How do I connect this MCP to my AI client?

You subscribe to the MCP on Vinkius and enter your WorkOS API Key. Once connected, you can use it immediately in any MCP-compatible client like Claude or Cursor.

Can I use this to troubleshoot SSO issues?

Yes. You can use the agent to list active SSO connections and check their specific status and metadata to ensure they are operational.

Does this work with Okta and Azure AD?

Yes. The MCP can retrieve metadata and details for directory instances including Okta and Azure AD through the directory sync capabilities.

Can I create new organizations through my AI agent?

Yes. You can use the create_workos_organization capability to set up new organization records with specific authorized domains.

Is it possible to see user lists from synced directories?

Yes. You can use the list_directory_users capability to see all users that have been synced from an external directory.

Can I check the sync status of a specific company directory through the agent?

Yes. The get_directory_details capability allows your AI agent to retrieve the current sync status and metadata for any specific directory ID, helping you monitor whether employees are being correctly provisioned.

How do I see which users belong to a specific synced group?

You can use the list_directory_users capability and filter by the directory ID to see the full roster. For group-level information, use the list_directory_groups capability to see organizational units imported from the identity provider.

Is it possible to retrieve security audit logs via chat?

Absolutely. The get_audit_log_events capability retrieves a stream of events for any specific organization ID, giving you instant access to compliance-related activities directly through your conversation.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect WorkOS to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage SSO, directory sync, and organizations through chat.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through WorkOS.

01
Get organization details
This capability pulls specific details for a single organization.
02
List directories
Use this to see all active Directory Sync instances currently running.
03
List SSO connections
This capability returns a list of all active SSO connections like SAML or OIDC.
04
Create workos organization
This capability creates a new organization record by providing a name and authorized domains.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through WorkOS.

05
List workos organizations
Use this to get a full list of all organizations in your WorkOS account.
06
Get audit log events
This capability retrieves a stream of audit log events for a specific organization.
07
Get directory details
This capability fetches metadata for a specific directory instance, such as Okta or Azure AD.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through WorkOS.

08
Get SSO connection details
Use this to get deep details for a specific SSO connection.
09
List directory groups
This capability lists all the groups that have been synced from a directory.
10
List directory users
Use this to see all users synced from a specific directory.

Real work

What teams actually run

SSO Troubleshooting

An engineer asks the agent to check the status of an Okta connection to find out why a customer cannot log in.

Compliance Auditing

A security officer requests the latest audit log events for a specific tenant to verify recent access changes.

User Provisioning Checks

A support agent verifies if a new employee has been successfully synced from a client's Azure AD directory.

Tenant Onboarding

A product manager creates a new enterprise organization record and sets authorized domains using a single command.

Automate a task

Put WorkOS to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

WorkOS works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put WorkOS to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

882ms average. Fast in production.

WorkOS is checked daily against the live service.

Daily averagePeak 1151ms

Oct 3Today

Fastest day: 756ms
Slowest day: 1151ms
14-day trend: Stable+3%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of WorkOS, so you can see the experience inside your AI.

It does not authenticate your account with WorkOS. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

WorkOS Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_rwxMA9lZDQOsPAB4YWRqrtYcwkF7I80gqKgTYNRP/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — WorkOS capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "workos-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_rwxMA9lZDQOsPAB4YWRqrtYcwkF7I80gqKgTYNRP/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up WorkOS in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work WorkOS owners hand off.

This MCP is built for technical teams managing enterprise-grade identity and access.

01
Enterprise Engineers
They use the agent to troubleshoot SSO health and directory sync issues.
02
Product Managers
They pull organization lists and verified domains for launch planning.
03
Security Teams
They retrieve audit logs and monitor user groups for access control.
04
Support Teams
They look up organization details and user rosters to help customers.

FAQ

Questions WorkOS owners ask.

01
How do I connect this MCP to my AI client?
You subscribe to the MCP on Vinkius and enter your WorkOS API Key. Once connected, you can use it immediately in any MCP-compatible client like Claude or Cursor.
02
Can I use this to troubleshoot SSO issues?
Yes. You can use the agent to list active SSO connections and check their specific status and metadata to ensure they are operational.
03
Does this work with Okta and Azure AD?
Yes. The MCP can retrieve metadata and details for directory instances including Okta and Azure AD through the directory sync capabilities.
04
Can I create new organizations through my AI agent?
Yes. You can use the create_workos_organization capability to set up new organization records with specific authorized domains.
05
Is it possible to see user lists from synced directories?
Yes. You can use the list_directory_users capability to see all users that have been synced from an external directory.
06
Can I check the sync status of a specific company directory through the agent?
Yes. The get_directory_details capability allows your AI agent to retrieve the current sync status and metadata for any specific directory ID, helping you monitor whether employees are being correctly provisioned.
07
How do I see which users belong to a specific synced group?
You can use the list_directory_users capability and filter by the directory ID to see the full roster. For group-level information, use the list_directory_groups capability to see organizational units imported from the identity provider.
08
Is it possible to retrieve security audit logs via chat?
Absolutely. The get_audit_log_events capability retrieves a stream of events for any specific organization ID, giving you instant access to compliance-related activities directly through your conversation.

Explore

More in Fort Knox

Connect WorkOS to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Get organization details

List directories

List SSO connections

Create workos organization

05-07

List workos organizations

Get audit log events

Get directory details

08-10

Get SSO connection details

List directory groups

List directory users

What teams actually run

SSO Troubleshooting

Compliance Auditing

User Provisioning Checks

Tenant Onboarding

Building your own app? The connector is yours to use.

WorkOS Connector

Claude Desktop

Enterprise Engineers

Product Managers

Security Teams

Support Teams

How do I connect this MCP to my AI client?

Can I use this to troubleshoot SSO issues?

Does this work with Okta and Azure AD?

Can I create new organizations through my AI agent?

Is it possible to see user lists from synced directories?

Can I check the sync status of a specific company directory through the agent?

How do I see which users belong to a specific synced group?

Is it possible to retrieve security audit logs via chat?

BoxyHQ (Enterprise SSO) AI Connector

Amazon CloudWatch Log Group AI Connector

Loggly (Cloud Log Management API) AI Connector

Logflare (Log Management Analytics) AI Connector

Suggestions

Egnyte AI Connector

Logstash (Server-side Log Pipeline API) AI Connector

Enterprise Logo Retention Analytics AI Connector

Security Audit Prover AI Connector