Integration

WorkOS integration

Enterprise-ready authentication and identity API. Provides SSO (SAML/OIDC), Directory Sync (SCIM), User Management with magic auth and MFA, Organizations, Audit Logs, and a hosted Admin Portal that lets your customers configure their own SSO and SCIM connections. Built for B2B SaaS apps that need to onboard enterprise customers without writing one-off integrations per identity provider.

Connect WorkOS How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in WorkOS.Built from the 33 WorkOS tools below, on the connection you add once.

Common WorkOS use cases

webhook handlers
support tools
offboarding tenants
offboarding
GDPR erasure
team invites
tenant rename
MFA login step
user migration
custom login UI

What you can do with WorkOS

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Organization, 5 operations

create_organizationCreate organizationPOSTCreates a new organization (enterprise tenant).
delete_organizationDelete organizationDELETEPermanently deletes an organization.
get_organizationGet organizationGETRetrieves a single organization by id.
list_organizationsList organizationsGETLists organizations (your enterprise tenants).
update_organizationUpdate organizationPUTUpdates an organization's name, metadata, or domains.

User, 5 operations

create_userCreate userPOSTCreates a managed user account.
delete_userDelete userDELETEPermanently deletes a managed user.
get_userGet userGETRetrieves a single managed user by id.
list_usersList usersGETLists users managed by WorkOS User Management.
update_userUpdate userPUTUpdates a managed user's profile.

Auth factor, 3 operations

challenge_mfa_factorChallenge mfa factorPOSTCreates an MFA challenge against an enrolled factor.
enroll_mfa_factorEnroll mfa factorPOSTEnrolls a TOTP or SMS MFA factor for a user.
verify_mfa_challengeVerify mfa challengePOSTVerifies an MFA OTP code against an open challenge.

Connection, 3 operations

delete_connectionDelete connectionDELETEPermanently deletes an SSO connection.
get_connectionGet connectionGETRetrieves a single SSO connection by id.
list_connectionsList connectionsGETLists SSO connections (SAML, OIDC, OAuth) configured for your application.

Directory, 3 operations

delete_directoryDelete directoryDELETEPermanently deletes a SCIM directory.
get_directoryGet directoryGETRetrieves one SCIM directory by id.
list_directoriesList directoriesGETLists SCIM directories synced from identity providers.

Organization membership, 3 operations

create_organization_membershipCreate organization membershipPOSTAdds a user to an organization as a member.
delete_organization_membershipDelete organization membershipDELETERemoves a user from an organization.
list_organization_membershipsList organization membershipsGETLists user-to-organization memberships.

Audit log export, 2 operations

create_audit_log_exportCreate audit log exportPOSTStarts an audit-log export job.
get_audit_log_exportGet audit log exportGETGets an audit-log export's status and download URL.

Directory group, 2 operations

get_directory_groupGet directory groupGETRetrieves a single directory group by id.
list_directory_groupsList directory groupsGETLists SCIM-synced directory groups.

Directory user, 2 operations

get_directory_userGet directory userGETRetrieves a single directory user by id.
list_directory_usersList directory usersGETLists users synced via SCIM from an identity provider.

Session, 2 operations

authenticate_with_passwordAuthenticate with passwordPOSTAuthenticates a user with email + password.
authenticate_with_refresh_tokenAuthenticate with refresh tokenPOSTRefreshes an access_token using a refresh_token.

Audit log event, 1 operation

create_audit_log_eventCreate audit log eventPOSTRecords an audit-log event for a tenant.

Magic auth, 1 operation

send_magic_auth_codeSend magic auth codePOSTSends a passwordless Magic Auth code by email.

Portal link, 1 operation

generate_admin_portal_linkGenerate admin portal linkPOSTGenerates a single-use Admin Portal URL for a tenant.

Use WorkOS from Claude Code, Cursor or Codex

Connect WorkOS in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its WorkOS operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect WorkOS

Create your workspace
Sign up free. Nothing to install.
Connect WorkOS once
Add your WorkOS connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

WorkOS integration FAQ

What can you do with the WorkOS integration?

LiveContext exposes 33 operations on WorkOS, covering organization, user, auth factor and connection. Common uses include webhook handlers, support tools and offboarding tenants.