Ask WorkOS — Get instant AI-powered answers about WorkOS products, APIs, and integrations.
AuthKit
Full-fledged authentication platform, from your first user to enterprise single sign-on .
Authentication features
Customizable hosted UI for authentication at any size.
Single sign-on, passkeys, social sign-in, passwords, and more.
Advanced RBAC with custom roles and role assignment.
Protect your app from bots, fraud, and abuse.
Store additional information about users and organizations.
Built-in support for MCP and OAuth applications.
Additional Products
Integrate your existing auth stack with any SAML or OIDC identity provider.
Add user lifecycle management for SCIM and HRIS providers to your existing stack.
Enable IT admins to have a self-serve onboarding experience.
Ingest and export audit log events from your applications.
Manage user access using flexible roles and permissions.
Implement fine grained authorization in your application.
Encrypt, store, and control access to sensitive data.
Enable your customers to connect their third-party accounts to your application.
Control rollout of new features in your application.
Complete functionality for common enterprise app workflows.
Allow your customers to securely claim ownership of a domain.
Events and webhooks
Resources and tools
Every SDK method and API endpoint documented.
Guides on integrating WorkOS with third-party services.
Power your existing authentication stack with WorkOS features.
Official open-source SDK repositories and changelogs.
Integrate and manage WorkOS from your terminal.
Best practices for sending email with WorkOS.
Set up custom domains for your integration.
Manage your WorkOS workspace with AI agents from any MCP client.
Manage your workspace, team members, authentication, and billing.
Developer utilities for debugging and inspecting your integration.
All the terminology and concepts used in the docs.
Updates on what we are shipping in the product every week.
Engineering and product insights from the team at WorkOS.
Build with WorkOS
Authentication and user management
Start with AuthKit for hosted sign-in, session management, social login, passkeys, MFA, Magic Auth, and enterprise SSO in one integration. Use the widgets and APIs to manage users, organizations, invitations, roles, permissions, and custom metadata while keeping the authentication flow consistent as an application grows from its first users to large enterprise customers.
Enterprise-ready features
Add SAML and OIDC single sign-on, SCIM and HRIS directory sync, audit log exports, fine-grained authorization, Vault, feature flags, and a self-service Admin Portal without building separate infrastructure for every enterprise requirement. Product guides explain the setup flow, and the API reference documents the objects, events, webhooks, and error responses needed for a production integration.
APIs that agents can understand
Every public API operation is available in the OpenAPI specification and in Markdown documentation that works without JavaScript. Use the versioning and deprecation policy to identify replacement fields, effective dates, and migration steps before adopting an older API surface. Rate limit guidance, SDK examples, test environments, and structured error references help automated clients recover safely instead of guessing.
Automation and agent integrations
Run the official WorkOS CLI, published on npm, with npx workos@latest to set up AuthKit, provision an
environment, validate a project,
and manage resources from a terminal or coding agent. MCP
clients can connect to the hosted WorkOS MCP server to
manage a workspace through OAuth-scoped tools. Start with
the agent guide or
llms.txt index when
an agent needs to discover the right documentation,
authentication method, API schema, or integration path.