WorkOS

WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterprise SSO (SAML/OIDC), Directory Sync (SCIM 2.0), Multi-Factor Authentication, Audit Logs, Admin Portal, Fine-Grained Authorization (FGA, formerly Warrant), Radar bot/fraud protection, and an emerging suite of agent-oriented surfaces (Pipes, MCP Auth, auth.md).

WorkOS publishes 41 APIs on the APIs.io network, including Admin Portal API, API Keys API, Application.client Secrets API, and 38 more. Tagged areas include Authentication, Identity Provider, SSO, SAML, and OIDC.

The WorkOS catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

WorkOS’s developer surface includes authentication, documentation, API reference, engineering blog, changelog, pricing, CLI, and 71 more developer resources.

🌐 Visit website 📡 Source on GitHub

59.6/100 strong ▬ flat Agent 59/100 agent ready Front door AI 4/6 moderate open core · MIT Full breakdown ↓
scored 2026-09-25 · rubric v0.23.0

AccessPaid

1 APIs 1 MCP Servers 2 Agent Skills 21 Features

Authentication Identity Provider SSO SAML OIDC SCIM Directory Sync Authorization FGA Audit Logs MFA B2B SaaS Agents MCP Identity Federation

What this lets a business do 4

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

authorizationgroupsmulti-factor-authmulti-factor-auth.challengespermissionssso

POST /auth/factors/enroll POST /auth/factors/{id}/challenge POST /user_management/users/{userlandUserId}/auth_factors POST /auth/challenges/{id}/verify

Software Release & Deployment Management

BC-4210

feature-flagsfeature-flags.targetsorganizations.feature-flagsuser-management.users.feature-flags

GET /feature-flags PUT /feature-flags/{slug}/enable POST /feature-flags/{slug}/targets/{resourceId} GET /organizations/{organizationId}/feature-flags

Developer Platform & API Ecosystem Management

BC-4270

application.client-secretsorganizations.api_keyswebhooks

POST /webhook_endpoints PATCH /webhook_endpoints/{id} POST /organizations/{organizationId}/api_keys POST /connect/applications/{id}/client_secrets

SaaS Tenant Management

BC-4230

organization-domainsorganizations

POST /organizations DELETE /organizations/{id} POST /organization_domains POST /organization_domains/{id}/verify

Kin Score

Kin Score How this is scored →
scored 2026-09-25 · rubric v0.23.0

Composite quality — 59.6/100 · strong

Contract Quality 10.2 / 16

Developer Ergonomics 8.1 / 13

Access Clarity 7.5 / 13

Operational Transparency 5.6 / 8

Contract Governance 2.1 / 8

Discoverability 4.1 / 7

Regulatory Posture 4.1 / 15

Open Source Surface 2.5 / 10

Create-or-Update Ergonomics 3.9 / 10

Agent readiness — 59/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 9 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 6 / 6

Protected Resource Metadata 5 / 5

Registration Without a Human 6 / 6

Agentic Commerce Well-Known Document 0 / 5

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Open Source Surface applies to this provider. This product is open source and we read its repository directly, so Open Source Surface carries 10 points of the composite. It is scored from what the repository actually publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the provider rather than inferred from our own catalog pointers. This facet adds; nothing was taken away to make room for it. An open-source project is not excused from the commercial facets, because exemption would strip it of the points it does earn. If we have the wrong repository, or this product is not open source, say so on your provider repo and we will drop the facet rather than have you publish against it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 65 points between them, because both conditional facets apply and carry 35 points together. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 65% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/workos: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

WorkOS is an area vendor: providers adopt it to run part of their developer surface. This is the Kin Score checks its features can move for a provider that adopts it, what each one really earns, and what it earns nothing for.

identitycapability map4 features checked 2026-09-25 · rubric v0.22.0

AuthKit on a paid custom domain reads as served auth (0.9), served delegated identity and — with the legacy DCR switched on — dynamic client registration, because its root discovery documents carry all three. On the default authkit.app domain it earns none of them, since that host is not the provider’s. WorkOS is not detectable from the registry today, so this profile stays capability-only. The MCP server’s protected-resource metadata and every OpenAPI check remain the provider’s work.

Access Clarity5.0 of 38 pts

Agent Readiness21.0 of 139 pts

Contract Quality4.0 of 211 pts

Check	Earns	Through
Machine-Readable Auth Agent ReadinessBuy the custom domain, point AuthKit at a subdomain it owns, and get that host onto its record; an authkit.app subdomain is not a provider-owned host.	9.0 of 10	Root discovery documents on the AuthKit domain
Delegated User Identity Agent ReadinessSame custom-domain host on record; authorization_code is in grant_types_supported.	6.0 of 6	Root discovery documents on the AuthKit domain
Registration Without a Human Agent ReadinessSame host on record, and enable DCR in the dashboard (WorkOS treats it as legacy behind CIMD).	6.0 of 6	AuthKit as MCP authorization server
Self-service sign-up Access ClarityDeclare the AuthKit sign-up URL as a SignUp or Login pointer in apis.yml.	5.0 of 5	AuthKit hosted UI
Enumerates OAuth scopessaturated Contract QualityOnly if the provider’s own OpenAPI declares oauth2 and enumerates its scopes.	4.0 of 4	AuthKit as MCP authorization server

Across 8977 providers that publish a contract, adopting WorkOS would move 8574. Median lift: composite +2.4 (90th percentile +2.7), agent readiness +12.6 (+14.6). Conditional rows excluded.

What WorkOS ships that earns nothing (1)

Root discovery documents on the AuthKit domain — Authorization-server and OIDC metadata are not among the documents that check reads.

A model, not a score. Adopting this vendor changes a provider's Kin Score only when the provider publishes the resulting artifacts on its own surface; nothing here writes a score, and no sponsorship or partnership can. The rating is not for sale → · Full vendor facets artifact

Standards implemented 1

Interfaces this provider implements that became standards by being copied rather than ratified. Each is profiled by the API Commons, and the evidence column says how the claim was established — not that it was made.

SCIM 2.0

prose — states compatibility; nothing published to check it against

5 core of 24 operations graded · api-commons/identity

APIs 41

Individual APIs this provider publishes, each with its own machine-readable definition.

WorkOS Admin Portal API

Endpoints for the Admin Portal API.

WorkOS API Keys API

Manage API keys for environments.

WorkOS Application.client Secrets API

Manage client secrets for Connect Applications.

WorkOS Applications API

Manage Connect Applications.

WorkOS Audit Logs API

Create and query audit log events.

WorkOS Authorization API

Authorization and access control.

WorkOS Connections API

Manage SSO connections.

WorkOS Directories API

Manage directories.

WorkOS Directory Groups API

Manage directory groups.

WorkOS Directory Users API

Manage directory users.

WorkOS Events API

Query events and event streams.

WorkOS Feature Flags API

Manage feature flags.

WorkOS Feature Flags.targets API

Manage feature flag targets.

WorkOS Groups API

Organize and manage user groups within organizations.

WorkOS Multi Factor Auth API

Multi-factor authentication factor management.

WorkOS Multi Factor Auth.challenges API

Multi-factor authentication challenge verification.

WorkOS Organization Domains API

Manage organization domains.

WorkOS Organizations.api Keys API

Manage organization-scoped API keys.

WorkOS Organizations API

Manage organizations.

WorkOS Organizations.feature Flags API

Manage organization-scoped feature flags.

WorkOS Permissions API

Manage permissions.

WorkOS Pipes API

Data integration endpoints.

WorkOS Radar API

Radar fraud detection.

WorkOS SSO API

Single Sign-On endpoints.

WorkOS User Management.authentication API

User authentication endpoints.

WorkOS User Management.cors Origins API

Manage CORS origins for user management.

WorkOS User Management.data Providers API

Manage data providers.

WorkOS User Management.invitations API

Manage user invitations.

WorkOS User Management.jwt Template API

Manage JWT templates.

WorkOS User Management.magic Auth API

Magic auth endpoints.

WorkOS User Management.multi Factor Authentication API

Multi-factor authentication endpoints.

WorkOS User Management.organization Membership API

Manage user organization memberships.

WorkOS User Management.organization Membership.groups API

Manage groups for a user organization membership.

WorkOS User Management.redirect Uris API

Manage redirect URIs.

WorkOS User Management.session Tokens API

Session token verification keys.

WorkOS User Management.users API

Manage users.

WorkOS User Management.users.authorized Applications API

Manage authorized applications for users.

WorkOS User Management.users.feature Flags API

Manage user-scoped feature flags.

WorkOS Webhooks API

Manage webhooks.

WorkOS Widgets API

Widget endpoints.

WorkOS-connect API

A unified interface that simplifies authentication and authorization across customers, partners, and external SaaS tools.

Scroll for all 41

Postman Collections 41

Ready-to-run Postman collections for exercising this provider's APIs.

WorkOS admin-portal API

POSTMAN

WorkOS admin-portal api_keys API

POSTMAN

WorkOS admin-portal application.client-secrets API

POSTMAN

WorkOS admin-portal applications API

POSTMAN

WorkOS admin-portal audit-logs API

POSTMAN

WorkOS admin-portal authorization API

POSTMAN

WorkOS admin-portal connections API

POSTMAN

WorkOS admin-portal directories API

POSTMAN

WorkOS admin-portal directory-groups API

POSTMAN

WorkOS admin-portal directory-users API

POSTMAN

WorkOS admin-portal events API

POSTMAN

WorkOS admin-portal feature-flags API

POSTMAN

WorkOS admin-portal feature-flags.targets API

POSTMAN

WorkOS admin-portal groups API

POSTMAN

WorkOS admin-portal multi-factor-auth API

POSTMAN

WorkOS admin-portal multi-factor-auth.challenges API

POSTMAN

WorkOS admin-portal organization-domains API

POSTMAN

WorkOS admin-portal organizations.api_keys API

POSTMAN

WorkOS admin-portal organizations API

POSTMAN

WorkOS admin-portal organizations.feature-flags API

POSTMAN

WorkOS admin-portal permissions API

POSTMAN

WorkOS admin-portal pipes API

POSTMAN

WorkOS admin-portal radar API

POSTMAN

WorkOS admin-portal sso API

POSTMAN

WorkOS admin-portal user-management.authentication API

POSTMAN

WorkOS admin-portal user-management.cors-origins API

POSTMAN

WorkOS admin-portal user-management.data-providers API

POSTMAN

WorkOS admin-portal user-management.invitations API

POSTMAN

WorkOS admin-portal user-management.jwt-template API

POSTMAN

WorkOS admin-portal user-management.magic-auth API

POSTMAN

WorkOS admin-portal user-management.multi-factor-authentication API

POSTMAN

WorkOS admin-portal user-management.organization-membership API

POSTMAN

WorkOS admin-portal user-management.organization-membership.groups API

POSTMAN

WorkOS admin-portal user-management.redirect-uris API

POSTMAN

WorkOS admin-portal user-management.session-tokens API

POSTMAN

WorkOS admin-portal user-management.users API

POSTMAN

WorkOS admin-portal user-management.users.authorized-applications API

POSTMAN

WorkOS admin-portal user-management.users.feature-flags API

POSTMAN

WorkOS admin-portal webhooks API

POSTMAN

WorkOS admin-portal widgets API

POSTMAN

WorkOS admin-portal workos-connect API

POSTMAN

Scroll for all 41

Open Collections 43

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

WorkOS admin-portal API

OPEN COLLECTION

WorkOS admin-portal api_keys API

OPEN COLLECTION

WorkOS admin-portal application.client-secrets API

OPEN COLLECTION

WorkOS admin-portal applications API

OPEN COLLECTION

WorkOS admin-portal audit-logs API

OPEN COLLECTION

WorkOS admin-portal authorization API

OPEN COLLECTION

WorkOS admin-portal connections API

OPEN COLLECTION

WorkOS admin-portal directories API

OPEN COLLECTION

WorkOS admin-portal directory-groups API

OPEN COLLECTION

WorkOS admin-portal directory-users API

OPEN COLLECTION

WorkOS admin-portal events API

OPEN COLLECTION

WorkOS admin-portal feature-flags API

OPEN COLLECTION

WorkOS admin-portal feature-flags.targets API

OPEN COLLECTION

WorkOS admin-portal groups API

OPEN COLLECTION

WorkOS admin-portal multi-factor-auth API

OPEN COLLECTION

WorkOS admin-portal multi-factor-auth.challenges API

OPEN COLLECTION

WorkOS admin-portal organization-domains API

OPEN COLLECTION

WorkOS admin-portal organizations.api_keys API

OPEN COLLECTION

WorkOS admin-portal organizations API

OPEN COLLECTION

WorkOS admin-portal organizations.feature-flags API

OPEN COLLECTION

WorkOS admin-portal permissions API

OPEN COLLECTION

WorkOS admin-portal pipes API

OPEN COLLECTION

WorkOS admin-portal radar API

OPEN COLLECTION

WorkOS admin-portal sso API

OPEN COLLECTION

WorkOS admin-portal user-management.authentication API

OPEN COLLECTION

WorkOS admin-portal user-management.cors-origins API

OPEN COLLECTION

WorkOS admin-portal user-management.data-providers API

OPEN COLLECTION

WorkOS admin-portal user-management.invitations API

OPEN COLLECTION

WorkOS admin-portal user-management.jwt-template API

OPEN COLLECTION

WorkOS admin-portal user-management.magic-auth API

OPEN COLLECTION

WorkOS admin-portal user-management.multi-factor-authentication API

OPEN COLLECTION

WorkOS admin-portal user-management.organization-membership API

OPEN COLLECTION

WorkOS admin-portal user-management.organization-membership.groups API

OPEN COLLECTION

WorkOS admin-portal user-management.redirect-uris API

OPEN COLLECTION

WorkOS admin-portal user-management.session-tokens API

OPEN COLLECTION

WorkOS admin-portal user-management.users API

OPEN COLLECTION

WorkOS admin-portal user-management.users.authorized-applications API

OPEN COLLECTION

WorkOS admin-portal user-management.users.feature-flags API

OPEN COLLECTION

WorkOS admin-portal webhooks API

OPEN COLLECTION

WorkOS admin-portal widgets API

OPEN COLLECTION

WorkOS admin-portal workos-connect API

OPEN COLLECTION

WorkOS

OPEN COLLECTION

Scroll for all 43

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Pipes MCP Server

MCP SERVER

Agent Skills 2

Packaged agent skills for driving this provider's APIs from an AI assistant.

workos-widgets

AGENT SKILL

workos

AGENT SKILL

Pricing Plans 2

Published pricing tiers and plan structures.

Workos Plans Pricing

8 plans

PLANS

Workos Price Estimates

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Workos Rate Limits

15 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Workos Finops

FINOPS

Features 21

Notable capabilities this provider offers.

Tagline: "Your app, Enterprise Ready."

AuthKit: free up to 1M MAU, then $2,500/mo per additional 1M

Single Sign-On: tiered $50-$125 per active SAML/OIDC connection (1-200+ tiers)

Directory Sync (SCIM): tiered $50-$125 per connection mirroring SSO

Audit Logs: $125/mo per SIEM destination + $99/mo per 1M events retained

Radar: 1,000 checks free, then $100/mo per 50K checks

Custom Domain: $99/mo

Scale Support: $1,000/mo; Enterprise custom

REST base URL: https://api.workos.com (staging: api.workos-test.com)

Default rate limit: 600 req/min; auth 60 req/min; Directory Sync 10/sec

50+ identity provider integrations (Okta, Entra, Google Workspace, JumpCloud, OneLogin, PingFederate, etc.)

SCIM 2.0 directory providers: Azure SCIM, Okta SCIM, BambooHR, Workday, HiBob, Rippling, JumpCloud, OneLogin, PingFederate, S/FTP, generic SCIM 2.0

Bearer token auth (sk_test_*/sk_live_*); supports organization-scoped and user-scoped API keys

Sealed sessions, magic auth, passkeys, social, password, enterprise SSO

FGA (formerly Warrant): relationship-based authorization, custom roles, edge agent

Audit Logs stream to Splunk, Datadog, Elastic and other SIEMs

MCP Auth + Resource Indicators (RFC 8707) for per-server scoping

Pipes: human-approved, provider-scoped credentials for AI agents

auth.md open protocol: agents register for services via Markdown at a domain

Self-service Admin Portal (white-label) for IT admins

SOC 2 Type 2, GDPR, HIPAA-eligible

Scroll for all 21

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Workos Context

18 classes · 5 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

WorkOS API Rules

5 rules · 4 warnings 1 info

SPECTRAL

WorkOS API Rules

13 rules · 4 errors 6 warnings 3 info

SPECTRAL

JSON Schema 162

Standalone JSON Schema definitions for this provider's data models.

AddRolePermissionDto

1 properties

JSON SCHEMA

ApiKey

9 properties

JSON SCHEMA

ApiKeyValidationResponse

1 properties

JSON SCHEMA

AssignRoleDto

0 properties

JSON SCHEMA

WorkOS Audit Log Event

9 properties

JSON SCHEMA

AuditLogActionJson

5 properties

JSON SCHEMA

AuditLogConfiguration

4 properties

JSON SCHEMA

AuditLogEventActorDto

4 properties

JSON SCHEMA

AuditLogEventContextDto

2 properties

JSON SCHEMA

AuditLogEventCreateResponse

1 properties

JSON SCHEMA

AuditLogEventDto

7 properties

JSON SCHEMA

AuditLogEventIngestionDto

2 properties

JSON SCHEMA

AuditLogEventTargetDto

4 properties

JSON SCHEMA

AuditLogExportCreationDto

8 properties

JSON SCHEMA

AuditLogExportJson

6 properties

JSON SCHEMA

AuditLogSchemaActorDto

1 properties

JSON SCHEMA

AuditLogSchemaDto

3 properties

JSON SCHEMA

AuditLogSchemaJson

6 properties

JSON SCHEMA

AuditLogSchemaTargetDto

2 properties

JSON SCHEMA

AuditLogsRetentionJson

1 properties

JSON SCHEMA

AuthenticationChallenge

7 properties

JSON SCHEMA

AuthenticationChallengeVerifyResponse

2 properties

JSON SCHEMA

AuthenticationFactor

8 properties

JSON SCHEMA

AuthenticationFactorEnrolled

8 properties

JSON SCHEMA

AuthorizationCheck

1 properties

JSON SCHEMA

AuthorizationPermission

9 properties

JSON SCHEMA

AuthorizationPermissionList

3 properties

JSON SCHEMA

AuthorizationResource

10 properties

JSON SCHEMA

AuthorizationResourceList

3 properties

JSON SCHEMA

AuthorizedConnectApplicationList

3 properties

JSON SCHEMA

ChallengeAuthenticationFactorDto

1 properties

JSON SCHEMA

CheckAuthorizationDto

0 properties

JSON SCHEMA

ConfirmEmailChangeDto

1 properties

JSON SCHEMA

ConnectApplication

0 properties

JSON SCHEMA

ConnectApplicationList

3 properties

JSON SCHEMA

ConnectedAccount

8 properties

JSON SCHEMA

WorkOS SSO Connection

10 properties

JSON SCHEMA

ConnectionList

3 properties

JSON SCHEMA

CorsOriginResponse

5 properties

JSON SCHEMA

CreateApplicationSecretDto

0 properties

JSON SCHEMA

CreateAuthorizationPermissionDto

4 properties

JSON SCHEMA

CreateAuthorizationResourceDto

0 properties

JSON SCHEMA

CreateCorsOriginDto

1 properties

JSON SCHEMA

CreateGroupDto

2 properties

JSON SCHEMA

CreateGroupMembershipDto

1 properties

JSON SCHEMA

CreateM2MApplicationDto

5 properties

JSON SCHEMA

CreateOAuthApplicationDto

8 properties

JSON SCHEMA

CreateOrganizationApiKeyDto

2 properties

JSON SCHEMA

CreateOrganizationDomainDto

2 properties

JSON SCHEMA

CreateOrganizationRoleDto

4 properties

JSON SCHEMA

CreatePasswordResetDto

2 properties

JSON SCHEMA

CreatePasswordResetTokenDto

1 properties

JSON SCHEMA

CreateRedirectUriDto

1 properties

JSON SCHEMA

CreateRoleDto

4 properties

JSON SCHEMA

CreateUserApiKeyDto

3 properties

JSON SCHEMA

CreateUserlandMagicCodeAndReturnDto

2 properties

JSON SCHEMA

CreateUserlandUserDto

0 properties

JSON SCHEMA

CreateUserlandUserInviteOptionsDto

6 properties

JSON SCHEMA

CreateUserlandUserOrganizationMembershipDto

0 properties

JSON SCHEMA

CreateWebhookEndpointDto

2 properties

JSON SCHEMA

DataIntegrationAccessTokenResponse

0 properties

JSON SCHEMA

DataIntegrationAuthorizeUrlResponse

1 properties

JSON SCHEMA

DataIntegrationsListResponse

2 properties

JSON SCHEMA

DeviceAuthorizationResponse

6 properties

JSON SCHEMA

WorkOS Directory

9 properties

JSON SCHEMA

DirectoryGroup

9 properties

JSON SCHEMA

DirectoryGroupList

3 properties

JSON SCHEMA

DirectoryList

3 properties

JSON SCHEMA

DirectoryUser

19 properties

JSON SCHEMA

DirectoryUserList

3 properties

JSON SCHEMA

DirectoryUserWithGroups

20 properties

JSON SCHEMA

DomainVerificationIntentOptions

1 properties

JSON SCHEMA

EmailChange

5 properties

JSON SCHEMA

EmailVerification

8 properties

JSON SCHEMA

EnrollUserlandUserAuthenticationFactorDto

4 properties

JSON SCHEMA

EventContextActorDto

3 properties

JSON SCHEMA

EventContextDto

6 properties

JSON SCHEMA

EventList

3 properties

JSON SCHEMA

EventSchema

0 properties

JSON SCHEMA

ExternalAuthCompleteResponse

1 properties

JSON SCHEMA

WorkOS FGA Authorization Check

3 properties

JSON SCHEMA

Flag

11 properties

JSON SCHEMA

FlagList

3 properties

JSON SCHEMA

GenerateLinkDto

6 properties

JSON SCHEMA

Group

7 properties

JSON SCHEMA

GroupList

3 properties

JSON SCHEMA

IntentOptions

2 properties

JSON SCHEMA

JwksResponse

1 properties

JSON SCHEMA

JwtTemplate

4 properties

JSON SCHEMA

MagicAuth

8 properties

JSON SCHEMA

NewConnectApplicationSecret

7 properties

JSON SCHEMA

WorkOS Organization

8 properties

JSON SCHEMA

OrganizationApiKey

9 properties

JSON SCHEMA

OrganizationApiKeyList

3 properties

JSON SCHEMA

OrganizationApiKeyWithValue

10 properties

JSON SCHEMA

OrganizationDomainDataDto

2 properties

JSON SCHEMA

OrganizationDomainStandAlone

10 properties

JSON SCHEMA

OrganizationDto

6 properties

JSON SCHEMA

OrganizationList

3 properties

JSON SCHEMA

PaginationOrder

0 properties

JSON SCHEMA

PasswordReset

8 properties

JSON SCHEMA

PortalLinkResponse

1 properties

JSON SCHEMA

Profile

15 properties

JSON SCHEMA

RadarListEntryAlreadyPresentResponse

1 properties

JSON SCHEMA

RadarStandaloneResponse

5 properties

JSON SCHEMA

RedirectUri

6 properties

JSON SCHEMA

RedirectUriDto

2 properties

JSON SCHEMA

RemoveRoleDto

0 properties

JSON SCHEMA

ResendUserlandUserInviteOptionsDto

1 properties

JSON SCHEMA

ResetPasswordResponse

1 properties

JSON SCHEMA

Role

10 properties

JSON SCHEMA

RoleList

2 properties

JSON SCHEMA

SendEmailChangeDto

1 properties

JSON SCHEMA

SendVerificationEmailResponse

1 properties

JSON SCHEMA

SetRolePermissionsDto

1 properties

JSON SCHEMA

SlimRole

1 properties

JSON SCHEMA

SsoAuthorizeUrlResponse

1 properties

JSON SCHEMA

SsoIntentOptions

2 properties

JSON SCHEMA

SsoLogoutAuthorizeResponse

2 properties

JSON SCHEMA

SsoTokenResponse

5 properties

JSON SCHEMA

TokenQueryDto

4 properties

JSON SCHEMA

UpdateAuditLogsRetentionDto

1 properties

JSON SCHEMA

UpdateAuthorizationPermissionDto

2 properties

JSON SCHEMA

UpdateAuthorizationResourceDto

0 properties

JSON SCHEMA

UpdateGroupDto

2 properties

JSON SCHEMA

UpdateJwtTemplateDto

1 properties

JSON SCHEMA

UpdateOAuthApplicationDto

4 properties

JSON SCHEMA

UpdateOrganizationDto

7 properties

JSON SCHEMA

UpdateOrganizationRoleDto

2 properties

JSON SCHEMA

UpdateRoleDto

2 properties

JSON SCHEMA

UpdateUserlandUserDto

0 properties

JSON SCHEMA

UpdateUserlandUserOrganizationMembershipDto

0 properties

JSON SCHEMA

UpdateWebhookEndpointDto

3 properties

JSON SCHEMA

WorkOS User

12 properties

JSON SCHEMA

UserApiKey

9 properties

JSON SCHEMA

UserApiKeyList

3 properties

JSON SCHEMA

UserApiKeyWithValue

10 properties

JSON SCHEMA

UserConsentOption

4 properties

JSON SCHEMA

UserlandAuthenticateResponse

8 properties

JSON SCHEMA

UserlandRevokeSessionDto

2 properties

JSON SCHEMA

UserlandUser

13 properties

JSON SCHEMA

UserlandUserAuthenticationFactorEnrollResponse

2 properties

JSON SCHEMA

UserlandUserAuthenticationFactorList

3 properties

JSON SCHEMA

UserlandUserInvite

15 properties

JSON SCHEMA

UserlandUserList

3 properties

JSON SCHEMA

UserlandUserOrganizationMembership

12 properties

JSON SCHEMA

UserlandUserOrganizationMembershipBaseList

3 properties

JSON SCHEMA

UserlandUserOrganizationMembershipBaseWithUser

11 properties

JSON SCHEMA

UserlandUserOrganizationMembershipBaseWithUserList

3 properties

JSON SCHEMA

UserManagementLoginRequest

3 properties

JSON SCHEMA

UserObject

5 properties

JSON SCHEMA

UserRoleAssignment

7 properties

JSON SCHEMA

UserRoleAssignmentList

3 properties

JSON SCHEMA

ValidateApiKeyDto

1 properties

JSON SCHEMA

VaultByokKeyProvider

0 properties

JSON SCHEMA

VerifyEmailAddressDto

1 properties

JSON SCHEMA

VerifyEmailResponse

1 properties

JSON SCHEMA

WaitlistUser

7 properties

JSON SCHEMA

WebhookEndpointJson

8 properties

JSON SCHEMA

WebhookEndpointList

3 properties

JSON SCHEMA

WidgetSessionTokenDto

3 properties

JSON SCHEMA

WidgetSessionTokenResponse

1 properties

JSON SCHEMA

Scroll for all 162

JSON Structure 4

JSON Structure definitions describing this provider's data shapes.

Workos Audit Event Structure

0 properties

JSON STRUCTURE

Workos Organization Structure

0 properties

JSON STRUCTURE

Workos Structure

0 properties

JSON STRUCTURE

Workos User Structure

0 properties

JSON STRUCTURE

Examples 21

Example request and response payloads for these APIs.

Workos Auditlogeventscontroller Create Example

6 fields

EXAMPLE

Workos Auditlogexportscontroller Export Example

6 fields

EXAMPLE

Workos Auditlogexportscontroller Exports Example

6 fields

EXAMPLE

Workos Authenticationfactorscontroller Get Example

6 fields

EXAMPLE

Workos Authorizationroleassignmentscontroller Assignrole Example

6 fields

EXAMPLE

Workos Create Organization Example

6 fields

EXAMPLE

Workos Fga Check Example

6 fields

EXAMPLE

Workos Get User Example

6 fields

EXAMPLE

Workos List Connections Example

6 fields

EXAMPLE

Workos List Directories Example

6 fields

EXAMPLE

Workos List Directory Groups Example

6 fields

EXAMPLE

Workos List Directory Users Example

6 fields

EXAMPLE

Workos List Events Example

6 fields

EXAMPLE

Workos List Feature Flags Example

6 fields

EXAMPLE

Workos List Organization Memberships Example

6 fields

EXAMPLE

Workos List Organizations Example

6 fields

EXAMPLE

Workos Organizationscontroller Create Example

6 fields

EXAMPLE

Workos Organizationscontroller Updateorganization Example

6 fields

EXAMPLE

Workos Redirecturiscontroller Create Example

6 fields

EXAMPLE

Workos Send Magic Auth Example

6 fields

EXAMPLE

Workos Validate Api Key Example

6 fields

EXAMPLE

Scroll for all 21

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Workos Authentication

http · 1 scheme

SECURITY

Workos Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Workos Vulnerability Disclosure

disclosure policy published

SECURITY

Workos Trust Center

SOC 2, HIPAA, GDPR

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Workos Agentic Access

172 operations · 96 acting · 96 human-in-the-loop

172 operations · 96 acting

AGENTIC

Resources

Documentation 3

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

OpenAPI

OpenAPI

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

MCPServer

MCPServer

AgentSkills

AgentSkills

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

Vocabulary

Vocabulary

JSONLD

JSONLD

SpectralRules

SpectralRules

Build 48

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

GitHubOrganization

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

SDKs

CLI

Tools

Tools

Tools

Tools

Tools

Tools

Examples

Tools

Tools

Tools

Tools

Tools

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Examples

Scroll for all 48

Access & Security 4

Authentication, authorization, and security posture

TrustCenter

TrustCenter

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 5

Status, limits, changes, and where to get help

IssueTracker

Releases

ChangeLog

StatusPage

RateLimits

Commercial 4

Pricing, plans, and the legal terms of use

License

Pricing

Plans

FinOps

Company 3

The organization behind the API

Website

Website

Blog

Blog

LinkedIn

Other 5

Properties that don't map to a standard resource type

VendorFacets

CapabilityMap

Capabilities

Standards

StarterKit

Source (apis.yml)

aid: workos
name: WorkOS
description: WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterprise
  SSO (SAML/OIDC), Directory Sync (SCIM 2.0), Multi-Factor Authentication, Audit Logs, Admin Portal, Fine-Grained Authorization
  (FGA, formerly Warrant), Radar bot/fraud protection, and an emerging suite of agent-oriented surfaces (Pipes, MCP Auth,
  auth.md).
type: Index
deliveryModel:
  model: open-core
  license: MIT
  open_source: true
  commercial: true
  callable_host: true
  label: Open core · an OSS project plus a commercial hosted product
  confidence: high
  source:
  - license
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: paid
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Paid
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/workos.png
tags:
- Authentication
- Identity Provider
- SSO
- SAML
- OIDC
- SCIM
- Directory Sync
- Authorization
- FGA
- Audit Logs
- MFA
- B2B SaaS
- Agents
- MCP
- Identity Federation
url: https://raw.githubusercontent.com/api-evangelist/workos/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-09-16'
specificationVersion: '0.23'
apis:
- aid: workos:workos-admin-portal-api
  name: WorkOS Admin Portal API
  description: Endpoints for the Admin Portal API.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Admin Portal
  tags_raw:
  - admin-portal
  properties:
  - type: OpenAPI
    url: openapi/workos-admin-portal-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-api-keys-api
  name: WorkOS API Keys API
  description: Manage API keys for environments.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - APIKeys
  tags_raw:
  - api_keys
  properties:
  - type: OpenAPI
    url: openapi/workos-api-keys-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-application-client-secrets-api
  name: WorkOS Application.client Secrets API
  description: Manage client secrets for Connect Applications.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - application.client-secrets
  properties:
  - type: OpenAPI
    url: openapi/workos-application-client-secrets-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-applications-api
  name: WorkOS Applications API
  description: Manage Connect Applications.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Application
  tags_raw:
  - applications
  properties:
  - type: OpenAPI
    url: openapi/workos-applications-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-audit-logs-api
  name: WorkOS Audit Logs API
  description: Create and query audit log events.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Audit Logs
  tags_raw:
  - audit-logs
  properties:
  - type: OpenAPI
    url: openapi/workos-audit-logs-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-authorization-api
  name: WorkOS Authorization API
  description: Authorization and access control.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Authorization
  tags_raw:
  - authorization
  properties:
  - type: OpenAPI
    url: openapi/workos-authorization-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-connections-api
  name: WorkOS Connections API
  description: Manage SSO connections.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Connections
  tags_raw:
  - connections
  properties:
  - type: OpenAPI
    url: openapi/workos-connections-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-directories-api
  name: WorkOS Directories API
  description: Manage directories.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Directories
  tags_raw:
  - directories
  properties:
  - type: OpenAPI
    url: openapi/workos-directories-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-directory-groups-api
  name: WorkOS Directory Groups API
  description: Manage directory groups.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - directory-groups
  properties:
  - type: OpenAPI
    url: openapi/workos-directory-groups-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-directory-users-api
  name: WorkOS Directory Users API
  description: Manage directory users.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - directory-users
  properties:
  - type: OpenAPI
    url: openapi/workos-directory-users-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-events-api
  name: WorkOS Events API
  description: Query events and event streams.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Event
  tags_raw:
  - events
  properties:
  - type: OpenAPI
    url: openapi/workos-events-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-feature-flags-api
  name: WorkOS Feature Flags API
  description: Manage feature flags.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Feature Flags
  tags_raw:
  - feature-flags
  properties:
  - type: OpenAPI
    url: openapi/workos-feature-flags-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-feature-flags-targets-api
  name: WorkOS Feature Flags.targets API
  description: Manage feature flag targets.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - feature-flags.targets
  properties:
  - type: OpenAPI
    url: openapi/workos-feature-flags-targets-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-groups-api
  name: WorkOS Groups API
  description: Organize and manage user groups within organizations.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Group
  tags_raw:
  - groups
  properties:
  - type: OpenAPI
    url: openapi/workos-groups-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-multi-factor-auth-api
  name: WorkOS Multi Factor Auth API
  description: Multi-factor authentication factor management.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - multi-factor-auth
  properties:
  - type: OpenAPI
    url: openapi/workos-multi-factor-auth-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-multi-factor-auth-challenges-api
  name: WorkOS Multi Factor Auth.challenges API
  description: Multi-factor authentication challenge verification.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - multi-factor-auth.challenges
  properties:
  - type: OpenAPI
    url: openapi/workos-multi-factor-auth-challenges-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-organization-domains-api
  name: WorkOS Organization Domains API
  description: Manage organization domains.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Organization Domains
  tags_raw:
  - organization-domains
  properties:
  - type: OpenAPI
    url: openapi/workos-organization-domains-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-organizations-api-keys-api
  name: WorkOS Organizations.api Keys API
  description: Manage organization-scoped API keys.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags: []
  tags_raw:
  - organizations.api_keys
  properties:
  - type: OpenAPI
    url: openapi/workos-organizations-api-keys-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-organizations-api
  name: WorkOS Organizations API
  description: Manage organizations.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Organization
  tags_raw:
  - organizations
  properties:
  - type: OpenAPI
    url: openapi/workos-organizations-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-organizations-feature-flags-api
  name: WorkOS Organizations.feature Flags API
  description: Manage organization-scoped feature flags.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - organizations.feature-flags
  properties:
  - type: OpenAPI
    url: openapi/workos-organizations-feature-flags-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-permissions-api
  name: WorkOS Permissions API
  description: Manage permissions.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Permissions
  tags_raw:
  - permissions
  properties:
  - type: OpenAPI
    url: openapi/workos-permissions-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-pipes-api
  name: WorkOS Pipes API
  description: Data integration endpoints.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Pipes
  tags_raw:
  - pipes
  properties:
  - type: OpenAPI
    url: openapi/workos-pipes-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-radar-api
  name: WorkOS Radar API
  description: Radar fraud detection.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - Radar
  tags_raw:
  - radar
  properties:
  - type: OpenAPI
    url: openapi/workos-radar-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-sso-api
  name: WorkOS SSO API
  description: Single Sign-On endpoints.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - SSO
  tags_raw:
  - sso
  properties:
  - type: OpenAPI
    url: openapi/workos-sso-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-authentication-api
  name: WorkOS User Management.authentication API
  description: User authentication endpoints.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.authentication
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-authentication-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-cors-origins-api
  name: WorkOS User Management.cors Origins API
  description: Manage CORS origins for user management.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.cors-origins
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-cors-origins-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-data-providers-api
  name: WorkOS User Management.data Providers API
  description: Manage data providers.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.data-providers
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-data-providers-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-invitations-api
  name: WorkOS User Management.invitations API
  description: Manage user invitations.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.invitations
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-invitations-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-jwt-template-api
  name: WorkOS User Management.jwt Template API
  description: Manage JWT templates.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.jwt-template
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-jwt-template-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-magic-auth-api
  name: WorkOS User Management.magic Auth API
  description: Magic auth endpoints.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.magic-auth
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-magic-auth-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml
- aid: workos:workos-user-management-multi-factor-authentication-api
  name: WorkOS User Management.multi Factor Authentication API
  description: Multi-factor authentication endpoints.
  humanURL: https://workos.com
  baseURL: https://api.workos.com
  tags:
  - user-management.multi-factor-authentication
  properties:
  - type: OpenAPI
    url: openapi/workos-user-management-multi-factor-authentication-api-openapi.yml
  - type: Documentation
    url: https://workos.com/docs
  - type: APIReference
    url: https://workos.com/docs/reference
  - type: GitHubRepository
    url: https://github.com/workos/openapi-spec
  - type: StatusPage
    url: https://status.workos.com
  - type: ChangeLog
    url: https://workos.com/changelog
  - type: Pricing
    url: https://workos.com/pricing
  - type: RateLimits
    url: https://workos.com/docs/reference/rate-limits
  - type: Plans
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/plans/workos-plans-pricing.yml
  - type: Capabilities
    url: https://raw.githubusercontent.com/api-evangelist/workos/main/capabilities/shared/workos.yaml


# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/workos/refs/heads/main/apis.yml

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/workos"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/workos/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/workos/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

WorkOS

What this lets a business do 4

What adopting WorkOS moves on the Kin Score 5

Standards implemented 1

APIs 41

Postman Collections 41

Open Collections 43

MCP Servers 1

Agent Skills 2

Pricing Plans 2