Skip to main content Announcing Tool Gateway MCP: the universal MCP Read the announcement
StackOne
Connectors
Connect

Connect to everything your agents need, without writing the infrastructure to get there.

Secure

Enterprise-grade controls to ensure your agent always meets security & compliance standards.

Optimize

Maximise agent efficiency – faster responses, increased accuracy, fewer tokens used.

Pricing
Login
Book Demo Start Free
StackOne
Connectors
Connect

Connect to everything your agents need, without writing the infrastructure to get there.

Secure

Enterprise-grade controls to ensure your agent always meets security & compliance standards.

Optimize

Maximise agent efficiency – faster responses, increased accuracy, fewer tokens used.

Use-Cases
Pricing
Book Demo Start Free
Live 234 Actions

WorkOS MCP Server
for AI Agents

Connect your AI agent to StackOne's WorkOS MCP server and give it 234 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →
WorkOS logo
WorkOS MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

234 Agent Actions

Create, read, update, and delete across WorkOS — and extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your WorkOS MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every WorkOS tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every WorkOS call.

Tools Discovery →

What is the WorkOS MCP Server?

A WorkOS MCP server lets AI agents read and write WorkOS data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's WorkOS MCP server ships with 234 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All WorkOS MCP Tools

Every action from WorkOS's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

An Agent Blueprints

  • Create An Agent Blueprint

    Create an agent blueprint

  • Get An Agent Blueprint

    Get an agent blueprint

  • Update An Agent Blueprint

    Update an agent blueprint

  • Delete An Agent Blueprint

    Delete an agent blueprint

An Agent Instances

  • Get An Agent Instance

    Get an agent instance

  • Delete An Agent Instance

    Delete an agent instance

Audit Log Exports

  • Create Audit Log Export

    Create an Audit Log Export. Exports are scoped to a single organization within a specified date range.

  • Get Audit Log Export

    Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching the export will regenerate the URL.

Audit Log Schemas

  • Create Audit Log Schema

    Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the `action` does not exist, it will also be created.

  • List Audit Log Schemas

    Get a list of all schemas for the Audit Logs action identified by `:name`.

Audit Log Retentions

  • Get Audit Log Retention

    Get the configured event retention period for the given Organization.

  • Set Audit Log Retention

    Set the event retention period for the given Organization.

JWT Templates

  • Get JWT Template

    Get JWT template

  • Update JWT Template

    Update JWT template

A Redirect URIs

  • Create A Redirect URI

    Create a redirect URI

  • Delete A Redirect URI

    Delete a redirect URI

A Group Role Assignments

  • Get A Group Role Assignment

    Get a group role assignment

  • Remove A Group Role Assignment

    Remove a group role assignment

A Custom Roles

  • Create A Custom Role

    Create a custom role

  • Get A Custom Role

    Get a custom role

  • Update A Custom Role

    Update a custom role

  • Delete A Custom Role

    Delete a custom role

A Permissions

  • Create A Permission

    Create a permission

  • Get A Permission

    Get a permission

  • Update A Permission

    Update a permission

  • Delete A Permission

    Delete a permission

A Resources

  • Get A Resource

    Get a resource

  • Update A Resource

    Update a resource

A Resource By External IDs

  • Get A Resource By External ID

    Get a resource by external ID

  • Update A Resource By External ID

    Update a resource by external ID

An Environment Roles

  • Create An Environment Role

    Create an environment role

  • Get An Environment Role

    Get an environment role

  • Update An Environment Role

    Update an environment role

An Authorization Resources

  • Create An Authorization Resource

    Create an authorization resource

  • Delete An Authorization Resource

    Delete an authorization resource

A Connect Applications

  • Create A Connect Application

    Create a Connect Application

  • Get A Connect Application

    Get a Connect Application

  • Update A Connect Application

    Update a Connect Application

  • Delete A Connect Application

    Delete a Connect Application

Connections

  • Create Connection

    Creates a new connection for an organization. Provide `saml_options` or `oidc_options` to configure the identity provider. When `external_id` matches an existing connection in the organization, that connection is returned instead of creating a duplicate.

  • List Connections

    Get a list of all of your existing connections matching the criteria specified.

  • Get Connection

    Get the details of an existing connection.

  • Update Connection

    Updates an existing connection. Only the provided fields are changed; fields that accept `null` are reset to their default behavior.

  • Delete Connection

    Permanently deletes an existing connection. It cannot be undone.

A Data Integrations

  • Create A Data Integration

    Create a data integration

  • Get A Data Integration

    Get a data integration

  • Update A Data Integration

    Update a data integration

  • Delete A Data Integration

    Delete a data integration

An Organization-owned Data Integrations

  • Get An Organization-owned Data Integration

    Get an organization-owned data integration

  • Update An Organization-owned Data Integration

    Update an organization-owned data integration

  • Delete An Organization-owned Data Integration

    Delete an organization-owned data integration

An Organization Connected Accounts

  • Import An Organization Connected Account

    Import an organization connected account

  • Get An Organization Connected Account

    Get an organization connected account

  • Update An Organization Connected Account

    Update an organization connected account

  • Delete An Organization Connected Account

    Delete an organization connected account

A Connected Accounts

  • Import A Connected Account

    Import a connected account

  • Get A Connected Account

    Get a connected account

  • Update A Connected Account

    Update a connected account

  • Delete A Connected Account

    Delete a connected account

Directorys

  • Get Directory

    Get the details of an existing directory.

  • Sync Directory

    Request an asynchronous sync from the directory provider. Currently supports Google Workspace directories in linked or validating state. Manual requests share a five-minute per-directory cooldown across the API, Dashboard, Admin Portal, and MCP. Acceptance means the request was queued, not that the sync has started or completed. A running sync prevents another request from being queued.

  • Delete Directory

    Permanently deletes an existing directory. It cannot be undone.

Directory Groups

  • List Directory Groups

    Get a list of all of existing directory groups matching the criteria specified.

  • Get Directory Group

    Get the details of an existing Directory Group.

Directory Users

  • List Directory Users

    Get a list of all of existing Directory Users matching the criteria specified.

  • Get Directory User

    Get the details of an existing Directory User.

A Feature Flag Targets

  • Add A Feature Flag Target

    Add a feature flag target

  • Remove A Feature Flag Target

    Remove a feature flag target

A Groups

  • Create A Group

    Create a group

  • Get A Group

    Get a group

  • Update A Group

    Update a group

  • Delete A Group

    Delete a group

Invitations

  • Send Invitation

    Sends an invitation email to the recipient.

  • List Invitations

    Get a list of all of invitations matching the criteria specified.

  • Get Invitation

    Get the details of an existing invitation.

An IT Contacts

  • Create An IT Contact

    Create an IT contact

  • Delete An IT Contact

    Delete an IT contact

Factors

  • Get Factor

    Get Factor

  • Delete Factor

    Delete Factor

Organization Domains

  • Create Organization Domain

    Creates a new Organization Domain.

  • Get Organization Domain

    Get the details of an existing organization domain.

  • Delete Organization Domain

    Permanently deletes an organization domain. It cannot be undone.

Organization Memberships

  • Create Organization Membership

    Creates a new `active` organization membership for the given organization and user. Calling this API with an organization and user that match an `inactive` organization membership will activate the membership with the specified role(s).

  • List Organization Memberships

    Get a list of all organization memberships matching the criteria specified. At least one of `user_id` or `organization_id` must be provided. By default only active memberships are returned. Use the `statuses` parameter to filter by other statuses.

  • Get Organization Membership

    Get the details of an existing organization membership.

  • Update Organization Membership

    Update the details of an existing organization membership.

  • Delete Organization Membership

    Permanently deletes an existing organization membership. It cannot be undone.

Organizations

  • Create Organization

    Creates a new organization in the current environment.

  • List Organizations

    Get a list of all of your existing organizations matching the criteria specified.

  • Get Organization

    Get the details of an existing organization.

  • Update Organization

    Updates an organization in the current environment.

  • Delete Organization

    Permanently deletes an organization in the current environment. It cannot be undone.

A Password Reset Tokens

  • Create A Password Reset Token

    Create a password reset token

  • Get A Password Reset Token

    Get a password reset token

A Teams

  • Create A Team

    Create a team

  • Get A Team

    Get a team

The SP Signing Certificates

  • Get The SP Signing Certificate

    Get the SP signing certificate

  • Delete The SP Signing Certificate

    Delete the SP signing certificate

An IdP Signing Certificates

  • Create An IdP Signing Certificate

    Create an IdP signing certificate

  • Delete An IdP Signing Certificate

    Delete an IdP signing certificate

An SP Encryption Certificates

  • Create An SP Encryption Certificate

    Create an SP encryption certificate

  • Delete An SP Encryption Certificate

    Delete an SP encryption certificate

Users

  • Create User

    Create a new user in the current environment.

  • List Users

    Get a list of all of your existing users matching the criteria specified.

  • Get User

    Get the details of an existing user.

  • Update User

    Updates properties of a user. The omitted properties will be left unchanged.

  • Delete User

    Permanently deletes a user in the current environment. It cannot be undone.

An Objects

  • Create An Object

    Create an object

  • Update An Object

    Update an object

  • Delete An Object

    Delete an object

A Waitlist Entrys

  • Create A Waitlist Entry

    Create a waitlist entry

  • Delete A Waitlist Entry

    Delete a waitlist entry

A Webhook Endpoints

  • Create A Webhook Endpoint

    Create a Webhook Endpoint

  • Update A Webhook Endpoint

    Update a Webhook Endpoint

  • Delete A Webhook Endpoint

    Delete a Webhook Endpoint

Other (119)

  • Create An API Key For An Organization

    Create an API key for an organization

  • Create Audit Log Event

    Create an Audit Log Event. This API supports idempotency which guarantees that performing the same operation multiple times will have the same result as if the operation were performed only once. This is handy in situations where you may need to retry a request due to a failure or prevent accidental duplicate requests from creating more than one resource. To achieve idempotency, you can add `Idempotency-Key` request header to a Create Event request with a unique string as the value. Each subsequent request matching this unique string will return the same response. We suggest using [v4 UUIDs](https://en.wikipedia.org/wiki/Universally_unique_identifier) for idempotency keys to avoid collisions.

  • Create A CORS Origin

    Create a CORS origin

  • Add A Permission To A Custom Role

    Add a permission to a custom role

  • Add A Permission To An Environment Role

    Add a permission to an environment role

  • Create A New Client Secret For A Connect Application

    Create a new client secret for a Connect Application

  • Create Another API Key Connected Account

    Create another API key connected account

  • Create Another Client Credentials Connected Account

    Create another client credentials connected account

  • Send Verification Email

    Send verification email

  • Add A Member To A Group

    Add a member to a Group

  • Create Portal Link

    Generate a Portal Link scoped to an Organization.

  • Create An Attempt

    Create an attempt

  • Add An Entry To A Radar List

    Add an entry to a Radar list

  • Create An SP Signing Certificate

    Create an SP signing certificate

  • Create A Data Key

    Create a data key

  • List Agent Blueprints

    List agent blueprints

  • List Agent Instances

    List agent instances

  • List Agent Instance Sessions

    List agent instance sessions

  • Get An Agent Registration

    Get an agent registration

  • Get An Agent Instance Session

    Get an agent instance session

  • List API Keys For An Organization

    List API keys for an organization

  • List Audit Log Actions

    Get a list of all Audit Log actions in the current environment.

  • List CORS Origins

    List CORS origins

  • List Redirect URIs

    List redirect URIs

  • List Role Assignments For A Group

    List role assignments for a group

  • List Membership Resource Permissions

    List effective permissions for an organization membership on a resource

  • List Resources For Organization Membership

    List resources for organization membership

  • List Role Assignments

    List role assignments

  • List Permissions

    List permissions

  • List Organization Memberships For Resource

    List organization memberships for resource

  • List Memberships For A Resource By External ID

    List memberships for a resource by external ID

  • List Resource Permissions By Ext ID

    List effective permissions for an organization membership on a resource by external ID

  • List Role Assignments For A Resource

    List role assignments for a resource

  • List Role Assignments For A Resource By External ID

    List role assignments for a resource by external ID

  • List Resources

    List resources

  • List Client Secrets For A Connect Application

    List Client Secrets for a Connect Application

  • List Connect Applications

    List Connect Applications

  • List Data Integrations

    List data integrations

  • List Providers For An Organization

    List providers for an organization

  • List Providers For A User

    List providers for a user

  • Get An Access Token For A Connected Account

    Get an access token for a connected account

  • Get Authorization URL

    Get authorization URL

  • List Directories

    Get a list of all of your existing directories matching the criteria specified.

  • Get An Email Verification Code

    Get an email verification code

  • List Events

    List events for the current environment.

  • List Feature Flags

    List feature flags

  • List Enabled Feature Flags For An Organization

    List enabled feature flags for an organization

  • List Enabled Feature Flags For A User

    List enabled feature flags for a user

  • Get A Feature Flag

    Get a feature flag

  • List Group Members

    List Group members

  • List Membership Groups

    List groups

  • List Organization Groups

    List groups

  • Get Invitation By Token

    Retrieve an existing invitation using the token.

  • List IT Contacts

    List IT contacts

  • List Authentication Factors

    List authentication factors

  • Get Organization By External ID

    Get the details of an existing organization by an [external identifier](https://workos.com/authkit/metadata/external-identifiers).

  • Get Organization Audit Log Configuration

    Get the unified view of audit log trail and stream configuration for an organization.

  • List Roles

    List all environment roles in priority order.

  • List Organization Roles

    Get a list of all roles that apply to an organization. This includes both environment roles and custom roles, returned in priority order.

  • List IdP Signing Certificates

    List IdP signing certificates

  • List SP Encryption Certificates

    List SP encryption certificates

  • List User Sessions

    Get a list of all active sessions for a specific user.

  • Get User Identities

    Get a list of identities associated with the user. A user can have multiple associated identities after going through [identity linking](https://workos.com/authkit/identity-linking). Currently only OAuth identities are supported. More provider types may be added in the future.

  • Get User By External ID

    Get the details of an existing user by an [external identifier](https://workos.com/authkit/metadata/external-identifiers).

  • List Object Versions

    List object versions

  • List Objects

    List objects

  • List Waitlist Entries

    List waitlist entries

  • List Waitlists

    List waitlists

  • Get A Waitlist

    Get a waitlist

  • List Webhook Endpoints

    List Webhook Endpoints

  • Set Permissions For A Custom Role

    Set permissions for a custom role

  • Set Permissions For An Environment Role

    Set permissions for an environment role

  • Update A Radar Attempt

    Update a Radar attempt

  • Delete An API Key

    Delete an API key

  • Remove Group Role Assignments By Criteria

    Remove group role assignments by criteria

  • Remove A Role Assignment By ID

    Remove a role assignment by ID

  • Remove A Role Assignment

    Remove a role assignment

  • Remove A Permission From A Custom Role

    Remove a permission from a custom role

  • Delete An Authorization Resource By External ID

    Delete an authorization resource by external ID

  • Remove A Member From A Group

    Remove a member from a Group

  • Remove An Entry From A Radar List

    Remove an entry from a Radar list

  • Mint An Agent Token

    Mint an agent token

  • Link A Claim Attempt To An External User

    Link a claim attempt to an external user

  • Revoke An Agent Instance Session

    Revoke an agent instance session

  • Validate An Agent Token

    Validate an agent token

  • Validate An Agent Credential

    Validate an agent credential

  • Expire An API Key

    Expire an API key

  • Validate API Key

    Validate API key

  • Assign A Role To A Group

    Assign a role to a group

  • Assign A Role

    Assign a role

  • Replace All Role Assignments For A Group

    Replace all role assignments for a group

  • Check Authorization

    Check authorization

  • Vend Credentials For A Connected Account

    Vend credentials for a connected account

  • Upsert An API Key For A Connected Account

    Upsert an API key for a connected account

  • Upsert Client Credentials For A Connected Account

    Upsert client credentials for a connected account

  • Verify Email

    Verify email

  • Disable A Feature Flag

    Disable a feature flag

  • Enable A Feature Flag

    Enable a feature flag

  • Accept Invitation

    Accepts an invitation and, if linked to an organization, activates the user's membership in that organization.

  • Resend Invitation

    Resends an invitation email to the recipient. The invitation must be in a pending state.

  • Revoke Invitation

    Revokes an existing invitation.

  • Invite An IT Contact

    Invite an IT contact

  • Revoke An IT Contact's Invitation

    Revoke an IT contact's invitation

  • Enroll An Authentication Factor

    Enroll an authentication factor

  • Challenge Factor

    Challenge Factor

  • Enroll Factor

    Enroll Factor

  • Verify Challenge

    Verify Challenge

  • Verify Organization Domain

    Initiates verification process for an Organization Domain.

  • Deactivate Organization Membership

    Deactivates an `active` organization membership. Emits an [organization_membership.updated](https://workos.com/events/organization-membership) event upon successful deactivation. - Deactivating an `inactive` membership is a no-op and does not emit an event. - Deactivating a `pending` membership returns an error. This membership should be [deleted](https://workos.com/reference/authkit/organization-membership/delete) instead. See the [membership management documentation](https://workos.com/authkit/users-organizations/organizations/membership-management) for additional details.

  • Reactivate Organization Membership

    Reactivates an `inactive` organization membership, retaining the pre-existing role(s). Emits an [organization_membership.updated](https://workos.com/events/organization-membership) event upon successful reactivation. - Reactivating an `active` membership is a no-op and does not emit an event. - Reactivating a `pending` membership returns an error. The user needs to [accept the invitation](https://workos.com/authkit/invitations) instead. See the [membership management documentation](https://workos.com/authkit/users-organizations/organizations/membership-management) for additional details.

  • Reset The Password

    Reset the password

  • Revoke Session

    Revoke Session

  • Read An Object By ID

    Read an object by ID

  • Read An Object By Name

    Read an object by name

  • Describe An Object

    Describe an object

  • Decrypt A Data Key

    Decrypt a data key

  • Re-encrypt A Data Key

    Re-encrypt a data key

  • Approve A Waitlist Entry

    Approve a waitlist entry

  • Deny A Waitlist Entry

    Deny a waitlist entry

Set Up Your WorkOS MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to WorkOS in under 10 lines of code.

MCP Clients

Claude Desktop setup guide
Claude Code setup guide
Cursor setup guide
Goose setup guide

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More developer MCP Servers

Workiva

266+ actions

PingOne

124+ actions

Absolute Software

119+ actions

SonarQube Cloud

102+ actions

Zoho Sprints

87+ actions

Manufact

71+ actions

Mistral AI

68+ actions

All developer MCP Servers →

Platform Resources

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What Hundreds of Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.

14 min read

WorkOS MCP Server FAQ

Does StackOne have a WorkOS MCP server?
Yes. StackOne offers a hosted WorkOS MCP server with 234 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
WorkOS MCP server vs direct API integration — what's the difference?
A WorkOS MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling WorkOS. A WorkOS MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling WorkOS at runtime. StackOne provides both.
How does WorkOS authentication work for AI agents?
WorkOS authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own WorkOS account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are WorkOS MCP tools vulnerable to prompt injection?
Yes — WorkOS MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a WorkOS agent and how do I avoid it?
Context bloat happens when WorkOS tool schemas and API responses eat your WorkOS agent's memory, preventing it from reasoning effectively. A single WorkOS query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my WorkOS agent can access?
Yes — you can limit which actions your WorkOS agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my WorkOS MCP server?
Yes — you can create custom agent actions for your WorkOS MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research WorkOS's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a WorkOS MCP server?
Skip a WorkOS MCP server if your integration is purely software-to-software — direct WorkOS API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call WorkOS actions at runtime.
What AI frameworks and AI clients does the StackOne WorkOS MCP server support?
The StackOne WorkOS MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo