Every request to an MCP server should carry a token that expires, can be revoked, and is scoped to what the caller is allowed to do.
Our developer's guide covers the full OAuth 2.1 setup, from PKCE to JWT validation.
Read the guide: https://t.co/P9OJbrsVcU
❄️ O come, all ye agents, joyful and autonomous ❄️
The Agent Night holiday special returns, live at the Regency Ballroom, December 9.
Request to join: https://t.co/GVRj76bHrG
We're excited to announce that WorkOS is powering The Pragmatic Summit, hosted by @GergelyOrosz.
@mitchellh. @bcherny. @mipsytipsy. @fnthawar. And more.
February 10 • Convene • SF
Apply to attend: https://t.co/0XbtZbzWms
Finance teams use @RilletHQ, the AI-native ERP, to automate accounting, close faster, and report in real time, so they can focus on moving the business forward. Powered by WorkOS. 🚀
WorkOS Airlock now supports @FireworksAI_HQ for its governing agent.
Use your own Fireworks key, and Airlock’s reviews of agent actions run on your account. Your policies, fixed rules, and human approvals stay in Airlock.
If an agent can’t buy your product without a human, it recommends something else. @zeroclick's Spencer Charest shows how they WorkOS 𝐚𝐮𝐭𝐡.𝐦𝐝 to let agents sign up and pay on their own.
The Pragmatic Engineer Unplugged is this Wednesday, November 4, at SFJAZZ.
@bcantrill • @CompleteSkeptic • @gergelyorosz
Last chance to request a spot: https://t.co/7pKp6l4WEN
A model that never writes a word. That’s Jev, from the researcher who helped build ChatGPT. @CompleteSkeptic is live at @Pragmatic_Eng Unplugged, Nov 4, SFJAZZ. https://t.co/7pKp6l4WEN
WorkOS is on the Fortune Cyber 60 list of most innovative cybersecurity startups.
The CISO survey published with it: 77% of enterprises run AI agents, only 34% give them their own identity.
Thank you @FortuneMagazine, @lightspeedvp, @AWSstartups. https://t.co/uHCiQZiBp2
One of the most respected voices in the developer community, @bcantrill, joins us live with The @Pragmatic_Eng, @GergelyOrosz.
Co-creator of DTrace. Co-founder and CTO of @oxidecomputer.
November 4 • SFJAZZ • RSVP👇
API scopes are too broad to govern agents. Airlock puts policy on top of your integrations, with a governing LLM for what rules can’t catch. Demo from Aaron Tainter at init().