{"id":"workos","name":"WorkOS","category":"integrations","summary":"Manage identity resources and authorize access to your MCP services.","description":"Use WorkOS’s management MCP server to operate organizations, users and connections. AuthKit separately provides OAuth authorization for MCP servers you build.","url":"https://aiagentstore.ai/services-for-ai-agents/workos","website":"https://workos.com/?utm_source=aiagentstore.ai","docs":"https://workos.com/docs/mcp?utm_source=aiagentstore.ai","interfaces":["api","sdk","mcp"],"capabilities":["oauth","delegated-access","integrations"],"humanSetup":"Create a WorkOS workspace, select staging or production, configure the application and identity connections, and approve the agent’s dashboard account access. Production requires billing information.","authentication":"The management endpoint https://mcp.workos.com/mcp uses OAuth and inherits the signed-in dashboard role. API integrations use environment-specific credentials. AuthKit-issued tokens for your own MCP server are a separate authorization flow.","billing":"Staging is free for testing. AuthKit includes a free monthly-active-user allowance; production enterprise SSO and Directory Sync connections and selected add-ons are separately priced.","firstTask":"Read a known staging organization and its connection configuration, confirming environment and role before changing any identity resources.","limitations":"Team administrators can restrict MCP access. AuthKit does not remove the need for your server to validate tokens and enforce application permissions. Staging credentials and connections are separate from production.","readiness":"human-review-required","paymentMode":"provider-account","agentPayments":"not-verified","verifiedAt":"2026-10-20","verification":"Official documentation reviewed; account onboarding and paid execution not independently tested.","sources":["https://workos.com/docs/mcp?utm_source=aiagentstore.ai","https://workos.com/docs/authkit/mcp?utm_source=aiagentstore.ai","https://workos.com/docs/authkit/environments?utm_source=aiagentstore.ai","https://workos.com/pricing?utm_source=aiagentstore.ai"],"siteGuide":{"title":"Keep management authorization separate from end-user access","summary":"Identity-provider connections and maintained authentication infrastructure require external configuration, credentials and continued operation. An agent cannot infer a user’s authority or replace an organization’s identity provider with generated code.","url":"https://aiagentstore.ai/services-for-ai-agents/workos#integration-playbook","contentType":"text/html","requiresBrowser":false,"includes":["selection rationale","suggested workflow","acceptance checks","failure recovery","related services"],"basis":"Original AI Agent Store editorial guidance; not an execution benchmark."},"categoryUrl":"https://aiagentstore.ai/services-for-ai-agents/category/integrations","tagLinks":[{"id":"api","url":"https://aiagentstore.ai/services-for-ai-agents/tag/api"},{"id":"sdk","url":"https://aiagentstore.ai/services-for-ai-agents/tag/sdk"},{"id":"mcp","url":"https://aiagentstore.ai/services-for-ai-agents/tag/mcp"},{"id":"oauth","url":"https://aiagentstore.ai/services-for-ai-agents/tag/oauth"},{"id":"delegated-access","url":"https://aiagentstore.ai/services-for-ai-agents/tag/delegated-access"},{"id":"integrations","url":"https://aiagentstore.ai/services-for-ai-agents/tag/integrations"}]}