# WorkOS MCP

> Lets your agent manage your WorkOS workspace: organizations, users, SSO connections, Directory Sync, AuthKit branding and more.

WorkOS's own hosted MCP server for managing your WorkOS workspace. Your agent reads and changes the same dashboard data you can, such as organizations, users, SSO connections, directories and branding, by calling the WorkOS API as you.

What you can do with it
- Set up organizations and invite users, one at a time or from a list
- Find out why an organization is having trouble signing in with SSO
- Audit SSO connections and Directory Sync, such as draft connections or directories that haven't synced
- Restyle your AuthKit sign-in page, for example to match a screenshot of your site
- Review recent suspicious sign-in attempts and where they came from
- Manage webhooks, feature flags and audit log streams, such as a Datadog stream

How it connects
WorkOS hosts it at https://mcp.workos.com/mcp over streamable HTTP. There's no API key to paste: the first time you connect, your agent opens a WorkOS consent screen where you sign in and approve access (OAuth through WorkOS Connect). WorkOS documents setup for ChatGPT, Claude and more, and its CLI can add it for you with workos mcp install.

Good to know
- It acts as you: it inherits your dashboard role and can only do what your account can do, so a read-only role can't change anything.
- It works in one environment at a time, starts in a sandbox environment and only touches production when you say so.
- Irreversible operations, such as deleting an organization, connection or directory, first describe what they'll destroy and need an explicit confirmation.
- API keys and client secrets are stripped from responses before they reach your agent.
- Team admins can turn MCP off, block production access or make it read-only for the whole team.
- It can't impersonate users, mint or rotate credentials, or delete your WorkOS team, and it works with one team at a time.

- Type: Plugin
- Made by: Workos
- Category: Security
- Formats: Remote MCP
- Version: 1.0.0
- Website: https://workos.com/docs/mcp
- Source: https://github.com/workos/skills/tree/HEAD/mcp
- Page: https://pluginboard.ai/plugins/workos-mcp

## Works with

- ChatGPT
- Claude
- Muse
- Grok Bot
- Gemini
- Grok
- GitHub Copilot
- Cursor
- Claude Code
- Codex
- Antigravity
- Gemini CLI
- Replit
- OpenClaw
- OpenCode
- Hermes Agent

## Install

### ChatGPT

In ChatGPT on the web: Plugins → + → Add custom MCP server, then paste https://mcp.workos.com/mcp under Connection. Business and Enterprise plans; Pro can add read-only servers.

### Claude

In Claude (web or desktop): Customize → Connectors → Add custom connector, then paste https://mcp.workos.com/mcp

### Muse

In Muse: In a Muse chat, ask it to create a custom connector for the MCP server at https://mcp.workos.com/mcp. Then tap Connect on the card it shows and sign in, or add your key.

### Grok Bot

In Grok Bot: In a chat with your Bot, say "Add this MCP server: https://mcp.workos.com/mcp". It confirms the details with you and sets it up, and the tools are ready from your next message.

### Gemini

In Gemini: At gemini.google.com: Settings → Connected Apps → Add a custom app, then paste https://mcp.workos.com/mcp

### Grok

In Grok on the web: At grok.com/connectors: New Connector → Custom, then enter https://mcp.workos.com/mcp and sign in if it asks.

### GitHub Copilot

Add to VS Code: vscode:mcp/install?%7B%22name%22%3A%22workos-mcp%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.workos.com%2Fmcp%22%7D

Copilot CLI:

```shell
copilot mcp add --transport http workos-mcp https://mcp.workos.com/mcp
```

### Cursor

Add to Cursor: cursor://anysphere.cursor-deeplink/mcp/install?name=workos-mcp&config=eyJ1cmwiOiJodHRwczovL21jcC53b3Jrb3MuY29tL21jcCJ9

Add to .cursor/mcp.json:

```json
{
  "mcpServers": {
    "workos-mcp": {
      "url": "https://mcp.workos.com/mcp"
    }
  }
}
```

### Claude Code

Run in your terminal:

```shell
claude mcp add --transport http workos-mcp https://mcp.workos.com/mcp
```

### Codex

Run in your terminal:

```shell
codex mcp add workos-mcp --url https://mcp.workos.com/mcp
```

### Antigravity

Add to ~/.gemini/config/mcp_config.json:

```json
{
  "mcpServers": {
    "workos-mcp": {
      "url": "https://mcp.workos.com/mcp"
    }
  }
}
```

### Gemini CLI

Run in your terminal:

```shell
gemini mcp add --transport http workos-mcp https://mcp.workos.com/mcp
```

### Replit

In Replit: At replit.com/integrations, open MCP Servers → + Add MCP server, paste https://mcp.workos.com/mcp (add any headers under Advanced settings), then click Test & save.

### OpenClaw

Run in your terminal:

```shell
openclaw mcp add workos-mcp --url https://mcp.workos.com/mcp --transport streamable-http
```

If it needs a key or sign-in: For https://mcp.workos.com/mcp, add --header NAME=value for each header it needs, or --auth oauth and then run openclaw mcp login workos-mcp.

### OpenCode

Run in your terminal:

```shell
opencode mcp add workos-mcp --url https://mcp.workos.com/mcp
```

If it needs a key: For https://mcp.workos.com/mcp, add --header 'NAME=value' for each header it needs. Add --global to use it in every project.

### Hermes Agent

Run in your terminal:

```shell
hermes mcp add workos-mcp --url https://mcp.workos.com/mcp
```

Add to ~/.hermes/config.yaml:

```json
{
  "mcp_servers": {
    "workos-mcp": {
      "url": "https://mcp.workos.com/mcp"
    }
  }
}
```

If it signs in with OAuth: If https://mcp.workos.com/mcp asks you to sign in, add --auth oauth to the command, or auth: oauth to its entry.

---
From Pluginboard (https://pluginboard.ai).