Developer Tools29 toolsPaste one API key
WorkOS integration for AI agents
WorkOS provides enterprise identity and user management APIs for organizations, directory sync, connections, invitations, and users.
Use it from your agent
One ClawLink account serves every agent you run. Pick the guide for yours, or connect WorkOS once and call the same tools from all of them.
WorkOS for OpenClawInstall, pair, connect, first prompt
WorkOS for Hermes AgentInstall, pair, connect, first promptMCPClaude Code, Cursor, any MCP clientCLI login or the remote MCP serverSetup
Connect WorkOS through ClawLink's hosted setup.
- Auth: Paste one API key. The credential stays on the ClawLink server; your agent holds only a ClawLink key you can revoke.
- Where: the ClawLink dashboard, or ask your agent to connect it.
What your agent can do
WorkOS exposes 29 tools through ClawLink. The 26 most used are listed here; your agent sees all of them.
| Tool | What it does | Kind |
|---|---|---|
workos_get_connection | Get one WorkOS connection by ID | Read |
workos_get_directory | Get one WorkOS Directory Sync directory by ID | Read |
workos_get_directory_group | Get one WorkOS Directory Sync group by its exact group ID | Read |
workos_get_directory_user | Get one WorkOS Directory Sync user by exact ID, including identity-provider attributes, roles | Read |
workos_get_invitation | Get WorkOS AuthKit invitation status and metadata by invitation ID without exposing acceptance | Read |
workos_get_organization | Get one WorkOS organization by its WorkOS ID or external ID | Read |
workos_get_organization_membership | Get one WorkOS AuthKit organization membership by ID | Read |
workos_get_user | Get one WorkOS AuthKit user by WorkOS ID or external ID | Read |
workos_list_connections | List one page of WorkOS SSO and OAuth connections, optionally filtered by connection type | Read |
workos_list_directories | List one page of WorkOS Directory Sync directories, optionally filtered by organization | Read |
workos_list_directory_groups | List one page of WorkOS Directory Sync groups for a directory, a directory user, or both | Read |
workos_list_directory_users | List one page of WorkOS Directory Sync users for a directory or group, optionally filtering a | Read |
workos_list_invitations | List one page of WorkOS AuthKit invitations by organization or exact recipient email without | Read |
workos_list_organization_memberships | List one page of WorkOS AuthKit organization memberships for a specific organization or user | Read |
workos_list_organizations | List one page of WorkOS organizations, optionally filtered by domain or organization name | Read |
workos_list_users | List one page of WorkOS AuthKit users, optionally filtered by organization or exact email | Read |
workos_create_organization | Create a WorkOS organization in the connected environment | Write |
workos_create_organization_membership | Grant an AuthKit user active membership in an organization | Write |
workos_create_user | Create a passwordless AuthKit user record in the connected WorkOS environment | Write |
workos_resend_invitation | Send another real invitation email to the existing recipient of a pending WorkOS AuthKit | Read |
workos_revoke_invitation | Revoke a pending AuthKit invitation so it can no longer be accepted | Read |
workos_send_invitation | Create an AuthKit invitation and immediately send a real invitation email to the recipient | Write |
workos_set_organization_membership_status | Activate or deactivate a WorkOS organization membership without deleting it | Write |
workos_update_organization | Update selected properties of an existing WorkOS organization | Write |
workos_update_organization_membership_roles | Replace the role assignment on an existing WorkOS organization membership | Write |
workos_update_user | Update selected profile fields on an AuthKit user without invoking email delivery flows | Write |
