# WorkOS

**Canonical:** https://apis.io/providers/workos/  
**Website:** https://workos.com  
**APIs profiled:** 41

WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterprise SSO (SAML/OIDC), Directory Sync (SCIM 2.0), Multi-Factor Authentication, Audit Logs, Admin Portal, Fine-Grained Authorization (FGA, formerly Warrant), Radar bot/fraud protection, and an emerging suite of agent-oriented surfaces (Pipes, MCP Auth, auth.md).

## Kin Score — 52.8 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 52.8).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 69.1 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 42.1 |
| Developer Ergonomics | 66.7 |
| Commercial Clarity | 34.2 |
| Access Clarity | 34.2 |

## Agent readiness — 51.1 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | yes |
| Idempotency | verified |
| Error Semantics | no |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Paid · Self-serve signup — onboarding: self-serve, pricing: paid, trial: no (confidence: high).

## APIs (41)

- **WorkOS admin-portal API** — Endpoints for the Admin Portal API.
- **WorkOS api_keys API** — Manage API keys for environments.
- **WorkOS application.client-secrets API** — Manage client secrets for Connect Applications.
- **WorkOS applications API** — Manage Connect Applications.
- **WorkOS audit-logs API** — Create and query audit log events.
- **WorkOS authorization API** — Authorization and access control.
- **WorkOS connections API** — Manage SSO connections.
- **WorkOS directories API** — Manage directories.
- **WorkOS directory-groups API** — Manage directory groups.
- **WorkOS directory-users API** — Manage directory users.
- **WorkOS events API** — Query events and event streams.
- **WorkOS feature-flags API** — Manage feature flags.
- **WorkOS feature-flags.targets API** — Manage feature flag targets.
- **WorkOS groups API** — Organize and manage user groups within organizations.
- **WorkOS multi-factor-auth API** — Multi-factor authentication factor management.
- **WorkOS multi-factor-auth.challenges API** — Multi-factor authentication challenge verification.
- **WorkOS organization-domains API** — Manage organization domains.
- **WorkOS organizations.api_keys API** — Manage organization-scoped API keys.
- **WorkOS organizations API** — Manage organizations.
- **WorkOS organizations.feature-flags API** — Manage organization-scoped feature flags.
- **WorkOS permissions API** — Manage permissions.
- **WorkOS pipes API** — Data integration endpoints.
- **WorkOS radar API** — Radar fraud detection.
- **WorkOS sso API** — Single Sign-On endpoints.
- **WorkOS user-management.authentication API** — User authentication endpoints.
- **WorkOS user-management.cors-origins API** — Manage CORS origins for user management.
- **WorkOS user-management.data-providers API** — Manage data providers.
- **WorkOS user-management.invitations API** — Manage user invitations.
- **WorkOS user-management.jwt-template API** — Manage JWT templates.
- **WorkOS user-management.magic-auth API** — Magic auth endpoints.
- **WorkOS user-management.multi-factor-authentication API** — Multi-factor authentication endpoints.
- **WorkOS user-management.organization-membership API** — Manage user organization memberships.
- **WorkOS user-management.organization-membership.groups API** — Manage groups for a user organization membership.
- **WorkOS user-management.redirect-uris API** — Manage redirect URIs.
- **WorkOS user-management.session-tokens API** — Session token verification keys.
- **WorkOS user-management.users API** — Manage users.
- **WorkOS user-management.users.authorized-applications API** — Manage authorized applications for users.
- **WorkOS user-management.users.feature-flags API** — Manage user-scoped feature flags.
- **WorkOS webhooks API** — Manage webhooks.
- **WorkOS widgets API** — Widget endpoints.
- …and 1 more, listed in full on the page.

## MCP servers (1)

- **Pipes MCP Server**

## Agentic access (1)

- **Workos Agentic Access** — 172 operations · 98 acting · 98 human-in-the-loop

## Security (4)

- **Workos Authentication** — http · 1 scheme
- **Workos Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Workos Vulnerability Disclosure** — disclosure policy published
- **Workos Trust Center** — SOC 2, HIPAA, GDPR

## Plans (1)

- **Workos Plans Pricing**

## Tags

Authentication, Identity Provider, SSO, SAML, OIDC, SCIM, Directory Sync, Authorization, FGA, Audit Logs, MFA, B2B SaaS, Agents, MCP

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/workos/). Scores are computed from the provider's own public artifacts under a published rubric.
