WorkOS

Registre officiel Productivité

Manage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

Remote (streamable-http)
Claude Code
claude mcp add --transport http workos 'https://mcp.workos.com/mcp'
Configuration JSON (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "workos": {
            "type": "http",
            "url": "https://mcp.workos.com/mcp"
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. @workos/skills
  2. Install as Claude Code Plugin
  3. Install as Cursor Plugin
  4. Install as npm Package
  5. Skills
  6. Development
  7. License

@workos/skills

WorkOS skills for AI coding agents. Two skills and 40 reference files covering AuthKit, SSO, Directory Sync, RBAC, Vault, Migrations, backend SDKs, and more.

Install as Claude Code Plugin

npx skills add workos/skills

This installs two skills: workos and workos-widgets. The workos skill acts as a router that automatically loads the right reference for your task (AuthKit setup, SSO, migrations, etc.) so you don't need to install references individually.

Works with Claude Code, Codex, Goose, and any agent that supports the skills.sh format.

Install as Cursor Plugin

Install from the Cursor Marketplace (search "WorkOS"), or clone and symlink locally — see Local Development below.

Install as npm Package

For programmatic access to skill/reference content (e.g., from the WorkOS CLI):

npm install @workos/skills
import { getReference, getSkill } from '@workos/skills';

// Read reference content directly
const content = await getReference('workos-authkit-nextjs');

// Read a skill's SKILL.md content
const router = await getSkill('workos');

Path helpers are also available for consumers that need file paths (e.g., skill discovery):

import { getReferencePath, getSkillsDir, getSkillPath } from '@workos/skills';

const refPath = getReferencePath('workos-authkit-nextjs'); // absolute path to .md file
const skillsDir = getSkillsDir(); // directory containing workos/ and workos-widgets/
const skillPath = getSkillPath('workos'); // absolute path to SKILL.md
Exports
FunctionReturns
getReference(name)Promise<string> — reference file content
getSkill(skillName)Promise<string> — skill SKILL.md content
getReferencePath(name)Absolute path to references/{name}.md
getSkillsDir()Absolute path to the skills/ directory
getSkillPath(skillName)Absolute path to skills/{skillName}/SKILL.md

Skills

Two registered skills:

SkillDescription
workosRouter — identifies which reference to load based on the user's task
workos-widgetsMulti-framework widget integration with on-demand OpenAPI spec querying

Everything else is a reference file under references/. The router dispatches to the right reference via progressive disclosure.

References

Note: References are not standalone skills. They are loaded automatically by the workos skill based on your task. You do not need to install them individually.

Full reference list (40+ files)

AuthKit Installation
ReferenceDescription
workos-authkit-nextjsNext.js App Router integration
workos-authkit-reactReact SPA integration
workos-authkit-react-routerReact Router v6/v7 integration
workos-authkit-tanstack-startTanStack Start integration
workos-authkit-sveltekitSvelteKit integration
workos-authkit-vanilla-jsVanilla JS integration
workos-authkit-baseAuthKit architecture reference
Backend SDK Installation
ReferenceDescription
workos-nodeNode.js (Express/Fastify/Hono/Koa)
workos-pythonPython (Django/Flask/FastAPI)
workos-dotnet.NET (ASP.NET Core)
workos-goGo
workos-rubyRuby (Rails)
workos-phpPHP
workos-php-laravelPHP Laravel
workos-kotlinKotlin
workos-elixirElixir
Features
ReferenceDescription
workos-ssoSingle Sign-On with SAML/OIDC
workos-directory-syncUser directory sync from IdPs
workos-rbacRole-based access control
workos-vaultEncrypted data storage
workos-eventsWebhook event handling
workos-audit-logsCompliance audit logging
workos-admin-portalSelf-service admin portal
workos-mfaMulti-factor authentication
workos-custom-domainsCustom domain configuration
workos-emailEmail delivery configuration
workos-integrationsProvider lookup table for 60+ IdP integrations
Migrations
ReferenceDescription
workos-migrate-auth0Migrate from Auth0
workos-migrate-firebaseMigrate from Firebase Auth
workos-migrate-clerkMigrate from Clerk
workos-migrate-aws-cognitoMigrate from AWS Cognito
workos-migrate-stytchMigrate from Stytch
workos-migrate-supabase-authMigrate from Supabase Auth
workos-migrate-descopeMigrate from Descope
workos-migrate-better-authMigrate from Better Auth
workos-migrate-other-servicesMigrate from custom auth
workos-migrate-the-standalone-sso-apiUpgrade standalone SSO to AuthKit
API References
ReferenceDescription
workos-api-authkitAuthKit/User Management API endpoints
workos-api-organizationOrganizations API endpoints
Management
ReferenceDescription
workos-managementCLI resource management (orgs, users, roles, webhooks, seeding)

Development

pnpm test          # vitest
pnpm lint          # oxlint
pnpm format        # oxfmt
Local Cursor development

Cursor loads local plugins from ~/.cursor/plugins/local/. Symlink this repo's plugin directory, then reload Cursor:

ln -s "$(pwd)/plugins/workos" ~/.cursor/plugins/local/workos

Then in Cursor: Cmd+Shift+P → Developer: Reload Window (or fully quit and relaunch Cursor if the reload doesn't pick up new skills).

Eval framework

Measures whether skills improve agent-generated code. Each case runs the same prompt with and without the skill, scores both outputs, and reports the delta.

pnpm eval -- --dry-run                        # verify cases load
pnpm eval -- --no-cache                       # full run (42 cases, ~$1.70)
pnpm eval -- --no-cache --case=sso-node-basic # single case
pnpm eval -- --no-cache --cases=sso-node-basic,sso-ruby-domain-routing # selected cases
pnpm eval -- --no-cache --fail-on-regression  # with gates
pnpm eval:risk -- --samples=8                 # rerun latest triage cases with saved samples
How it works

Each reference file follows the same pattern:

  1. Doc URLs — source of truth links (agent fetches these first)
  2. Gotchas — non-obvious traps the LLM gets wrong from training data
  3. Endpoints (optional) — API endpoint table for quick reference

AuthKit and backend SDK references are richer — they include step-by-step installation instructions, decision trees, verification checklists, and error recovery.

The router (workos/SKILL.md) maps user intent to the right reference file.

License

MIT

Questions fréquentes

Qu'est-ce que WorkOS ?

Manage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.

Comment installer WorkOS ?

Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http workos 'https://mcp.workos.com/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour WorkOS ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

WorkOS est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient WorkOS ?

Il est publié par workos. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.