MoreAI.tools
W
WorkOS MCP
43
Stack Score
Editorial pick✓ Verified workingMCP server
WorkOS MCP logo

WorkOS MCP

Enterprise SSO + SCIM + Directory Sync via WorkOS.

Try WorkOS MCP

Best for

Best for SaaS engineering teams shipping enterprise SSO + SCIM.

At a glance

Pricing
open-source
Setup time
25 minutes
Learning curve
moderate
Last verified
5/27/2026

What we love

  • ✓WorkOS-maintained
  • ✓Strong enterprise-readiness add-on
  • ✓Solid governance surface

Where it falls short

  • −WorkOS account needed
  • −Some features priced per connection
  • −Best paired with own app

Install & connect

Copy-paste ready

Install
shell
npx -y mcp-remote https://workos.run.tools
Config — Claude Desktop
json
{
  "mcpServers":{"workos":{"command":"npx","args":["-y","mcp-remote","https://workos.run.tools"]}}
}
Config — Claude Code
shell
claude mcp add --transport http workos https://workos.run.tools

Pricing

✓ Pricing verified Jun 14, 2026

1 tier

Open-source

$0

perpetual

  • ✓MIT

Overview

MCP server for WorkOS — SSO + SCIM + Directory Sync + Magic Link + Admin Portal ops. WorkOS API key.

Key features

  • ●SSO + SAML
  • ●SCIM + Directory Sync
  • ●Magic Link
  • ●Admin Portal
  • ●API key

Exposed tools

The MCP-tool names this server exposes. Your agent can invoke any of these when this server is connected.

  • api_keys.validations.create
    Validate an API key value.
  • audit_logs.actions.list
    List all Audit Log actions in current environment.
  • audit_logs.actions.schemas.list
    List schemas for an Audit Log action.
  • audit_logs.actions.schemas.create
    Create a new Audit Log schema.
  • audit_logs.events.create
    Create an Audit Log Event (idempotent).
  • audit_logs.exports.create
    Create an Audit Log Export for an organization.
  • audit_logs.exports.get
    Get an Audit Log Export (URL expires after 10 min).
  • auth.factors.get
    Get an Authentication Factor.
  • auth.factors.delete
    Permanently delete an Authentication Factor.
  • authorization.organization_memberships.check.create
    Check if an org membership has a specific permission on a resource.
  • authorization.organization_memberships.resources.list
    List child resources where an org membership has a permission.
  • authorization.organization_memberships.role_assignments.list
    List role assignments for an org membership.
  • authorization.organization_memberships.role_assignments.create
    Assign a role to an org membership on a resource.
  • authorization.organization_memberships.role_assignments.delete
    Remove a role assignment by ID.
  • authorization.organizations.roles.list
    List roles for an organization.
  • authorization.organizations.roles.create
    Create a new custom organization role.
  • authorization.organizations.roles.get
    Get a role by slug.
  • authorization.organizations.roles.update
    Update a custom org role.
  • authorization.organizations.roles.delete
    Delete a custom org role.
  • ... +107 more
    See vendor docs for the full tool list.

Best use cases

Enterprise readiness

Let Claude operate SSO + SCIM connections inside an enterprise-grade SaaS.

Directory sync

Manage Directory Sync mappings via chat.

Integrations

WorkOS
Okta
Azure AD
Google Workspace
SAML providers

Similar tools

See all security →
1Password
53
Password manager + secrets for teams and enterprise.
Bitwarden
52
Open-source password manager.
Dashlane
52
Password manager + dark-web monitoring + VPN.
Compare side-by-side
WorkOS MCP vs 1Password vs Bitwarden
Pros, cons, pricing, role-fit — all on one page.
Open comparison

One AI Stack pick every week.

The tool we’d pay for this week, why we’d pay for it, and what we’d skip. No promo spam.