Atlas works alongside your team in Slack to answer questions, automate tasks, and help everyone do their best work.
We are launching a remote MCP server that gives AI agents the same access to WorkOS as your dashboard login.
A managed gateway that handles API key verification, token decoding, and authorization so your backend does not have to.
Sessions, the initialize handshake, and stream resumability are all gone. Here is what replaced them, and what breaks if you ignore it.
Security and governance is 24% of the new Model Context Protocol Associate exam. Here is what each competency actually covers in the 2026-07-28 spec, and the distinctions candidates get wrong.
Your access logs probably say a person did something an agent did. Four claims fix that, and one of them exists for exactly this purpose.
Design and test AI agent policies that block unsafe actions and keep useful work moving. Learn to test intent, RBAC, and approvals, or try WorkOS Airlock.
An agent's task describes the work to do. Learn how to define useful intent while keeping identity, resource access, and company policy in force.
Airlock grew out of Atlas to give IT and security teams a shared way to govern agent actions. Aaron Tainter's Agent Night demo shows how it works.
Set GitHub permissions for AI code review, govern merges with Airlock, and prevent agents from merging code that changed after approval.
Secure MCP tool calls beyond OAuth scopes. Learn where to enforce tool permissions, check request content, and test for data leakage with Airlock.
Add human approval to AI agent tool calls. Learn how to review exact requests, resume execution, and handle edits and retries with Airlock.
An agent can open a child session of itself for a sub-task. The chain re-derives authority at every hop and can never outlive its root.
Typed resources, structured errors, automatic retries, and AsyncSequence pagination for server-side Swift apps.
Codex, ChatGPT Work and Claude Code make five different choices about outbound network access. Here is what each one allows before you configure anything, what the docs publish, and where the boundary does not reach.
Every line has a literal answer and a real question behind it. Here is what the buyer is actually checking, which answers you can buy, and the three you cannot fake.
Envelope encryption, data keys, and why your sensitive data never has to leave your infrastructure
Both ship SSO, SCIM and audit logs now. The comparison that decides enterprise deals has moved to the long tail: provider coverage, where user lifecycle actually starts, and who is contractually on the hook.
Please try a different search
Our global team is growing and we’re hiring all types of roles.
WorkOS builds developer tools for quickly adding enterprise features to applications.
We use cookies for analytics and advertising. See our cookie policy for details.
.jpg){kind=small}
