Blog

65% of organizations confirmed an AI identity breach in the past year. Here's what's actually going wrong, and a practical checklist B2B SaaS teams can ship this quarter.

How WorkOS taught its docs to speak WebMCP, giving AI agents real tools instead of HTML to scrape

Three new RFCs quietly updated the SCIM spec in the last year. Here's what cursor based pagination, standardized events, and device schema actually change for your integration.

A step-by-step guide to authenticating your MCP server with AuthKit and connecting it to Claude Code.

A framework agnostic quick start for WorkOS AuthKit. Go from a fresh project to an authenticated session in under five minutes.

Tailscale's Remy Guercio on Aperture, AI governance, and why the next 12 months of AI spend are about ROI maxing instead of token maxing, from AIE 2026.

A recap of WorkOS at the AI Engineer World's Fair 2026: an overflowing workshop, a founder mainstage talk, and two engineering talks on shipping with agents.

A session-aware GraphQL API for the browser, so you can build fully custom user management, admin panels, and more directly in your frontend.

AuthKit can now require a user to re-authenticate before a sensitive action without ending their session.

We are launching a remote MCP server that gives AI agents the same access to WorkOS as your dashboard login.

A managed gateway that handles API key verification, token decoding, and authorization so your backend does not have to.

Group your environments by product and give each one its own branding, without separate WorkOS accounts.

A complete guide to social login in React Router v7, covering Google, GitHub, Microsoft, and every provider you will need as you grow.

Organizations are discovering that AI agent costs are invisible by design. The fix starts earlier in the stack than most teams realize.

How SAML attribute mapping works, how to configure it in Okta and Microsoft Entra ID, and how to map user roles, groups, and custom claims to your application.