Security Guidance
Security scan passedAnthropic's security review for Claude Code: flags injection, XSS, secrets and more as Claude edits, finishes a turn and commits.

Lets your agent manage your WorkOS workspace: organizations, users, SSO connections, Directory Sync, AuthKit branding and more.
by Workos· SecurityUnclaimed · Yours? Claim it
4 images
About
WorkOS's own hosted MCP server for managing your WorkOS workspace. Your agent reads and changes the same dashboard data you can, such as organizations, users, SSO connections, directories and branding, by calling the WorkOS API as you. What you can do with it - Set up organizations and invite users, one at a time or from a list - Find out why an organization is having trouble signing in with SSO - Audit SSO connections and Directory Sync, such as draft connections or directories that haven't synced - Restyle your AuthKit sign-in page, for example to match a screenshot of your site - Review recent suspicious sign-in attempts and where they came from - Manage webhooks, feature flags and audit log streams, such as a Datadog stream How it connects WorkOS hosts it at https://mcp.workos.com/mcp over streamable HTTP. There's no API key to paste: the first time you connect, your agent opens a WorkOS consent screen where you sign in and approve access (OAuth through WorkOS Connect). WorkOS documents setup for ChatGPT, Claude and more, and its CLI can add it for you with workos mcp install. Good to know - It acts as you: it inherits your dashboard role and can only do what your account can do, so a read-only role can't change anything. - It works in one environment at a time, starts in a sandbox environment and only touches production when you say so. - Irreversible operations, such as deleting an organization, connection or directory, first describe what they'll destroy and need an explicit confirmation. - API keys and client secrets are stripped from responses before they reach your agent. - Team admins can turn MCP off, block production access or make it read-only for the whole team. - It can't impersonate users, mint or rotate credentials, or delete your WorkOS team, and it works with one team at a time.
Once it’s added
“Set up a new organization for Acme Corp and invite everyone in acme_employees.csv.”
“Help me understand why org_123 is having trouble signing in with SSO.”
Before you add it
Reads only
Organizations, users, SSO connections and directories · Recent sign-in activity, such as suspicious attempts · Who you're connected as, your role and the environments you can reach
Makes changes · your agent can ask first
Creates organizations and invites users · Changes SSO connections, AuthKit branding, webhooks and feature flags · Sets up audit log streams · Deletes only after an explicit confirmation
From people who use it
Step by step
Nothing new reaches your agent until a person has looked at it.
Plugins people install alongside WorkOS MCP.
No reviews yet. Used WorkOS MCP? Say how it went.
Write a reviewA hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
Add to VS Codecopilot mcp add --transport http workos-mcp https://mcp.workos.com/mcp
A hosted server: nothing runs on your machine.
Add to Cursor.cursor/mcp.json{
"mcpServers": {
"workos-mcp": {
"url": "https://mcp.workos.com/mcp"
}
}
}A hosted server: nothing runs on your machine.
claude mcp add --transport http workos-mcp https://mcp.workos.com/mcp
A hosted server: nothing runs on your machine.
codex mcp add workos-mcp --url https://mcp.workos.com/mcp
A hosted server: nothing runs on your machine.
~/.gemini/config/mcp_config.json{
"mcpServers": {
"workos-mcp": {
"url": "https://mcp.workos.com/mcp"
}
}
}A hosted server: nothing runs on your machine.
gemini mcp add --transport http workos-mcp https://mcp.workos.com/mcp
A hosted server: nothing runs on your machine.
A hosted server: nothing runs on your machine.
openclaw mcp add workos-mcp --url https://mcp.workos.com/mcp --transport streamable-http
A hosted server: nothing runs on your machine.
opencode mcp add workos-mcp --url https://mcp.workos.com/mcp
A hosted server: nothing runs on your machine.
hermes mcp add workos-mcp --url https://mcp.workos.com/mcp
~/.hermes/config.yaml{
"mcp_servers": {
"workos-mcp": {
"url": "https://mcp.workos.com/mcp"
}
}
}Scanned and passed · checked 7 h ago
“Invite [email protected] to org_123 as an admin.”
“List every organization with a draft SSO connection, and flag any directories that haven't synced in 24 hours.”
“Here's a screenshot of our marketing site. Make our AuthKit sign-in page match it.”
“Show me recent suspicious sign-in attempts and where they came from.”
Scanned on every change, and again when our rules improve.
Tell us and a person on the trust team will look at it. Or email [email protected].
Nobody has shared how they use WorkOS MCP yet.
Security scan
Passed
Safe to install in every agent it supports. Runs remotely on mcp.workos.com · needs your sign-in.
Plugins people install alongside WorkOS MCP.
Anthropic's security review for Claude Code: flags injection, XSS, secrets and more as Claude edits, finishes a turn and commits.
Equips your coding agent with SAST, dependency scanning, a phased hardening workflow and STRIDE threat-modeling skills.
Alireza Rezvani's Claude Code hook that stops Claude before it writes common security anti-patterns, such as eval, pickle or SQL f-strings.
Microsoft's skills for Azure Data Explorer: build Kusto graphs, compose IRQL threat hunts and turn results into visual graphs.