WorkOS MCP. Manage identity and audit systems without leaving your chat client.
WorkOS connects your enterprise identity platform to your AI agent, letting you manage complex organizations, audit security logs, and monitor Single Sign-On (SSO) connections via natural chat. Use this MCP to handle directory sync status checks and user roster lookups without ever logging into the WorkOS dashboard.
Give Claude and any AI agent real-world access
The agent streams detailed historical events, letting you monitor who accessed what and when across any organization.
You can list all existing organizations or create new ones by specifying the name and authorized domains.
The MCP lists all active Single Sign-On connections, allowing you to check the status of critical enterprise authentication links.
You get metadata and sync details for connected directories from providers like Okta or Azure AD.
The agent retrieves complete lists of users and groups synced into WorkOS from your external directory.
Ask an AI about this
Waiting for input…
What AI agents can do with WorkOS MCP: Directory & Governance Tools (10 tools)
Use these ten tools to control everything from creating new organizational accounts to retrieving detailed user rosters and auditing security events.
Make your AI actually useful.
Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.
Start using WorkOS MCPCreate Workos Organization
Creates a new organizational record by requiring the name and authorized domains.
Get Audit Log Events
Retrieves a stream of security events tracked within a specific organization.
Get Sso Connection Details
Fetches detailed information for one particular Single Sign-On connection.
Get Directory Details
Retrieves metadata about a specific directory instance, such as Okta or Azure AD...
Get Organization Details
Fetches detailed information for a given organization ID.
List Sso Connections
Lists every active Single Sign-On connection configured across the account.
List Directories
Provides a list of all currently running directory synchronization instances.
List Directory Groups
Lists every group that has been synced from an external directory source.
List Workos Organizations
Retrieves a comprehensive list of all organizations managed in the WorkOS account.
List Directory Users
Lists every user that has been synced from an external directory source.
Security and governance baked right in.
Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.
Choose How to Get Started
Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.
Build Your Own
Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.
- Import from OpenAPI, Swagger, or YAML specs
- Create Agent Skills with progressive disclosure
- Deploy to edge with MCPFusion framework
- Built in DLP, auth, and compliance on each call
- Real time usage dashboard and cost metering
- Publish to catalog or keep private
Make Your AI Do More
Start with WorkOS, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.
- Use this MCP plus 5,200+ others, all in one place
- Add new capabilities to your AI anytime you want
- Connections are secured and governed automatically
- Track usage and costs across all your servers
- Works with Claude, ChatGPT, Cursor, and more
- New servers added to the catalog weekly
Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by WorkOS. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
VINKIUS CLOUD
Cloud Hosted
Managed infra
V8 Isolated
Sandboxed per request
Zero-Trust Proxy
No stored credentials
DLP Enforced
Policy on each call
GDPR Compliant
EU data residency
Token Compression
~60% cost reduction
The Pain of Administrative Overload
Today, checking your enterprise identity infrastructure means logging into WorkOS. You navigate to the SSO tab to check connection health. Then you jump to Directory Sync to see if users are syncing correctly. If you need an audit, you have to find a different section entirely. It’s a painful sequence of clicking through multiple dashboards just to get one status update.
With this MCP, that entire process shrinks down to conversation. Your agent handles the clicks for you. You ask about SSO health or directory sync status, and it gives you the full picture in plain text—no dashboard required.
Get Full Visibility with WorkOS MCP
The manual steps that vanish are: manually switching between SSO links and directory sync monitors; piecing together user lists from multiple sources; and building complex audit reports by exporting data piece by piece.
Now, you treat your entire identity platform like a conversational database. You ask, it delivers the comprehensive report. That's how modern ops teams work.
What WorkOS MCP does for your AI
Managing an enterprise's identity infrastructure shouldn't feel like navigating a decade-old web portal. This MCP connects your WorkOS account to any AI agent, letting you treat your entire organization setup as just another conversation. Instead of clicking through multiple tabs to check if a directory sync is active or finding the unique ID for a specific tenant, you simply ask your agent.
You can instantly list and audit all connected SSO services like SAML and OIDC links, or retrieve detailed metadata about any synced user group or organization. The Vinkius catalog makes it easy: connect once from your preferred AI client and gain full control over governance tasks—from creating new organizational records to streaming security audit logs—all through simple chat commands.
019d7624-976b-70fd-a7c1-f593259f9d95 How to set up WorkOS MCP
The bottom line is that your AI agent becomes your identity administrator, eliminating the need to manually browse WorkOS dashboards.
Subscribe to this MCP on Vinkius, then provide your API Key.
Connect the credential to your preferred AI client (like Cursor or Claude).
Ask your agent a question, like 'List all organizations' or 'Check SSO status for Acme Corp', and get immediate answers.
Who uses WorkOS MCP
This MCP targets security and operations staff who spend too much time switching between administrative consoles. If you're an engineer who needs real-time audit status or a compliance team needing historical proof of access control, this is for you.
Uses the MCP to retrieve audit logs and verify SSO connection health across all connected tenants.
Audits the list of organizations and verified domains to plan new product features or market rollouts.
Quickly looks up specific organization details or user rosters when providing technical assistance to enterprise clients.
Benefits of connecting WorkOS MCP
Audit logs: Instead of navigating through complex security dashboards to find an event, you ask for it. The agent streams detailed audit log events instantly.
Directory Sync: You can check the metadata and status of all connected directory instances (like Okta or Azure AD) without clicking into each one individually.
User Rosters: Needing a list of users? Use the MCP to pull complete user lists or specific group rosters from your synced directories, saving minutes of manual data compilation.
SSO Management: Quickly get a full count and status update on all active Single Sign-On connections using list_sso_connections, keeping your authentication links healthy.
Organization Mapping: When you're planning a new deployment, use the MCP to list all existing organizations or even create new ones with specific authorized domains.
WorkOS MCP use cases
Investigating Unauthorized Access
A security team member needs to know if a particular client's account was accessed last month. Instead of manually building complex queries, they ask the agent to get_audit_log_events for that organization ID and immediately see the stream of access attempts.
Pre-launch Governance Check
A Product Manager is launching a new enterprise feature. They first use list_workos_organizations to confirm every tenant is accounted for, then call get_directory_details on the primary directory ID to ensure sync readiness.
Troubleshooting Sync Breakage
An engineer notices user groups are missing. They use list_directories to confirm which sync source is down, and then call list_directory_groups using the correct directory ID to verify group membership.
Client Onboarding Setup
A support specialist needs to set up a new client. They use create_workos_organization, providing the necessary name and authorized domains, completing the initial setup in seconds.
WorkOS MCP tradeoffs
What to watch out for, and the recommended way to handle each one.
Manual Dashboard Checks
A user has to open the WorkOS dashboard, click 'Audit Logs,' filter by date range, then manually copy and paste event IDs into a spreadsheet for review.
Ask your agent directly using get_audit_log_events. The MCP handles the filtering and streaming of data, giving you the raw information instantly.
Guessing Organization IDs
A user doesn't know if 'Client Alpha' or 'Alpha Corp' is the correct ID for a sync test and spends 15 minutes searching through multiple tenant lists.
First, run list_workos_organizations to see all available names. Then use get_organization_details with the specific ID you find.
Forgetting Connection Status
A team member assumes an SSO link is active because it hasn't thrown an error yet, but doesn't know if OIDC or SAML is actually configured.
Run list_sso_connections to get a comprehensive list of every connection. Then use get_sso_connection_details on the specific link you need to verify.
When to use WorkOS MCP
Use this MCP if your primary pain point is operational governance—you need to audit, monitor status (SSO/Directory), or manage identity records at scale. If you frequently ask questions like 'What's the sync status for Tenant X?' or 'Show me all users in Group Y,' this tool handles that complexity. Don't use it if your only goal is simply viewing a single static piece of data; other, more focused connectors might be better. Also, if you don't need to audit logs or manage SSO connections, but just listing basic tenants is enough, confirm the scope of list_workos_organizations meets your needs before committing.
Frequently asked questions about WorkOS MCP
How do I list all organizations using WorkOS MCP? +
You use list_workos_organizations to get a complete roster of every tenant in your account. This is the fastest way to see how many organizational records you're dealing with.
Can I check SSO connections status with WorkOS MCP? +
Yes, running list_sso_connections gives you a full list of all configured SAML and OIDC links. You can follow up by using get_sso_connection_details for deeper troubleshooting.
What is the difference between listing users and groups in WorkOS MCP? +
Use list_directory_users when you need a roster of individual accounts (like John Doe). Use list_directory_groups if you only care about membership lists, such as 'IT Admin Group'.
Does WorkOS MCP help with compliance auditing? +
Absolutely. You use get_audit_log_events to stream historical security data for any organization, which is crucial for proving who did what and when.
How do I create a new organization record via the MCP? +
You run the create_workos_organization tool. You must provide both the desired name and the list of authorized domains to complete the process.