Blog

Practical authorization patterns for MCP servers: per-tool scopes, dynamic consent, and least privilege enforcement using WorkOS AuthKit primitives.

65% of organizations confirmed an AI identity breach in the past year. Here's what's actually going wrong, and a practical checklist B2B SaaS teams can ship this quarter.

How WorkOS taught its docs to speak WebMCP, giving AI agents real tools instead of HTML to scrape

Three new RFCs quietly updated the SCIM spec in the last year. Here's what cursor based pagination, standardized events, and device schema actually change for your integration.

A step-by-step guide to authenticating your MCP server with AuthKit and connecting it to Claude Code.

A framework agnostic quick start for WorkOS AuthKit. Go from a fresh project to an authenticated session in under five minutes.

Projects & Branding per Environment, API Gateway, WorkOS MCP, & more

Tailscale's Remy Guercio on Aperture, AI governance, and why the next 12 months of AI spend are about ROI maxing instead of token maxing, from AIE 2026.

What the deal changes for teams building on the open source library, and a step by step path for moving your users, organizations, and passwords to WorkOS.

A recap of WorkOS at the AI Engineer World's Fair 2026: an overflowing workshop, a founder mainstage talk, and two engineering talks on shipping with agents.

The code side of the move: routes, session management, reading the user, and step up auth in a Next.js App Router app.

A session-aware GraphQL API for the browser, so you can build fully custom user management, admin panels, and more directly in your frontend.

AuthKit can now require a user to re-authenticate before a sensitive action without ending their session.

We are launching a remote MCP server that gives AI agents the same access to WorkOS as your dashboard login.

A managed gateway that handles API key verification, token decoding, and authorization so your backend does not have to.