# WorkOS MCP Server

MCP server for WorkOS User Management API. Enables Claude to manage users, organizations, memberships, invitations, and sessions in WorkOS.

## Installation

```bash
bun install
```

## Configuration

Set environment variables:

```bash
export WORKOS_API_KEY=sk_...
export WORKOS_CLIENT_ID=client_...
export WORKOS_ENVIRONMENT_ID=environment_...  # Found in WorkOS Dashboard URL
```

## Usage

### With Claude Code

Add to your Claude Code MCP settings:

```json
{
  "mcpServers": {
    "workos": {
      "command": "bun",
      "args": ["run", "/path/to/packages/mcps/workos/src/index.ts"],
      "env": {
        "WORKOS_API_KEY": "sk_...",
        "WORKOS_CLIENT_ID": "client_...",
        "WORKOS_ENVIRONMENT_ID": "environment_..."
      }
    }
  }
}
```

### Standalone

```bash
bun run src/index.ts
```

### Inspect with MCP Inspector

```bash
bun run inspect
```

## Available Tools

### User Management

| Tool | Description |
|------|-------------|
| `list_users` | List users with optional filtering by email or organization |
| `get_user` | Get details of a specific user |
| `create_user` | Create a new user |
| `update_user` | Update user information |
| `delete_user` | Delete a user |

### Organizations

| Tool | Description |
|------|-------------|
| `list_organizations` | List all organizations |
| `get_organization` | Get organization details |
| `create_organization` | Create a new organization |
| `update_organization` | Update organization |
| `delete_organization` | Delete an organization |

### Organization Memberships

| Tool | Description |
|------|-------------|
| `list_organization_memberships` | List memberships (filter by user or org) |
| `get_organization_membership` | Get membership details |
| `create_organization_membership` | Add user to organization |
| `update_organization_membership` | Update user's role |
| `delete_organization_membership` | Remove user from organization |

### Invitations

| Tool | Description |
|------|-------------|
| `list_invitations` | List pending invitations |
| `get_invitation` | Get invitation details |
| `send_invitation` | Send invitation email |
| `revoke_invitation` | Revoke pending invitation |

### Sessions

| Tool | Description |
|------|-------------|
| `list_sessions` | List active sessions for a user |
| `revoke_session` | Revoke an active session |

### Password & Verification

| Tool | Description |
|------|-------------|
| `send_password_reset_email` | Send password reset email |
| `send_verification_email` | Send email verification |

### MFA

| Tool | Description |
|------|-------------|
| `list_auth_factors` | List user's MFA factors |

### Impersonation (Dashboard Links)

| Tool | Description |
|------|-------------|
| `get_impersonation_url` | Get URL to impersonate user in WorkOS Dashboard |
| `get_user_dashboard_url` | Get URL to view user in WorkOS Dashboard |

## License

MIT