Blog

FGA Custom Roles, Groups API, Self-serve Change Email API, & more

How to design an MCP server from a REST API: choosing between tools, resources, and prompts, getting the granularity right, and curating endpoints for the agents that will call them.

Why we start synchronous, when we move to async, and why revocations are different.

Three algorithms compared, a clear default, and the tradeoffs that should make you pick something else.

WorkOS is now a supported provider in Stripe Projects. Add enterprise-grade auth to any project from the CLI with a single command — no signup, no payment wall.

What schema extensions are, how Docker and Notion use them, and how to design your own.

The reasons why IAM controls built for service accounts and API clients don't transfer to AI agents.

Five platforms for teams who've outgrown Firebase Auth's B2B gaps and Google Cloud lock-in.

Authenticate users in your Rust command-line tool with a secure OAuth 2.0 Device Code flow using WorkOS. This tutorial shows how to implement login via the terminal, step by step.

How a new IETF draft extends OAuth so AI agents can act for users with explicit consent and a clean audit trail.

Everything you need to know to implement and validate JWTs securely in Ruby: from creating JWTs, to signing and verifying them with JWKS, handling custom claims, and best practices you should be following.

How OAuth breaks down when AI agents spawn other agents, and what IETF drafts are doing about it.

Agent identity is no longer experimental. NIST's February 2026 announcement made it enterprise-critical.

A practical comparison across features, pricing, reliability, and what enterprise buyers actually grade you on.

What it really takes to sell to the U.S. government, from the teams who have been through it.