Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official WorkOS server

WorkOS MCP server

Hosted remote MCP server that lets an agent manage a WorkOS workspace (organizations, users, SSO connections, Directory Sync, AuthKit branding, webhooks and more) by calling the WorkOS API as the signed-in dashboard user. It inherits the user's dashboard role and defaults to a sandbox environment. WorkOS hosts it at https://mcp.workos.com/mcp with OAuth auth.

Last verified 5 tools5 sources

Install

Claude Code

About Claude Code
Terminal
claude mcp add --transport http workos https://mcp.workos.com/mcp

Codex

About Codex
Terminal
codex mcp add workos --url https://mcp.workos.com/mcp
codex mcp get workos
codex mcp login workos
codex mcp list

Cursor

About Cursor
JSON
{
  "mcpServers": {
    "workos": {
      "url": "https://mcp.workos.com/mcp"
    }
  }
}

VS Code

JSON
{
  "servers": {
    "workos": {
      "type": "http",
      "url": "https://mcp.workos.com/mcp"
    }
  }
}

Generic

Snippet
workos mcp install

Tools

whoami
Returns your identity, role, and the environments you can reach.
list_operations
Lists the WorkOS operations available to the agent, with parameters.
query
Runs a read-only operation from the catalog, such as listing organizations or users.
mutate
Runs a write operation from the catalog, such as creating an organization or inviting a user.
setup_account
Provisions a WorkOS workspace for a first-time user.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Server is a hosted closed-source service; the GitHub folder holds only registry metadata (server.json v1.0.0) and the README states the source is not published (the surrounding workos/skills repo is MIT, but that covers skills, not the server).
  • OAuth 2.1 with Dynamic Client Registration via WorkOS Connect.
  • Team admins can disable MCP, block production access, or make it read-only.
  • No impersonation, cannot mint or rotate credentials, scoped to one team.
  • The generic snippet is the WorkOS CLI installer from the repo README, which auto-detects Claude Code, Codex and Cursor.
  • Not to be confused with AuthKit for MCP, which is WorkOS's product for securing your own MCP server.

More MCP servers for auth and security

Related reading

FAQ

What does the WorkOS MCP server do?

Hosted remote MCP server that lets an agent manage a WorkOS workspace (organizations, users, SSO connections, Directory Sync, AuthKit branding, webhooks and more) by calling the WorkOS API as the signed-in dashboard user. It inherits the user's dashboard role and defaults to a sandbox environment. The vendor documents 5 tools, including whoami, list_operations, query and mutate.

How do I add the WorkOS MCP server to Claude Code?

Run claude mcp add --transport http workos https://mcp.workos.com/mcp, copied from WorkOS's docs. This page also has snippets for Codex, Cursor, VS Code and Generic.

Does the WorkOS MCP server need authentication?

Yes, OAuth. Transport: Streamable HTTP. Status: Unlabelled, last checked October 17, 2026.

Sources

Last verified against 5 WorkOS pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.