How do I install the Workos skill?

Run npx skillmds@latest add inselfcontroll/workos in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Workos safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Workos?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Workos free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Workos?

InSelfControll (@inselfcontroll) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Workos by inselfcontroll — Agent Skill

Name: Workos
Rating: 4.2 (5 reviews)
Author: InSelfControll

File contents

WorkOS Integration Skill

This skill provides patterns for WorkOS integration, focusing on Enterprise SSO, Auth Kit, and Organization management in a Go/React stack.

Architectural Standards

1. Auth Kit & AuthLinks

Auth Kit: Use the hosted UI for login/Sign-up. Handle the redirect in Go using workos.UserManagement.AuthenticateWithCode.
AuthLink: Programmatically generate AuthLinks for enterprise customers to allow them to self-configure SSO.
FIDC: Handle "Fraud & Identity Identity Checks" by validating the risk_score in the user profile if enabled.

2. Organization Management (Multi-tenancy)

Frictionless Onboarding: Use "Domain Verification" to automatically assign users to Orgs.
SCIM Directory Sync: Implement Go handlers for WorkOS SCIM webhooks. Sync directory_user.created and directory_user.deleted events to your local DB.
Admin Portal: Link to the WorkOS Admin Portal for "Zero-code" SSO configuration by the customer.

3. Go Backend Security

Webhook Validation: MANDATORY to use workos.ValidatePayload(payload, sig, secret) for all webhooks.
JWT Verification: WorkOS uses public keys for JWT signature verification. Fetch and cache these keys periodically.
Context Isolation: Ensure every Go service call includes the organization_id extracted from the WorkOS session.

4. React Component Patterns

Layout: Wrap enterprise-only pages in an OrgGuard component that checks for an active organization_id.
Management: Build custom UI for "Organization Invitations" using the WorkOS API to invite users by email.

Interaction Protocol

Input: WorkOS Client ID, API Key, and enterprise onboarding requirements.
Output: Go handlers for SSO/SCIM/AuthKit and React integration code.

Tag: Start your response with [WORKOS-AUTH].

---name: workosdescription: Expert for WorkOS integration, focusing on Enterprise SSO and Directory Sync. Use when implementing SSO, validating WorkOS JWTs in Go, or using WorkOS React components for enterprise auth.---# WorkOS Integration SkillThis skill provides patterns for WorkOS integration, focusing on Enterprise SSO, Auth Kit, and Organization management in a Go/React stack.## Architectural Standards### 1. Auth Kit & AuthLinks* **Auth Kit:** Use the hosted UI for login/Sign-up. Handle the redirect in Go using `workos.UserManagement.AuthenticateWithCode`.* **AuthLink:** Programmatically generate AuthLinks for enterprise customers to allow them to self-configure SSO.* **FIDC:** Handle "Fraud & Identity Identity Checks" by validating the `risk_score` in the user profile if enabled.### 2. Organization Management (Multi-tenancy)* **Frictionless Onboarding:** Use "Domain Verification" to automatically assign users to Orgs.* **SCIM Directory Sync:** Implement Go handlers for WorkOS SCIM webhooks. Sync `directory_user.created` and `directory_user.deleted` events to your local DB.* **Admin Portal:** Link to the WorkOS Admin Portal for "Zero-code" SSO configuration by the customer.### 3. Go Backend Security* **Webhook Validation:** **MANDATORY** to use `workos.ValidatePayload(payload, sig, secret)` for all webhooks.* **JWT Verification:** WorkOS uses public keys for JWT signature verification. Fetch and cache these keys periodically.* **Context Isolation:** Ensure every Go service call includes the `organization_id` extracted from the WorkOS session.### 4. React Component Patterns* **Layout:** Wrap enterprise-only pages in an `OrgGuard` component that checks for an active `organization_id`.* **Management:** Build custom UI for "Organization Invitations" using the WorkOS API to invite users by email.## Interaction Protocol* **Input:** WorkOS Client ID, API Key, and enterprise onboarding requirements.* **Output:** Go handlers for SSO/SCIM/AuthKit and React integration code.**Tag**: Start your response with `[WORKOS-AUTH]`.

Frequently asked questions

Workos