LoginSign Up
← Back to all sparks
W

WorkOS

INFRA · APIS
Velocity6.3

WorkOS is turning enterprise auth plumbing into the identity layer for AI agents.

identitymcpagent-authaudit-logsenterprise-ssoscim
◆Current state
WorkOS ships on a near-weekly cadence across AuthKit, Pipes, audit logs and admin tooling. The last month split between two tracks: agent-facing auth (MCP Auth with Claude auto-connect, RFC 8693 token exchange for Connect) and admin-side visibility (team activity logs, SCIM payload logs, auto-generated audit events).
◆Where it's heading
The agent track is the directional one: WorkOS is positioning itself as the place enterprises govern which AI clients can act on behalf of which users. The observability releases support that bet, since IT teams that let agents in will want an audit trail of what happened. Pipes is also maturing from single-user connections toward org-wide, multi-account configuration.
◆Prediction
Expect more agent-delegation primitives on the Connect and MCP Auth side, likely paired with audit-log coverage of agent actions, given that both tracks shipped within days of each other.

◆Recent moves

  1. 3d ago

    Team Activity Logs

    Team activity logs extend WorkOS's audit push from customer-facing events to the dashboard itself. It continues a month of visibility work that makes the platform easier to defend in an enterprise security review.

  2. 4d ago

    Token exchange for WorkOS Connect

    RFC 8693 token exchange lets a service swap one access token for another scoped token, which is the standard mechanism for delegated access between services and agents. It quietly fills a gap in Connect that the MCP Auth work depends on.

  3. 10d ago

    Admin Portal SCIM Logs

    Exposing raw SCIM request and response payloads in the Admin Portal hands provisioning debugging to the customer's IT admin. It cuts support load for WorkOS's B2B customers and fits the broader shift toward self-serve observability.

  4. 11d ago

    WorkOS MCP Auth supports Claude auto-connect

    ⚡ SPARK

    This is the clearest signal of where WorkOS is heading: its MCP Auth product now reaches organizations whose identity provider can't do Cross App Access. It widens the addressable market for enterprise-managed agent authorization.

  5. 17d ago

    Multiple Accounts per Pipes Provider

    Multiple accounts per Pipes provider removes a real constraint for users who juggle, say, work and personal accounts on the same service. Pipes is moving from a basic connector toward a full integration layer.

  6. 19d ago

    Custom Branding per Application

    Per-application branding for AuthKit and emails serves customers running several products from one WorkOS environment. It is a practical multi-product option rather than a direction change.