Can I use WorkOS as a CLI?

Yes. KosmoKrator exposes a WorkOS CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose WorkOS through MCP?

Yes. The KosmoKrator MCP gateway can expose selected WorkOS tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are WorkOS credentials stored?

WorkOS credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for WorkOS MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

WorkOS CLI for AI Agents

Use the WorkOS CLI from KosmoKrator to call WorkOS tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

WorkOS CLI Setup

WorkOS can be configured headlessly with `kosmokrator integrations:configure workos`.

Install, configure, and verify

# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure workos --set api_key="$WORKOS_API_KEY" --enable --read allow --write ask --json
kosmokrator integrations:doctor workos --json
kosmokrator integrations:status --json

Credentials

Authentication type: Bearer token bearer_token. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

Key	Env var	Type	Required	Label
`api_key`	`WORKOS_API_KEY`	Secret `secret`	yes	API Key
`url`	`WORKOS_URL`	URL `url`	no	API Base URL

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call

kosmo integrations:call workos.workos_api_keys_validate_api_key '{}' --json

Provider shortcut

kosmo integrations:workos workos_api_keys_validate_api_key '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands

kosmo integrations:docs workos --json
kosmo integrations:docs workos.workos_api_keys_validate_api_key --json
kosmo integrations:schema workos.workos_api_keys_validate_api_key --json
kosmo integrations:search "WorkOS" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

`workos.workos_api_keys_validate_api_key`

Validate an API key value and return the API key object if valid.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_api_keys_validate_api_key '{}' --json

Shortcut

kosmo integrations:workos workos_api_keys_validate_api_key '{}' --json

`workos.workos_api_keys_delete`

Permanently deletes an API key. This action cannot be undone. Once deleted, any requests using this API key will fail authentication.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_api_keys_delete '{}' --json

Shortcut

kosmo integrations:workos workos_api_keys_delete '{}' --json

`workos.workos_audit_log_validators_list`

Get a list of all Audit Log actions in the current environment.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_validators_list '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_validators_list '{}' --json

`workos.workos_audit_log_validator_versions_create`

Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the `action` does not exist, it will also be created.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_validator_versions_create '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_validator_versions_create '{}' --json

`workos.workos_audit_log_validator_versions_schemas`

Get a list of all schemas for the Audit Logs action identified by `:name`.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_validator_versions_schemas '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_validator_versions_schemas '{}' --json

`workos.workos_audit_log_events_create`

Create an Audit Log Event. This API supports idempotency which guarantees that performing the same operation multiple times will have the same result as if the operation were pe...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_events_create '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_events_create '{}' --json

`workos.workos_audit_log_exports_exports`

Create an Audit Log Export. Exports are scoped to a single organization within a specified date range.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_exports_exports '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_exports_exports '{}' --json

`workos.workos_audit_log_exports_export`

Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching the export will regenerate the URL.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_log_exports_export '{}' --json

Shortcut

kosmo integrations:workos workos_audit_log_exports_export '{}' --json

`workos.workos_authentication_challenges_verify`

Verifies an Authentication Challenge.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authentication_challenges_verify '{}' --json

Shortcut

kosmo integrations:workos workos_authentication_challenges_verify '{}' --json

`workos.workos_authentication_factors_create`

Enrolls an Authentication Factor to be used as an additional factor of authentication. The returned ID should be used to create an authentication Challenge.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authentication_factors_create '{}' --json

Shortcut

kosmo integrations:workos workos_authentication_factors_create '{}' --json

`workos.workos_authentication_factors_get`

Gets an Authentication Factor.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authentication_factors_get '{}' --json

Shortcut

kosmo integrations:workos workos_authentication_factors_get '{}' --json

`workos.workos_authentication_factors_delete`

Permanently deletes an Authentication Factor. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authentication_factors_delete '{}' --json

Shortcut

kosmo integrations:workos workos_authentication_factors_delete '{}' --json

`workos.workos_authentication_factors_challenge`

Creates a Challenge for an Authentication Factor.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authentication_factors_challenge '{}' --json

Shortcut

kosmo integrations:workos workos_authentication_factors_challenge '{}' --json

`workos.workos_external_auth_complete_login`

Completes an external authentication flow and returns control to AuthKit. This endpoint is used with [Standalone Connect](/authkit/connect/standalone) to bridge your existing au...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_external_auth_complete_login '{}' --json

Shortcut

kosmo integrations:workos workos_external_auth_complete_login '{}' --json

`workos.workos_authorization_check`

Check if an organization membership has a specific permission on a resource. Supports identification by resource_id OR by resource_external_id + resource_type_slug.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_check '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_check '{}' --json

`workos.workos_authorization_list_resources_for_membership`

Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery—answering "What projects ca...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_list_resources_for_membership '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_list_resources_for_membership '{}' --json

`workos.workos_authorization_list_effective_permissions`

Returns all permissions the organization membership effectively has on a resource, including permissions inherited through roles assigned to ancestor resources.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_list_effective_permissions '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_list_effective_permissions '{}' --json

`workos.workos_authorization_list_effective_permissions_by_external_id`

Returns all permissions the organization membership effectively has on a resource identified by its external ID, including permissions inherited through roles assigned to ancest...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_list_effective_permissions_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_list_effective_permissions_by_external_id '{}' --json

`workos.workos_authorization_role_assignments_list_role_assignments`

List all role assignments for an organization membership. This returns all roles that have been assigned to the user on resources, including organization-level and sub-resource ...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_list_role_assignments '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_list_role_assignments '{}' --json

`workos.workos_authorization_role_assignments_assign_role`

Assign a role to an organization membership on a specific resource.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_assign_role '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_assign_role '{}' --json

`workos.workos_authorization_role_assignments_remove_role_by_criteria`

Remove a role assignment by role slug and resource.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_remove_role_by_criteria '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_remove_role_by_criteria '{}' --json

`workos.workos_authorization_role_assignments_remove_role_by_id`

Remove a role assignment using its ID.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_remove_role_by_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_remove_role_by_id '{}' --json

`workos.workos_authorization_organization_roles_create`

Create a new custom role for this organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_roles_create '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_roles_create '{}' --json

`workos.workos_authorization_organization_roles_list`

Get a list of all roles that apply to an organization. This includes both environment roles and custom roles, returned in priority order.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_roles_list '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_roles_list '{}' --json

`workos.workos_authorization_organization_roles_get`

Retrieve a role that applies to an organization by its slug. This can return either an environment role or a custom role.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_roles_get '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_roles_get '{}' --json

`workos.workos_authorization_organization_roles_update`

Update an existing custom role. Only the fields provided in the request body will be updated.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_roles_update '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_roles_update '{}' --json

`workos.workos_authorization_organization_roles_delete`

Delete an existing custom role.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_roles_delete '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_roles_delete '{}' --json

`workos.workos_authorization_organization_role_permissions_set_permissions`

Replace all permissions on a custom role with the provided list.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_role_permissions_set_permissions '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_role_permissions_set_permissions '{}' --json

`workos.workos_authorization_organization_role_permissions_add_permission`

Add a single permission to a custom role. If the permission is already assigned to the role, this operation has no effect.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_role_permissions_add_permission '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_role_permissions_add_permission '{}' --json

`workos.workos_authorization_organization_role_permissions_remove_permission`

Remove a single permission from a custom role by its slug.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_organization_role_permissions_remove_permission '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_organization_role_permissions_remove_permission '{}' --json

`workos.workos_authorization_resources_by_external_id_get_by_external_id`

Retrieve the details of an authorization resource by its external ID, organization, and resource type. This is useful when you only have the external ID from your system and nee...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_by_external_id_get_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_by_external_id_get_by_external_id '{}' --json

`workos.workos_authorization_resources_by_external_id_update_by_external_id`

Update an existing authorization resource using its external ID.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_by_external_id_update_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_by_external_id_update_by_external_id '{}' --json

`workos.workos_authorization_resources_by_external_id_delete_by_external_id`

Delete an authorization resource by organization, resource type, and external ID. This also deletes all descendant resources.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_by_external_id_delete_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_by_external_id_delete_by_external_id '{}' --json

`workos.workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id`

Returns all organization memberships that have a specific permission on a resource, using the resource's external ID. This is useful for answering "Who can access this resource?...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id '{}' --json

`workos.workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id`

List all role assignments granted on a resource, identified by its external ID. Each assignment includes the organization membership it was granted to.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id '{}' --json

`workos.workos_authorization_permissions_list`

Get a list of all permissions in your WorkOS environment.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_permissions_list '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_permissions_list '{}' --json

`workos.workos_authorization_permissions_create`

Create a new permission in your WorkOS environment. The permission can then be assigned to environment roles and custom roles.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_permissions_create '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_permissions_create '{}' --json

`workos.workos_authorization_permissions_find`

Retrieve a permission by its unique slug.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_permissions_find '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_permissions_find '{}' --json

`workos.workos_authorization_permissions_update`

Update an existing permission. Only the fields provided in the request body will be updated.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_permissions_update '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_permissions_update '{}' --json

`workos.workos_authorization_permissions_delete`

Delete an existing permission. System permissions cannot be deleted.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_permissions_delete '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_permissions_delete '{}' --json

`workos.workos_authorization_resources_list`

Get a paginated list of authorization resources.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_list '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_list '{}' --json

`workos.workos_authorization_resources_create`

Create a new authorization resource.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_create '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_create '{}' --json

`workos.workos_authorization_resources_find_by_id`

Retrieve the details of an authorization resource by its ID.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_find_by_id '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_find_by_id '{}' --json

`workos.workos_authorization_resources_update`

Update an existing authorization resource.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_update '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_update '{}' --json

`workos.workos_authorization_resources_delete`

Delete an authorization resource and all its descendants.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_delete '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_delete '{}' --json

`workos.workos_authorization_resources_list_organization_memberships_for_resource`

Returns all organization memberships that have a specific permission on a resource instance. This is useful for answering "Who can access this resource?".

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_resources_list_organization_memberships_for_resource '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_resources_list_organization_memberships_for_resource '{}' --json

`workos.workos_authorization_role_assignments_list_role_assignments_for_resource`

List all role assignments granted on a specific resource instance. Each assignment includes the organization membership it was granted to.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_assignments_list_role_assignments_for_resource '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_assignments_list_role_assignments_for_resource '{}' --json

`workos.workos_authorization_roles_create`

Create a new environment role.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_roles_create '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_roles_create '{}' --json

`workos.workos_authorization_roles_list`

List all environment roles in priority order.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_roles_list '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_roles_list '{}' --json

`workos.workos_authorization_roles_get`

Get an environment role by its slug.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_roles_get '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_roles_get '{}' --json

`workos.workos_authorization_roles_update`

Update an existing environment role.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_roles_update '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_roles_update '{}' --json

`workos.workos_authorization_role_permissions_set_permissions`

Replace all permissions on an environment role with the provided list.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_permissions_set_permissions '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_permissions_set_permissions '{}' --json

`workos.workos_authorization_role_permissions_add_permission`

Add a single permission to an environment role. If the permission is already assigned to the role, this operation has no effect.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorization_role_permissions_add_permission '{}' --json

Shortcut

kosmo integrations:workos workos_authorization_role_permissions_add_permission '{}' --json

`workos.workos_applications_list`

List all Connect Applications in the current environment with optional filtering.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_applications_list '{}' --json

Shortcut

kosmo integrations:workos workos_applications_list '{}' --json

`workos.workos_applications_create`

Create a new Connect Application. Supports both OAuth and Machine-to-Machine (M2M) application types.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_applications_create '{}' --json

Shortcut

kosmo integrations:workos workos_applications_create '{}' --json

`workos.workos_applications_find`

Retrieve details for a specific Connect Application by ID or client ID.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_applications_find '{}' --json

Shortcut

kosmo integrations:workos workos_applications_find '{}' --json

`workos.workos_applications_update`

Update an existing Connect Application. For OAuth applications, you can update redirect URIs. For all applications, you can update the name, description, and scopes.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_applications_update '{}' --json

Shortcut

kosmo integrations:workos workos_applications_update '{}' --json

`workos.workos_applications_delete`

Delete an existing Connect Application.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_applications_delete '{}' --json

Shortcut

kosmo integrations:workos workos_applications_delete '{}' --json

`workos.workos_application_credentials_list`

List all client secrets associated with a Connect Application.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_application_credentials_list '{}' --json

Shortcut

kosmo integrations:workos workos_application_credentials_list '{}' --json

`workos.workos_application_credentials_create`

Create new secrets for a Connect Application.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_application_credentials_create '{}' --json

Shortcut

kosmo integrations:workos workos_application_credentials_create '{}' --json

`workos.workos_application_credentials_delete`

Delete (revoke) an existing client secret.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_application_credentials_delete '{}' --json

Shortcut

kosmo integrations:workos workos_application_credentials_delete '{}' --json

`workos.workos_connections_list`

Get a list of all of your existing connections matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_connections_list '{}' --json

Shortcut

kosmo integrations:workos workos_connections_list '{}' --json

`workos.workos_connections_find`

Get the details of an existing connection.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_connections_find '{}' --json

Shortcut

kosmo integrations:workos workos_connections_find '{}' --json

`workos.workos_connections_delete`

Permanently deletes an existing connection. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_connections_delete '{}' --json

Shortcut

kosmo integrations:workos workos_connections_delete '{}' --json

`workos.workos_data_integrations_get_data_integration_authorize_url`

Generates an OAuth authorization URL to initiate the connection flow for a user. Redirect the user to the returned URL to begin the OAuth flow with the third-party provider.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_data_integrations_get_data_integration_authorize_url '{}' --json

Shortcut

kosmo integrations:workos workos_data_integrations_get_data_integration_authorize_url '{}' --json

`workos.workos_data_integrations_get_userland_user_token`

Fetches a valid OAuth access token for a user's connected account. WorkOS automatically handles token refresh, ensuring you always receive a valid, non-expired token.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_data_integrations_get_userland_user_token '{}' --json

Shortcut

kosmo integrations:workos workos_data_integrations_get_userland_user_token '{}' --json

`workos.workos_directories_list`

Get a list of all of your existing directories matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directories_list '{}' --json

Shortcut

kosmo integrations:workos workos_directories_list '{}' --json

`workos.workos_directories_find`

Get the details of an existing directory.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directories_find '{}' --json

Shortcut

kosmo integrations:workos workos_directories_find '{}' --json

`workos.workos_directories_delete_directory`

Permanently deletes an existing directory. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_directories_delete_directory '{}' --json

Shortcut

kosmo integrations:workos workos_directories_delete_directory '{}' --json

`workos.workos_directory_groups_list`

Get a list of all of existing directory groups matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directory_groups_list '{}' --json

Shortcut

kosmo integrations:workos workos_directory_groups_list '{}' --json

`workos.workos_directory_groups_find`

Get the details of an existing Directory Group.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directory_groups_find '{}' --json

Shortcut

kosmo integrations:workos workos_directory_groups_find '{}' --json

`workos.workos_directory_users_list`

Get a list of all of existing Directory Users matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directory_users_list '{}' --json

Shortcut

kosmo integrations:workos workos_directory_users_list '{}' --json

`workos.workos_directory_users_find`

Get the details of an existing Directory User.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_directory_users_find '{}' --json

Shortcut

kosmo integrations:workos workos_directory_users_find '{}' --json

`workos.workos_events_list`

List events for the current environment.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_events_list '{}' --json

Shortcut

kosmo integrations:workos workos_events_list '{}' --json

`workos.workos_feature_flags_list`

Get a list of all of your existing feature flags matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_feature_flags_list '{}' --json

Shortcut

kosmo integrations:workos workos_feature_flags_list '{}' --json

`workos.workos_feature_flags_find_by_slug`

Get the details of an existing feature flag by its slug.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_feature_flags_find_by_slug '{}' --json

Shortcut

kosmo integrations:workos workos_feature_flags_find_by_slug '{}' --json

`workos.workos_feature_flags_disable_flag`

Disables a feature flag in the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_feature_flags_disable_flag '{}' --json

Shortcut

kosmo integrations:workos workos_feature_flags_disable_flag '{}' --json

`workos.workos_feature_flags_enable_flag`

Enables a feature flag in the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_feature_flags_enable_flag '{}' --json

Shortcut

kosmo integrations:workos workos_feature_flags_enable_flag '{}' --json

`workos.workos_flag_targets_create_target`

Enables a feature flag for a specific target in the current environment. Currently, supported targets include users and organizations.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_flag_targets_create_target '{}' --json

Shortcut

kosmo integrations:workos workos_flag_targets_create_target '{}' --json

`workos.workos_flag_targets_delete_target`

Removes a target from the feature flag's target list in the current environment. Currently, supported targets include users and organizations.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_flag_targets_delete_target '{}' --json

Shortcut

kosmo integrations:workos workos_flag_targets_delete_target '{}' --json

`workos.workos_organization_domains_create`

Creates a new Organization Domain.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_domains_create '{}' --json

Shortcut

kosmo integrations:workos workos_organization_domains_create '{}' --json

`workos.workos_organization_domains_get`

Get the details of an existing organization domain.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_domains_get '{}' --json

Shortcut

kosmo integrations:workos workos_organization_domains_get '{}' --json

`workos.workos_organization_domains_delete`

Permanently deletes an organization domain. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_domains_delete '{}' --json

Shortcut

kosmo integrations:workos workos_organization_domains_delete '{}' --json

`workos.workos_organization_domains_verify`

Initiates verification process for an Organization Domain.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_domains_verify '{}' --json

Shortcut

kosmo integrations:workos workos_organization_domains_verify '{}' --json

`workos.workos_organizations_list`

Get a list of all of your existing organizations matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_list '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_list '{}' --json

`workos.workos_organizations_create`

Creates a new organization in the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_create '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_create '{}' --json

`workos.workos_organizations_get_by_external_id`

Get the details of an existing organization by an [external identifier](/authkit/metadata/external-identifiers).

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_get_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_get_by_external_id '{}' --json

`workos.workos_organizations_find`

Get the details of an existing organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_find '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_find '{}' --json

`workos.workos_organizations_update_organization`

Updates an organization in the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_update_organization '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_update_organization '{}' --json

`workos.workos_organizations_delete_organization`

Permanently deletes an organization in the current environment. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_delete_organization '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_delete_organization '{}' --json

`workos.workos_organizations_get_audit_log_configuration`

Get the unified view of audit log trail and stream configuration for an organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organizations_get_audit_log_configuration '{}' --json

Shortcut

kosmo integrations:workos workos_organizations_get_audit_log_configuration '{}' --json

`workos.workos_audit_logs_retention_audit_logs_retention`

Get the configured event retention period for the given Organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_logs_retention_audit_logs_retention '{}' --json

Shortcut

kosmo integrations:workos workos_audit_logs_retention_audit_logs_retention '{}' --json

`workos.workos_audit_logs_retention_update_audit_logs_retention`

Set the event retention period for the given Organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_audit_logs_retention_update_audit_logs_retention '{}' --json

Shortcut

kosmo integrations:workos workos_audit_logs_retention_update_audit_logs_retention '{}' --json

`workos.workos_organization_api_keys_list`

Get a list of all API keys for an organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_api_keys_list '{}' --json

Shortcut

kosmo integrations:workos workos_organization_api_keys_list '{}' --json

`workos.workos_organization_api_keys_create`

Create a new API key for an organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_api_keys_create '{}' --json

Shortcut

kosmo integrations:workos workos_organization_api_keys_create '{}' --json

`workos.workos_organization_feature_flags_list`

Get a list of all enabled feature flags for an organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_feature_flags_list '{}' --json

Shortcut

kosmo integrations:workos workos_organization_feature_flags_list '{}' --json

`workos.workos_groups_create`

Create a new group within an organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_groups_create '{}' --json

Shortcut

kosmo integrations:workos workos_groups_create '{}' --json

`workos.workos_groups_list`

Get a paginated list of groups within an organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_groups_list '{}' --json

Shortcut

kosmo integrations:workos workos_groups_list '{}' --json

`workos.workos_groups_get`

Retrieve a group by its ID within an organization.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_groups_get '{}' --json

Shortcut

kosmo integrations:workos workos_groups_get '{}' --json

`workos.workos_groups_update`

Update an existing group. Only the fields provided in the request body will be updated.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_groups_update '{}' --json

Shortcut

kosmo integrations:workos workos_groups_update '{}' --json

`workos.workos_groups_delete`

Delete a group from an organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_groups_delete '{}' --json

Shortcut

kosmo integrations:workos workos_groups_delete '{}' --json

`workos.workos_group_memberships_add_member`

Add an organization membership to a group.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_group_memberships_add_member '{}' --json

Shortcut

kosmo integrations:workos workos_group_memberships_add_member '{}' --json

`workos.workos_group_memberships_list_members`

Get a list of organization memberships in a group.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_group_memberships_list_members '{}' --json

Shortcut

kosmo integrations:workos workos_group_memberships_list_members '{}' --json

`workos.workos_group_memberships_remove_member`

Remove an organization membership from a group.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_group_memberships_remove_member '{}' --json

Shortcut

kosmo integrations:workos workos_group_memberships_remove_member '{}' --json

`workos.workos_portal_sessions_create`

Generate a Portal Link scoped to an Organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_portal_sessions_create '{}' --json

Shortcut

kosmo integrations:workos workos_portal_sessions_create '{}' --json

`workos.workos_radar_standalone_assess`

Assess a request for risk using the Radar engine and receive a verdict.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_radar_standalone_assess '{}' --json

Shortcut

kosmo integrations:workos workos_radar_standalone_assess '{}' --json

`workos.workos_radar_standalone_update_radar_attempt`

You may optionally inform Radar that an authentication attempt or challenge was successful using this endpoint. Some Radar controls depend on tracking recent successful attempts...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_radar_standalone_update_radar_attempt '{}' --json

Shortcut

kosmo integrations:workos workos_radar_standalone_update_radar_attempt '{}' --json

`workos.workos_radar_standalone_update_radar_list`

Add an entry to a Radar list.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_radar_standalone_update_radar_list '{}' --json

Shortcut

kosmo integrations:workos workos_radar_standalone_update_radar_list '{}' --json

`workos.workos_radar_standalone_delete_radar_list_entry`

Remove an entry from a Radar list.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_radar_standalone_delete_radar_list_entry '{}' --json

Shortcut

kosmo integrations:workos workos_radar_standalone_delete_radar_list_entry '{}' --json

`workos.workos_sso_authorize`

Initiates the single sign-on flow.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_authorize '{}' --json

Shortcut

kosmo integrations:workos workos_sso_authorize '{}' --json

`workos.workos_sso_json_web_key_set`

Returns the JSON Web Key Set (JWKS) containing the public keys used for verifying access tokens.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_json_web_key_set '{}' --json

Shortcut

kosmo integrations:workos workos_sso_json_web_key_set '{}' --json

`workos.workos_sso_logout`

Logout allows to sign out a user from your application by triggering the identity provider sign out flow. This `GET` endpoint should be a redirection, since the identity provide...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_logout '{}' --json

Shortcut

kosmo integrations:workos workos_sso_logout '{}' --json

`workos.workos_sso_logout_authorize`

You should call this endpoint from your server to generate a logout token which is required for the [Logout Redirect](/reference/sso/logout) endpoint.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_logout_authorize '{}' --json

Shortcut

kosmo integrations:workos workos_sso_logout_authorize '{}' --json

`workos.workos_sso_get_profile`

Exchange an access token for a user's [Profile](/reference/sso/profile). Because this profile is returned in the [Get a Profile and Token endpoint](/reference/sso/profile/get-pr...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_get_profile '{}' --json

Shortcut

kosmo integrations:workos workos_sso_get_profile '{}' --json

`workos.workos_sso_token`

Get an access token along with the user [Profile](/reference/sso/profile) using the code passed to your [Redirect URI](/reference/sso/get-authorization-url/redirect-uri).

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_sso_token '{}' --json

Shortcut

kosmo integrations:workos workos_sso_token '{}' --json

`workos.workos_userland_sessions_authenticate_0`

Authenticate a user with a specified [authentication method](/reference/authkit/authentication).

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_sessions_authenticate_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_sessions_authenticate_0 '{}' --json

`workos.workos_userland_sso_authorize`

Generates an OAuth 2.0 authorization URL to authenticate a user with AuthKit or SSO.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_sso_authorize '{}' --json

Shortcut

kosmo integrations:workos workos_userland_sso_authorize '{}' --json

`workos.workos_userland_sso_device_authorization`

Initiates the CLI Auth flow by requesting a device code and verification URLs. This endpoint implements the OAuth 2.0 Device Authorization Flow ([RFC 8628](https://datatracker.i...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_sso_device_authorization '{}' --json

Shortcut

kosmo integrations:workos workos_userland_sso_device_authorization '{}' --json

`workos.workos_cors_origins_create_cors_origin`

Creates a new CORS origin for the current environment. CORS origins allow browser-based applications to make requests to the WorkOS API.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_cors_origins_create_cors_origin '{}' --json

Shortcut

kosmo integrations:workos workos_cors_origins_create_cors_origin '{}' --json

`workos.workos_userland_users_get_email_verification`

Get the details of an existing email verification code that can be used to send an email to a user for verification.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_get_email_verification '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_get_email_verification '{}' --json

`workos.workos_userland_user_invites_list`

Get a list of all of invitations matching the criteria specified.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_list '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_list '{}' --json

`workos.workos_userland_user_invites_create`

Sends an invitation email to the recipient.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_create '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_create '{}' --json

`workos.workos_userland_user_invites_get_by_token`

Retrieve an existing invitation using the token.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_get_by_token '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_get_by_token '{}' --json

`workos.workos_userland_user_invites_get`

Get the details of an existing invitation.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_get '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_get '{}' --json

`workos.workos_userland_user_invites_accept`

Accepts an invitation and, if linked to an organization, activates the user's membership in that organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_accept '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_accept '{}' --json

`workos.workos_userland_user_invites_resend`

Resends an invitation email to the recipient. The invitation must be in a pending state.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_resend '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_resend '{}' --json

`workos.workos_userland_user_invites_revoke`

Revokes an existing invitation.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_invites_revoke '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_invites_revoke '{}' --json

`workos.workos_jwt_templates_get_jwt_template`

Get the JWT template for the current environment.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_jwt_templates_get_jwt_template '{}' --json

Shortcut

kosmo integrations:workos workos_jwt_templates_get_jwt_template '{}' --json

`workos.workos_jwt_templates_update_jwt_template`

Update the JWT template for the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_jwt_templates_update_jwt_template '{}' --json

Shortcut

kosmo integrations:workos workos_jwt_templates_update_jwt_template '{}' --json

`workos.workos_userland_magic_auth_send_magic_auth_code_and_return`

Creates a one-time authentication code that can be sent to the user's email address. The code expires in 10 minutes. To verify the code, [authenticate the user with Magic Auth](...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_magic_auth_send_magic_auth_code_and_return '{}' --json

Shortcut

kosmo integrations:workos workos_userland_magic_auth_send_magic_auth_code_and_return '{}' --json

`workos.workos_userland_magic_auth_get`

Get the details of an existing [Magic Auth](/reference/authkit/magic-auth) code that can be used to send an email to a user for authentication.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_magic_auth_get '{}' --json

Shortcut

kosmo integrations:workos workos_userland_magic_auth_get '{}' --json

`workos.workos_userland_user_organization_memberships_list`

Get a list of all organization memberships matching the criteria specified. At least one of `user_id` or `organization_id` must be provided. By default only active memberships a...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_list '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_list '{}' --json

`workos.workos_userland_user_organization_memberships_create`

Creates a new `active` organization membership for the given organization and user. Calling this API with an organization and user that match an `inactive` organization membersh...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_create '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_create '{}' --json

`workos.workos_userland_user_organization_memberships_get`

Get the details of an existing organization membership.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_get '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_get '{}' --json

`workos.workos_userland_user_organization_memberships_delete`

Permanently deletes an existing organization membership. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_delete '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_delete '{}' --json

`workos.workos_userland_user_organization_memberships_update`

Update the details of an existing organization membership.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_update '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_update '{}' --json

`workos.workos_userland_user_organization_memberships_deactivate`

Deactivates an `active` organization membership. Emits an [organization_membership.updated](/events/organization-membership) event upon successful deactivation. - Deactivating a...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_deactivate '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_deactivate '{}' --json

`workos.workos_userland_user_organization_memberships_reactivate`

Reactivates an `inactive` organization membership, retaining the pre-existing role(s). Emits an [organization_membership.updated](/events/organization-membership) event upon suc...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_organization_memberships_reactivate '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_organization_memberships_reactivate '{}' --json

`workos.workos_organization_membership_groups_list_groups`

Get a list of groups that an organization membership belongs to.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_organization_membership_groups_list_groups '{}' --json

Shortcut

kosmo integrations:workos workos_organization_membership_groups_list_groups '{}' --json

`workos.workos_userland_users_create_password_reset_token`

Creates a one-time token that can be used to reset a user's password.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_create_password_reset_token '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_create_password_reset_token '{}' --json

`workos.workos_userland_users_reset_password_0`

Sets a new password using the `token` query parameter from the link that the user received. Successfully resetting the password will verify a user's email, if it hasn't been ver...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_reset_password_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_reset_password_0 '{}' --json

`workos.workos_userland_users_get_password_reset`

Get the details of an existing password reset token that can be used to reset a user's password.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_get_password_reset '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_get_password_reset '{}' --json

`workos.workos_redirect_uris_create`

Creates a new redirect URI for an environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_redirect_uris_create '{}' --json

Shortcut

kosmo integrations:workos workos_redirect_uris_create '{}' --json

`workos.workos_userland_sessions_logout`

Logout a user from the current [session](/reference/authkit/session).

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_sessions_logout '{}' --json

Shortcut

kosmo integrations:workos workos_userland_sessions_logout '{}' --json

`workos.workos_userland_sessions_revoke_session`

Revoke a [user session](/reference/authkit/session).

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_sessions_revoke_session '{}' --json

Shortcut

kosmo integrations:workos workos_userland_sessions_revoke_session '{}' --json

`workos.workos_userland_users_list_0`

Get a list of all of your existing users matching the criteria specified.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_list_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_list_0 '{}' --json

`workos.workos_userland_users_create_0`

Create a new user in the current environment.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_create_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_create_0 '{}' --json

`workos.workos_userland_users_get_by_external_id`

Get the details of an existing user by an [external identifier](/authkit/metadata/external-identifiers).

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_get_by_external_id '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_get_by_external_id '{}' --json

`workos.workos_userland_users_update_0`

Updates properties of a user. The omitted properties will be left unchanged.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_update_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_update_0 '{}' --json

`workos.workos_userland_users_get_0`

Get the details of an existing user.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_get_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_get_0 '{}' --json

`workos.workos_userland_users_delete_0`

Permanently deletes a user in the current environment. It cannot be undone.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_delete_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_delete_0 '{}' --json

`workos.workos_userland_users_confirm_email_change`

Confirms an email change using the one-time code received by the user.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_confirm_email_change '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_confirm_email_change '{}' --json

`workos.workos_userland_users_send_email_change`

Sends an email that contains a one-time code used to change a user's email address.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_send_email_change '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_send_email_change '{}' --json

`workos.workos_userland_users_email_verification_0`

Verifies an email address using the one-time code received by the user.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_email_verification_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_email_verification_0 '{}' --json

`workos.workos_userland_users_send_verification_email_0`

Sends an email that contains a one-time code used to verify a user’s email address.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_users_send_verification_email_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_users_send_verification_email_0 '{}' --json

`workos.workos_userland_user_identities_get`

Get a list of identities associated with the user. A user can have multiple associated identities after going through [identity linking](/authkit/identity-linking). Currently on...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_identities_get '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_identities_get '{}' --json

`workos.workos_userland_user_sessions_list`

Get a list of all active sessions for a specific user.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_sessions_list '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_sessions_list '{}' --json

`workos.workos_user_api_keys_list`

Get a list of API keys owned by a specific user.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_user_api_keys_list '{}' --json

Shortcut

kosmo integrations:workos workos_user_api_keys_list '{}' --json

`workos.workos_user_api_keys_create`

Create a new API key owned by a user. The user must have an active membership in the specified organization.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_user_api_keys_create '{}' --json

Shortcut

kosmo integrations:workos workos_user_api_keys_create '{}' --json

`workos.workos_userland_user_feature_flags_list`

Get a list of all enabled feature flags for the provided user. This includes feature flags enabled specifically for the user as well as any organizations that the user is a memb...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_feature_flags_list '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_feature_flags_list '{}' --json

`workos.workos_authorized_applications_list`

Get a list of all Connect applications that the user has authorized.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorized_applications_list '{}' --json

Shortcut

kosmo integrations:workos workos_authorized_applications_list '{}' --json

`workos.workos_authorized_applications_delete`

Delete an existing Authorized Connect Application.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_authorized_applications_delete '{}' --json

Shortcut

kosmo integrations:workos workos_authorized_applications_delete '{}' --json

`workos.workos_data_integrations_user_management_get_user_data_installation`

Retrieves a user's [connected account](/reference/pipes/connected-account) for a specific provider.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_data_integrations_user_management_get_user_data_installation '{}' --json

Shortcut

kosmo integrations:workos workos_data_integrations_user_management_get_user_data_installation '{}' --json

`workos.workos_data_integrations_user_management_delete_user_data_installation`

Disconnects WorkOS's account for the user, including removing any stored access and refresh tokens. The user will need to reauthorize if they want to reconnect. This does not re...

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_data_integrations_user_management_delete_user_data_installation '{}' --json

Shortcut

kosmo integrations:workos workos_data_integrations_user_management_delete_user_data_installation '{}' --json

`workos.workos_data_integrations_user_management_get_user_data_integrations`

Retrieves a list of available providers and the user's connection status for each. Returns all providers configured for your environment, along with the user's [connected accoun...

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_data_integrations_user_management_get_user_data_integrations '{}' --json

Shortcut

kosmo integrations:workos workos_data_integrations_user_management_get_user_data_integrations '{}' --json

`workos.workos_userland_user_authentication_factors_create_0`

Enrolls a user in a new [authentication factor](/reference/authkit/mfa/authentication-factor).

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_authentication_factors_create_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_authentication_factors_create_0 '{}' --json

`workos.workos_userland_user_authentication_factors_list_0`

Lists the [authentication factors](/reference/authkit/mfa/authentication-factor) for a user.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_userland_user_authentication_factors_list_0 '{}' --json

Shortcut

kosmo integrations:workos workos_userland_user_authentication_factors_list_0 '{}' --json

`workos.workos_webhook_endpoints_list`

Get a list of all of your existing webhook endpoints.

Read read

Parameters: none

Generic call

kosmo integrations:call workos.workos_webhook_endpoints_list '{}' --json

Shortcut

kosmo integrations:workos workos_webhook_endpoints_list '{}' --json

`workos.workos_webhook_endpoints_create`

Create a new webhook endpoint to receive event notifications.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_webhook_endpoints_create '{}' --json

Shortcut

kosmo integrations:workos workos_webhook_endpoints_create '{}' --json

`workos.workos_webhook_endpoints_update`

Update the properties of an existing webhook endpoint.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_webhook_endpoints_update '{}' --json

Shortcut

kosmo integrations:workos workos_webhook_endpoints_update '{}' --json

`workos.workos_webhook_endpoints_delete`

Delete an existing webhook endpoint.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_webhook_endpoints_delete '{}' --json

Shortcut

kosmo integrations:workos workos_webhook_endpoints_delete '{}' --json

`workos.workos_widgets_public_issue_widget_session_token`

Generate a widget token scoped to an organization and user with the specified scopes.

Write write

Parameters: none

Generic call

kosmo integrations:call workos.workos_widgets_public_issue_widget_session_token '{}' --json

Shortcut

kosmo integrations:workos workos_widgets_public_issue_widget_session_token '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

workos.workos_api_keys_validate_api_key 0 parameters

Schema command

kosmo integrations:schema workos.workos_api_keys_validate_api_key --json

Parameter	Type	Required	Description
No parameters.

workos.workos_api_keys_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_api_keys_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_validators_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_validators_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_validator_versions_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_validator_versions_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_validator_versions_schemas 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_validator_versions_schemas --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_events_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_events_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_exports_exports 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_exports_exports --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_log_exports_export 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_log_exports_export --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authentication_challenges_verify 0 parameters

Schema command

kosmo integrations:schema workos.workos_authentication_challenges_verify --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authentication_factors_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_authentication_factors_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authentication_factors_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_authentication_factors_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authentication_factors_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_authentication_factors_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authentication_factors_challenge 0 parameters

Schema command

kosmo integrations:schema workos.workos_authentication_factors_challenge --json

Parameter	Type	Required	Description
No parameters.

workos.workos_external_auth_complete_login 0 parameters

Schema command

kosmo integrations:schema workos.workos_external_auth_complete_login --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_check 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_check --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_list_resources_for_membership 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_list_resources_for_membership --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_list_effective_permissions 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_list_effective_permissions --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_list_effective_permissions_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_list_effective_permissions_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_list_role_assignments 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_list_role_assignments --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_assign_role 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_assign_role --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_remove_role_by_criteria 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_remove_role_by_criteria --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_remove_role_by_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_remove_role_by_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_roles_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_roles_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_roles_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_roles_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_roles_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_roles_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_roles_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_roles_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_roles_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_roles_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_role_permissions_set_permissions 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_role_permissions_set_permissions --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_role_permissions_add_permission 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_role_permissions_add_permission --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_organization_role_permissions_remove_permission 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_organization_role_permissions_remove_permission --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_by_external_id_get_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_by_external_id_get_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_by_external_id_update_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_by_external_id_update_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_by_external_id_delete_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_by_external_id_delete_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_permissions_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_permissions_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_permissions_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_permissions_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_permissions_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_permissions_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_permissions_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_permissions_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_permissions_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_permissions_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_find_by_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_find_by_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_resources_list_organization_memberships_for_resource 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_resources_list_organization_memberships_for_resource --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_assignments_list_role_assignments_for_resource 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_assignments_list_role_assignments_for_resource --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_roles_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_roles_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_roles_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_roles_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_roles_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_roles_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_roles_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_roles_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_permissions_set_permissions 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_permissions_set_permissions --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorization_role_permissions_add_permission 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorization_role_permissions_add_permission --json

Parameter	Type	Required	Description
No parameters.

workos.workos_applications_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_applications_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_applications_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_applications_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_applications_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_applications_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_applications_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_applications_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_applications_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_applications_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_application_credentials_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_application_credentials_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_application_credentials_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_application_credentials_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_application_credentials_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_application_credentials_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_connections_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_connections_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_connections_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_connections_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_connections_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_connections_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_data_integrations_get_data_integration_authorize_url 0 parameters

Schema command

kosmo integrations:schema workos.workos_data_integrations_get_data_integration_authorize_url --json

Parameter	Type	Required	Description
No parameters.

workos.workos_data_integrations_get_userland_user_token 0 parameters

Schema command

kosmo integrations:schema workos.workos_data_integrations_get_userland_user_token --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directories_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_directories_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directories_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_directories_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directories_delete_directory 0 parameters

Schema command

kosmo integrations:schema workos.workos_directories_delete_directory --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directory_groups_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_directory_groups_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directory_groups_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_directory_groups_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directory_users_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_directory_users_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_directory_users_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_directory_users_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_events_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_events_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_feature_flags_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_feature_flags_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_feature_flags_find_by_slug 0 parameters

Schema command

kosmo integrations:schema workos.workos_feature_flags_find_by_slug --json

Parameter	Type	Required	Description
No parameters.

workos.workos_feature_flags_disable_flag 0 parameters

Schema command

kosmo integrations:schema workos.workos_feature_flags_disable_flag --json

Parameter	Type	Required	Description
No parameters.

workos.workos_feature_flags_enable_flag 0 parameters

Schema command

kosmo integrations:schema workos.workos_feature_flags_enable_flag --json

Parameter	Type	Required	Description
No parameters.

workos.workos_flag_targets_create_target 0 parameters

Schema command

kosmo integrations:schema workos.workos_flag_targets_create_target --json

Parameter	Type	Required	Description
No parameters.

workos.workos_flag_targets_delete_target 0 parameters

Schema command

kosmo integrations:schema workos.workos_flag_targets_delete_target --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_domains_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_domains_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_domains_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_domains_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_domains_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_domains_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_domains_verify 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_domains_verify --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_get_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_get_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_find 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_find --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_update_organization 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_update_organization --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_delete_organization 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_delete_organization --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organizations_get_audit_log_configuration 0 parameters

Schema command

kosmo integrations:schema workos.workos_organizations_get_audit_log_configuration --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_logs_retention_audit_logs_retention 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_logs_retention_audit_logs_retention --json

Parameter	Type	Required	Description
No parameters.

workos.workos_audit_logs_retention_update_audit_logs_retention 0 parameters

Schema command

kosmo integrations:schema workos.workos_audit_logs_retention_update_audit_logs_retention --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_api_keys_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_api_keys_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_api_keys_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_api_keys_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_feature_flags_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_feature_flags_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_groups_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_groups_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_groups_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_groups_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_groups_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_groups_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_groups_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_groups_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_groups_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_groups_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_group_memberships_add_member 0 parameters

Schema command

kosmo integrations:schema workos.workos_group_memberships_add_member --json

Parameter	Type	Required	Description
No parameters.

workos.workos_group_memberships_list_members 0 parameters

Schema command

kosmo integrations:schema workos.workos_group_memberships_list_members --json

Parameter	Type	Required	Description
No parameters.

workos.workos_group_memberships_remove_member 0 parameters

Schema command

kosmo integrations:schema workos.workos_group_memberships_remove_member --json

Parameter	Type	Required	Description
No parameters.

workos.workos_portal_sessions_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_portal_sessions_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_radar_standalone_assess 0 parameters

Schema command

kosmo integrations:schema workos.workos_radar_standalone_assess --json

Parameter	Type	Required	Description
No parameters.

workos.workos_radar_standalone_update_radar_attempt 0 parameters

Schema command

kosmo integrations:schema workos.workos_radar_standalone_update_radar_attempt --json

Parameter	Type	Required	Description
No parameters.

workos.workos_radar_standalone_update_radar_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_radar_standalone_update_radar_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_radar_standalone_delete_radar_list_entry 0 parameters

Schema command

kosmo integrations:schema workos.workos_radar_standalone_delete_radar_list_entry --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_authorize 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_authorize --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_json_web_key_set 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_json_web_key_set --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_logout 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_logout --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_logout_authorize 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_logout_authorize --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_get_profile 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_get_profile --json

Parameter	Type	Required	Description
No parameters.

workos.workos_sso_token 0 parameters

Schema command

kosmo integrations:schema workos.workos_sso_token --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_sessions_authenticate_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_sessions_authenticate_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_sso_authorize 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_sso_authorize --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_sso_device_authorization 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_sso_device_authorization --json

Parameter	Type	Required	Description
No parameters.

workos.workos_cors_origins_create_cors_origin 0 parameters

Schema command

kosmo integrations:schema workos.workos_cors_origins_create_cors_origin --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_get_email_verification 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_get_email_verification --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_get_by_token 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_get_by_token --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_accept 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_accept --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_resend 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_resend --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_invites_revoke 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_invites_revoke --json

Parameter	Type	Required	Description
No parameters.

workos.workos_jwt_templates_get_jwt_template 0 parameters

Schema command

kosmo integrations:schema workos.workos_jwt_templates_get_jwt_template --json

Parameter	Type	Required	Description
No parameters.

workos.workos_jwt_templates_update_jwt_template 0 parameters

Schema command

kosmo integrations:schema workos.workos_jwt_templates_update_jwt_template --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_magic_auth_send_magic_auth_code_and_return 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_magic_auth_send_magic_auth_code_and_return --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_magic_auth_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_magic_auth_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_deactivate 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_deactivate --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_organization_memberships_reactivate 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_organization_memberships_reactivate --json

Parameter	Type	Required	Description
No parameters.

workos.workos_organization_membership_groups_list_groups 0 parameters

Schema command

kosmo integrations:schema workos.workos_organization_membership_groups_list_groups --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_create_password_reset_token 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_create_password_reset_token --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_reset_password_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_reset_password_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_get_password_reset 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_get_password_reset --json

Parameter	Type	Required	Description
No parameters.

workos.workos_redirect_uris_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_redirect_uris_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_sessions_logout 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_sessions_logout --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_sessions_revoke_session 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_sessions_revoke_session --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_list_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_list_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_create_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_create_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_get_by_external_id 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_get_by_external_id --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_update_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_update_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_get_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_get_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_delete_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_delete_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_confirm_email_change 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_confirm_email_change --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_send_email_change 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_send_email_change --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_email_verification_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_email_verification_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_users_send_verification_email_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_users_send_verification_email_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_identities_get 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_identities_get --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_sessions_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_sessions_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_user_api_keys_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_user_api_keys_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_user_api_keys_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_user_api_keys_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_feature_flags_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_feature_flags_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorized_applications_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorized_applications_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_authorized_applications_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_authorized_applications_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_data_integrations_user_management_get_user_data_installation 0 parameters

Schema command

kosmo integrations:schema workos.workos_data_integrations_user_management_get_user_data_installation --json

Parameter	Type	Required	Description
No parameters.

workos.workos_data_integrations_user_management_delete_user_data_installation 0 parameters

Schema command

kosmo integrations:schema workos.workos_data_integrations_user_management_delete_user_data_installation --json

Parameter	Type	Required	Description
No parameters.

workos.workos_data_integrations_user_management_get_user_data_integrations 0 parameters

Schema command

kosmo integrations:schema workos.workos_data_integrations_user_management_get_user_data_integrations --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_authentication_factors_create_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_authentication_factors_create_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_userland_user_authentication_factors_list_0 0 parameters

Schema command

kosmo integrations:schema workos.workos_userland_user_authentication_factors_list_0 --json

Parameter	Type	Required	Description
No parameters.

workos.workos_webhook_endpoints_list 0 parameters

Schema command

kosmo integrations:schema workos.workos_webhook_endpoints_list --json

Parameter	Type	Required	Description
No parameters.

workos.workos_webhook_endpoints_create 0 parameters

Schema command

kosmo integrations:schema workos.workos_webhook_endpoints_create --json

Parameter	Type	Required	Description
No parameters.

workos.workos_webhook_endpoints_update 0 parameters

Schema command

kosmo integrations:schema workos.workos_webhook_endpoints_update --json

Parameter	Type	Required	Description
No parameters.

workos.workos_webhook_endpoints_delete 0 parameters

Schema command

kosmo integrations:schema workos.workos_webhook_endpoints_delete --json

Parameter	Type	Required	Description
No parameters.

workos.workos_widgets_public_issue_widget_session_token 0 parameters

Schema command

kosmo integrations:schema workos.workos_widgets_public_issue_widget_session_token --json

Parameter	Type	Required	Description
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.