Skip to main content
All WorkOS integration capabilities

​
About

This is an MCP connector that gives the Sazabi agent tools from WorkOS’s hosted MCP server (mcp.workos.com/mcp). WorkOS authenticates over OAuth with dynamic client registration, and the server acts as the WorkOS dashboard user who connects it, with that user’s dashboard role. Sazabi uses this connector read-only. WorkOS tools that change the workspace are blocked and cannot be called, so the agent can inspect your workspace during an investigation but cannot change it. Pair it with the WorkOS log source: the log source shows what happened and when, and this connector shows how the workspace is configured now. What the agent can do:
  • Look up the organization, user, or membership named in a sign-in or SSO event
  • Inspect the SSO connections and directory sync configuration attached to an organization
  • Check webhook endpoints and workspace settings while tracing a failed delivery

​
Prerequisites

  • A WorkOS account with access to the dashboard workspace you want to investigate
  • A WorkOS dashboard role that can view the data the agent needs. The connector reads no more than that user can see.

​
Set up in the dashboard

Configure connectors in the dashboard under Settings > MCP connectors.
1

​
Open the connector

Find WorkOS in Settings > MCP connectors.
2

​
Authorize

Start the connection. Sazabi redirects you to WorkOS, where you sign in to your WorkOS dashboard account and approve access, then back.

​
Set up with the CLI

You can also connect WorkOS with the Sazabi CLI (installed and authenticated — see sazabi mcp-connectors reference). WorkOS authenticates over OAuth, so the CLI opens a browser to complete authorization:
Add --project-id <project> to target a specific project, or --no-wait to print the authorization link and exit without waiting. With --json the command prints the authorization URL and returns without waiting. Confirm the result with sazabi mcp-connectors list.

​
Verify

Open the connector’s connection page under Settings > MCP connectors and confirm Sazabi lists the tools it discovered. Then, in a thread, ask the agent to look up one of your WorkOS organizations and confirm it returns the organization.

​
Troubleshooting

No tools discovered — Disconnect and reconnect from Settings > MCP connectors, and sign in to the WorkOS account that belongs to the workspace you want to investigate. A lookup returns an authorization error — The WorkOS user who connected the server does not have a dashboard role that can view that data. Reconnect with a user whose role can. Connection shows needs attention — The authorization may have expired or been revoked; reconnect from Settings > MCP connectors.

​
Further reading

Agent tools

How the agent uses connector tools.

MCP connectors

Browse the connector catalog.