MCP server for WorkOS API integration, providing tools for managing organizations, users, memberships, roles, and events
WorkOS MCP exposes 20 tools with basic descriptions and parameter documentation, but critical gaps prevent production use. All tools have descriptions (10-200 chars, within baseline), and most parameters are typed. However, parameter descriptions are often generic ('Optional X to filter by'), output schemas are completely undocumented, and error handling is absent. No tool annotations (readOnlyHint/destructiveHint) despite clear risk levels. JSON string parameters (events, domains, payload) force LLMs to construct JSON manually, violating the chat-data-model pattern. No pagination guidance in list tools despite accepting limit/after/before. Composition is sound (20 focused tools, no 'and' operations), but the interface requires significant LLM reasoning overhead.
Create a new organization in WorkOS.
Create a new organization membership in WorkOS.
Create a new user in WorkOS.
Deactivate an organization membership in WorkOS.
Delete an organization from WorkOS.
Delete an organization membership from WorkOS.
Delete a user from WorkOS.
Get an organization from WorkOS by ID.
No output schemas documented. LLMs cannot plan downstream calls or extract required fields (e.g., organization_id after create). Baseline: 100% of A+ tools document return types.
JSON string parameters (events, domains, payload, options) force LLMs to construct JSON manually. Violates chat-data-model pattern. Example: createOrganization requires payload as JSON string instead of structured object with name, domains, allowProfilesOutsideOrganization fields.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 47 | 2026-07-28+ | v2 |
Get an organization membership from WorkOS by ID.
Get a user from the WorkOS API by ID.
List events from the WorkOS API.
List identities for a user from the WorkOS API.
List organization memberships from the WorkOS API.
List roles for an organization in WorkOS.
List organizations from the WorkOS API.
List users from the WorkOS API.
Reactivate an organization membership in WorkOS.
Update an organization in WorkOS.
Update an organization membership in WorkOS.
Update a user in WorkOS.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint). Tools are marked with Risk levels (READ_ONLY, WRITE, DESTRUCTIVE) but not exposed to MCP clients. Agents cannot distinguish safe from dangerous operations.
Parameter descriptions are generic ('Optional X to filter by'). Baseline: 100% of A+ tools have descriptive param annotations (avg 72 chars). Example: 'limit' in listOrganizations lacks range (1-100), default (10), or guidance on pagination.
No error handling or recovery guidance. Tools do not document what errors are possible, whether they are retryable, or what the LLM should do next. Example: deleteOrganization returns 'Confirmation of deletion' but does not specify error cases (org not found, permission denied, etc.).