Developer Tools

WorkOS

by WorkOS

Overview

The official WorkOS connector lets you manage your WorkOS workspace from Claude in plain language, backed by the same API that powers the WorkOS Dashboard . Ask Claude to look up an organization, audit a user's memberships, check an SSO connection, inspect a Directory Sync (SCIM) setup, review roles and permissions, or make changes across 300+ operations spanning the WorkOS platform. What you can do - Query your data: organizations, users and memberships, SSO connections, Directory Sync directories and users, roles/permissions/groups (RBAC), audit logs and events, AuthKit applications, domains, webhooks, and more. - Take action: create and update organizations, manage users and memberships, configure connections, and run other administrative operations. - Discover what's available: Claude can list the supported operations and their inputs, then pick the right one for your request. Built for enterprise trust - Secure OAuth 2.0 authentication — Claude acts with your own WorkOS identity and permissions, never a shared API key, and only within a single environment. - Destructive and billing-sensitive actions require explicit confirmation before they run. - Admins can disable the connector or restrict it to read-only, and access is always scoped to what your role is allowed to do. WorkOS is the enterprise-identity platform trusted by leading AI and SaaS companies for SSO, Directory Sync, AuthKit user management, RBAC, FGA, Vault, and audit logging. This connector brings that control surface into Claude.

Tools

list_operations

ChatGPT

Discover the WorkOS operations available through the query and mutate tools. Without arguments, returns the full index of operation names — call it once and reuse the result. Pass filter to narrow the index by keyword (operation name or description). Pass operation for that operation’s parameters and input types, or type to fully expand a specific input/enum type by name. Call whoami to see available environments and their IDs.

mutate

ChatGPT

Run a mutation against your WorkOS account by name. Mutations change real data in the targeted environment. Call list_operations first to discover available operations and their parameters. Pass environment_id to choose the environment (whoami returns your available environments); when the operation declares an environmentId parameter it is applied automatically, so you don’t pass it twice. Without environment_id, operations that don’t require one run against a sandbox environment. Destructive operations (permanent deletes) and billing changes require a confirmation token — the first call returns the impact plus a single-use "confirmation_token" and does not execute; pass the token back with the same arguments to proceed.

query

ChatGPT

Run a query against your WorkOS account by name. Call list_operations first to discover available operations and their parameters. Pass environment_id to choose the environment (whoami returns your available environments); when the operation declares an environmentId parameter it is applied automatically, so you don’t pass it twice. Without environment_id, operations that don’t require one run against a sandbox environment.

whoami

ChatGPT

Return the identity, role, and capability posture of the authenticated caller. Includes the team, a description of what the role can and cannot do, and the available environments grouped by project, each with its ID and OAuth client ID. Environment names repeat across projects, so identify an environment by its client ID (match the WORKOS_CLIENT_ID in the app’s config) or by its project, not by name. Use the returned environment IDs as the environment_id argument for query and mutate calls.

list_operations

Claude

mutate

Claude

query

Claude

whoami

Claude

Capabilities

Writes

Example Prompts

Click any prompt to copy it.

Links

Documentation ↗Privacy Policy ↗

App Stats

Tools

Prompts

ChatGPT, Claude

Platforms