of WorkOS AuthKit invitations by organization or exact recipient email without exposing acceptance credentials.

List Organization Memberships

List one page of WorkOS AuthKit organization memberships for a specific organization or user, optionally including inactive or pending memberships.

List Organizations

List one page of WorkOS organizations, optionally filtered by domain or organization name.

List Users

List one page of WorkOS AuthKit users, optionally filtered by organization or exact email address.

Resend Invitation

Send another real invitation email to the existing recipient of a pending WorkOS AuthKit invitation.

Revoke Invitation

Revoke a pending AuthKit invitation so it can no longer be accepted.

Send Invitation

Create an AuthKit invitation and immediately send a real invitation email to the recipient.

Set Organization Membership Status

Activate or deactivate a WorkOS organization membership without deleting it.

Update Organization

Update selected properties of an existing WorkOS organization.

Update Organization Membership Roles

Replace the role assignment on an existing WorkOS organization membership.

Update User

Update selected profile fields on an AuthKit user without invoking email delivery flows.

FRAMEWORKS

How to build WorkOS MCP Agent with another framework

ChatGPT logo

ChatGPT

Use WorkOS MCP with ChatGPT

Hermes logo

Hermes

Use WorkOS MCP with Hermes

Atomic Agent logo

Atomic Agent

Use WorkOS MCP with Atomic Agent

FAQ

Frequently asked questions

With a standalone WorkOS MCP server, the agents and LLMs can only access a fixed set of WorkOS tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from WorkOS and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right WorkOS tools.

Yes, absolutely. You can configure which WorkOS scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your WorkOS data and credentials are handled as safely as possible.

Start with WorkOS.It takes 30 seconds.

Managed auth, hosted MCP servers, and every WorkOS tool your agent needs.Free to start.

Start building