KosmoKrator

productivity

WorkOS MCP Gateway for AI Agents

Expose WorkOS tools to Claude Code, Cursor, Codex, and other MCP clients through the local KosmoKrator MCP gateway.

WorkOS MCP Gateway

Expose WorkOS to MCP clients with `kosmokrator mcp:serve --integration=workos`.

If the client has never used KosmoKrator before, install it first, then register this integration as a stdio MCP server.

Install KosmoKrator 
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash
Install gateway entry 
kosmokrator mcp:gateway:install --integration=workos --write=deny --json
MCP configuration 
{
  "mcpServers": {
    "kosmokrator-workos": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=workos",
        "--write=deny"
      ]
    }
  }
}
Serve manually 
kosmokrator mcp:serve --integration=workos --write=deny

Client Notes

Use one scoped MCP gateway entry, then adapt the config location to the client or framework.

Claude Code Connect local KosmoKrator integrations to Claude Code through one scoped MCP gateway entry. Claude Code can launch the local kosmo binary directly from the project MCP config.
Cursor Expose selected local integrations to Cursor through KosmoKrator without configuring each service as its own MCP server. Use the same KosmoKrator install and integration credentials that power terminal and headless runs.
Codex Use KosmoKrator as a local MCP proxy for Codex so coding sessions can reach selected integrations with explicit write policy. Keep write access denied or ask-based unless the workspace is trusted.
OpenAI Agents SDK Attach KosmoKrator integration tools to OpenAI Agents SDK workflows through a local MCP gateway. Use headless JSON commands for CI-style execution and MCP for agent tool discovery.
Claude Agent SDK Give Claude Agent SDK workflows access to KosmoKrator integrations through a local MCP server. Use a narrow integration list so the agent does not load unrelated tools.
Vercel AI SDK Use KosmoKrator as a local integration gateway for Vercel AI SDK agents and scripts. Prefer CLI JSON calls when a workflow only needs one deterministic integration operation.
LangChain Bridge LangChain agents to local KosmoKrator integration tools through MCP or headless CLI calls. Keep the gateway scoped to the integration and operation class needed by the chain.
LangGraph Run KosmoKrator integration calls from LangGraph nodes while preserving local credentials and permissions. Headless CLI calls fit repeatable graph edges; MCP fits exploratory agent nodes.
CrewAI Expose KosmoKrator integrations to CrewAI workers as scoped local tools. Use per-worker integration scopes to avoid giving every worker every tool.
Generic MCP Clients Connect any stdio-compatible MCP client to local KosmoKrator integration tools. Start with read-only write policy and expand only for trusted projects.

MCP Tool Names

KosmoKrator exposes integration tools through the gateway with stable names.

MCP toolSource functionType
integration__workos__workos_api_keys_validate_api_key workos.workos_api_keys_validate_api_key Write write
integration__workos__workos_api_keys_delete workos.workos_api_keys_delete Write write
integration__workos__workos_audit_log_validators_list workos.workos_audit_log_validators_list Read read
integration__workos__workos_audit_log_validator_versions_create workos.workos_audit_log_validator_versions_create Write write
integration__workos__workos_audit_log_validator_versions_schemas workos.workos_audit_log_validator_versions_schemas Read read
integration__workos__workos_audit_log_events_create workos.workos_audit_log_events_create Write write
integration__workos__workos_audit_log_exports_exports workos.workos_audit_log_exports_exports Write write
integration__workos__workos_audit_log_exports_export workos.workos_audit_log_exports_export Read read
integration__workos__workos_authentication_challenges_verify workos.workos_authentication_challenges_verify Write write
integration__workos__workos_authentication_factors_create workos.workos_authentication_factors_create Write write
integration__workos__workos_authentication_factors_get workos.workos_authentication_factors_get Read read
integration__workos__workos_authentication_factors_delete workos.workos_authentication_factors_delete Write write
integration__workos__workos_authentication_factors_challenge workos.workos_authentication_factors_challenge Write write
integration__workos__workos_external_auth_complete_login workos.workos_external_auth_complete_login Write write
integration__workos__workos_authorization_check workos.workos_authorization_check Write write
integration__workos__workos_authorization_list_resources_for_membership workos.workos_authorization_list_resources_for_membership Read read
integration__workos__workos_authorization_list_effective_permissions workos.workos_authorization_list_effective_permissions Read read
integration__workos__workos_authorization_list_effective_permissions_by_external_id workos.workos_authorization_list_effective_permissions_by_external_id Read read
integration__workos__workos_authorization_role_assignments_list_role_assignments workos.workos_authorization_role_assignments_list_role_assignments Write write
integration__workos__workos_authorization_role_assignments_assign_role workos.workos_authorization_role_assignments_assign_role Write write
integration__workos__workos_authorization_role_assignments_remove_role_by_criteria workos.workos_authorization_role_assignments_remove_role_by_criteria Write write
integration__workos__workos_authorization_role_assignments_remove_role_by_id workos.workos_authorization_role_assignments_remove_role_by_id Write write
integration__workos__workos_authorization_organization_roles_create workos.workos_authorization_organization_roles_create Write write
integration__workos__workos_authorization_organization_roles_list workos.workos_authorization_organization_roles_list Read read
integration__workos__workos_authorization_organization_roles_get workos.workos_authorization_organization_roles_get Read read
integration__workos__workos_authorization_organization_roles_update workos.workos_authorization_organization_roles_update Write write
integration__workos__workos_authorization_organization_roles_delete workos.workos_authorization_organization_roles_delete Write write
integration__workos__workos_authorization_organization_role_permissions_set_permissions workos.workos_authorization_organization_role_permissions_set_permissions Write write
integration__workos__workos_authorization_organization_role_permissions_add_permission workos.workos_authorization_organization_role_permissions_add_permission Write write
integration__workos__workos_authorization_organization_role_permissions_remove_permission workos.workos_authorization_organization_role_permissions_remove_permission Write write
integration__workos__workos_authorization_resources_by_external_id_get_by_external_id workos.workos_authorization_resources_by_external_id_get_by_external_id Read read
integration__workos__workos_authorization_resources_by_external_id_update_by_external_id workos.workos_authorization_resources_by_external_id_update_by_external_id Write write
integration__workos__workos_authorization_resources_by_external_id_delete_by_external_id workos.workos_authorization_resources_by_external_id_delete_by_external_id Write write
integration__workos__workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id workos.workos_authorization_resources_by_external_id_list_organization_memberships_for_resource_by_external_id Read read
integration__workos__workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id workos.workos_authorization_role_assignments_list_role_assignments_for_resource_by_external_id Write write
integration__workos__workos_authorization_permissions_list workos.workos_authorization_permissions_list Read read
integration__workos__workos_authorization_permissions_create workos.workos_authorization_permissions_create Write write
integration__workos__workos_authorization_permissions_find workos.workos_authorization_permissions_find Read read
integration__workos__workos_authorization_permissions_update workos.workos_authorization_permissions_update Write write
integration__workos__workos_authorization_permissions_delete workos.workos_authorization_permissions_delete Write write
integration__workos__workos_authorization_resources_list workos.workos_authorization_resources_list Read read
integration__workos__workos_authorization_resources_create workos.workos_authorization_resources_create Write write
integration__workos__workos_authorization_resources_find_by_id workos.workos_authorization_resources_find_by_id Read read
integration__workos__workos_authorization_resources_update workos.workos_authorization_resources_update Write write
integration__workos__workos_authorization_resources_delete workos.workos_authorization_resources_delete Write write
integration__workos__workos_authorization_resources_list_organization_memberships_for_resource workos.workos_authorization_resources_list_organization_memberships_for_resource Read read
integration__workos__workos_authorization_role_assignments_list_role_assignments_for_resource workos.workos_authorization_role_assignments_list_role_assignments_for_resource Write write
integration__workos__workos_authorization_roles_create workos.workos_authorization_roles_create Write write
integration__workos__workos_authorization_roles_list workos.workos_authorization_roles_list Read read
integration__workos__workos_authorization_roles_get workos.workos_authorization_roles_get Read read
integration__workos__workos_authorization_roles_update workos.workos_authorization_roles_update Write write
integration__workos__workos_authorization_role_permissions_set_permissions workos.workos_authorization_role_permissions_set_permissions Write write
integration__workos__workos_authorization_role_permissions_add_permission workos.workos_authorization_role_permissions_add_permission Write write
integration__workos__workos_applications_list workos.workos_applications_list Read read
integration__workos__workos_applications_create workos.workos_applications_create Write write
integration__workos__workos_applications_find workos.workos_applications_find Read read
integration__workos__workos_applications_update workos.workos_applications_update Write write
integration__workos__workos_applications_delete workos.workos_applications_delete Write write
integration__workos__workos_application_credentials_list workos.workos_application_credentials_list Read read
integration__workos__workos_application_credentials_create workos.workos_application_credentials_create Write write
integration__workos__workos_application_credentials_delete workos.workos_application_credentials_delete Write write
integration__workos__workos_connections_list workos.workos_connections_list Read read
integration__workos__workos_connections_find workos.workos_connections_find Read read
integration__workos__workos_connections_delete workos.workos_connections_delete Write write
integration__workos__workos_data_integrations_get_data_integration_authorize_url workos.workos_data_integrations_get_data_integration_authorize_url Write write
integration__workos__workos_data_integrations_get_userland_user_token workos.workos_data_integrations_get_userland_user_token Write write
integration__workos__workos_directories_list workos.workos_directories_list Read read
integration__workos__workos_directories_find workos.workos_directories_find Read read
integration__workos__workos_directories_delete_directory workos.workos_directories_delete_directory Write write
integration__workos__workos_directory_groups_list workos.workos_directory_groups_list Read read
integration__workos__workos_directory_groups_find workos.workos_directory_groups_find Read read
integration__workos__workos_directory_users_list workos.workos_directory_users_list Read read
integration__workos__workos_directory_users_find workos.workos_directory_users_find Read read
integration__workos__workos_events_list workos.workos_events_list Read read
integration__workos__workos_feature_flags_list workos.workos_feature_flags_list Read read
integration__workos__workos_feature_flags_find_by_slug workos.workos_feature_flags_find_by_slug Read read
integration__workos__workos_feature_flags_disable_flag workos.workos_feature_flags_disable_flag Write write
integration__workos__workos_feature_flags_enable_flag workos.workos_feature_flags_enable_flag Write write
integration__workos__workos_flag_targets_create_target workos.workos_flag_targets_create_target Write write
integration__workos__workos_flag_targets_delete_target workos.workos_flag_targets_delete_target Write write
integration__workos__workos_organization_domains_create workos.workos_organization_domains_create Write write
integration__workos__workos_organization_domains_get workos.workos_organization_domains_get Read read
integration__workos__workos_organization_domains_delete workos.workos_organization_domains_delete Write write
integration__workos__workos_organization_domains_verify workos.workos_organization_domains_verify Write write
integration__workos__workos_organizations_list workos.workos_organizations_list Read read
integration__workos__workos_organizations_create workos.workos_organizations_create Write write
integration__workos__workos_organizations_get_by_external_id workos.workos_organizations_get_by_external_id Read read
integration__workos__workos_organizations_find workos.workos_organizations_find Read read
integration__workos__workos_organizations_update_organization workos.workos_organizations_update_organization Write write
integration__workos__workos_organizations_delete_organization workos.workos_organizations_delete_organization Write write
integration__workos__workos_organizations_get_audit_log_configuration workos.workos_organizations_get_audit_log_configuration Read read
integration__workos__workos_audit_logs_retention_audit_logs_retention workos.workos_audit_logs_retention_audit_logs_retention Read read
integration__workos__workos_audit_logs_retention_update_audit_logs_retention workos.workos_audit_logs_retention_update_audit_logs_retention Write write
integration__workos__workos_organization_api_keys_list workos.workos_organization_api_keys_list Read read
integration__workos__workos_organization_api_keys_create workos.workos_organization_api_keys_create Write write
integration__workos__workos_organization_feature_flags_list workos.workos_organization_feature_flags_list Read read
integration__workos__workos_groups_create workos.workos_groups_create Write write
integration__workos__workos_groups_list workos.workos_groups_list Read read
integration__workos__workos_groups_get workos.workos_groups_get Read read
integration__workos__workos_groups_update workos.workos_groups_update Write write
integration__workos__workos_groups_delete workos.workos_groups_delete Write write
integration__workos__workos_group_memberships_add_member workos.workos_group_memberships_add_member Write write
integration__workos__workos_group_memberships_list_members workos.workos_group_memberships_list_members Read read
integration__workos__workos_group_memberships_remove_member workos.workos_group_memberships_remove_member Write write
integration__workos__workos_portal_sessions_create workos.workos_portal_sessions_create Write write
integration__workos__workos_radar_standalone_assess workos.workos_radar_standalone_assess Write write
integration__workos__workos_radar_standalone_update_radar_attempt workos.workos_radar_standalone_update_radar_attempt Write write
integration__workos__workos_radar_standalone_update_radar_list workos.workos_radar_standalone_update_radar_list Write write
integration__workos__workos_radar_standalone_delete_radar_list_entry workos.workos_radar_standalone_delete_radar_list_entry Write write
integration__workos__workos_sso_authorize workos.workos_sso_authorize Read read
integration__workos__workos_sso_json_web_key_set workos.workos_sso_json_web_key_set Read read
integration__workos__workos_sso_logout workos.workos_sso_logout Read read
integration__workos__workos_sso_logout_authorize workos.workos_sso_logout_authorize Write write
integration__workos__workos_sso_get_profile workos.workos_sso_get_profile Read read
integration__workos__workos_sso_token workos.workos_sso_token Write write
integration__workos__workos_userland_sessions_authenticate_0 workos.workos_userland_sessions_authenticate_0 Write write
integration__workos__workos_userland_sso_authorize workos.workos_userland_sso_authorize Read read
integration__workos__workos_userland_sso_device_authorization workos.workos_userland_sso_device_authorization Write write
integration__workos__workos_cors_origins_create_cors_origin workos.workos_cors_origins_create_cors_origin Write write
integration__workos__workos_userland_users_get_email_verification workos.workos_userland_users_get_email_verification Read read
integration__workos__workos_userland_user_invites_list workos.workos_userland_user_invites_list Write write
integration__workos__workos_userland_user_invites_create workos.workos_userland_user_invites_create Write write
integration__workos__workos_userland_user_invites_get_by_token workos.workos_userland_user_invites_get_by_token Write write
integration__workos__workos_userland_user_invites_get workos.workos_userland_user_invites_get Write write
integration__workos__workos_userland_user_invites_accept workos.workos_userland_user_invites_accept Write write
integration__workos__workos_userland_user_invites_resend workos.workos_userland_user_invites_resend Write write
integration__workos__workos_userland_user_invites_revoke workos.workos_userland_user_invites_revoke Write write
integration__workos__workos_jwt_templates_get_jwt_template workos.workos_jwt_templates_get_jwt_template Read read
integration__workos__workos_jwt_templates_update_jwt_template workos.workos_jwt_templates_update_jwt_template Write write
integration__workos__workos_userland_magic_auth_send_magic_auth_code_and_return workos.workos_userland_magic_auth_send_magic_auth_code_and_return Write write
integration__workos__workos_userland_magic_auth_get workos.workos_userland_magic_auth_get Read read
integration__workos__workos_userland_user_organization_memberships_list workos.workos_userland_user_organization_memberships_list Read read
integration__workos__workos_userland_user_organization_memberships_create workos.workos_userland_user_organization_memberships_create Write write
integration__workos__workos_userland_user_organization_memberships_get workos.workos_userland_user_organization_memberships_get Read read
integration__workos__workos_userland_user_organization_memberships_delete workos.workos_userland_user_organization_memberships_delete Write write
integration__workos__workos_userland_user_organization_memberships_update workos.workos_userland_user_organization_memberships_update Write write
integration__workos__workos_userland_user_organization_memberships_deactivate workos.workos_userland_user_organization_memberships_deactivate Write write
integration__workos__workos_userland_user_organization_memberships_reactivate workos.workos_userland_user_organization_memberships_reactivate Write write
integration__workos__workos_organization_membership_groups_list_groups workos.workos_organization_membership_groups_list_groups Read read
integration__workos__workos_userland_users_create_password_reset_token workos.workos_userland_users_create_password_reset_token Write write
integration__workos__workos_userland_users_reset_password_0 workos.workos_userland_users_reset_password_0 Write write
integration__workos__workos_userland_users_get_password_reset workos.workos_userland_users_get_password_reset Write write
integration__workos__workos_redirect_uris_create workos.workos_redirect_uris_create Write write
integration__workos__workos_userland_sessions_logout workos.workos_userland_sessions_logout Read read
integration__workos__workos_userland_sessions_revoke_session workos.workos_userland_sessions_revoke_session Write write
integration__workos__workos_userland_users_list_0 workos.workos_userland_users_list_0 Read read
integration__workos__workos_userland_users_create_0 workos.workos_userland_users_create_0 Write write
integration__workos__workos_userland_users_get_by_external_id workos.workos_userland_users_get_by_external_id Read read
integration__workos__workos_userland_users_update_0 workos.workos_userland_users_update_0 Write write
integration__workos__workos_userland_users_get_0 workos.workos_userland_users_get_0 Read read
integration__workos__workos_userland_users_delete_0 workos.workos_userland_users_delete_0 Write write
integration__workos__workos_userland_users_confirm_email_change workos.workos_userland_users_confirm_email_change Write write
integration__workos__workos_userland_users_send_email_change workos.workos_userland_users_send_email_change Write write
integration__workos__workos_userland_users_email_verification_0 workos.workos_userland_users_email_verification_0 Write write
integration__workos__workos_userland_users_send_verification_email_0 workos.workos_userland_users_send_verification_email_0 Write write
integration__workos__workos_userland_user_identities_get workos.workos_userland_user_identities_get Read read
integration__workos__workos_userland_user_sessions_list workos.workos_userland_user_sessions_list Read read
integration__workos__workos_user_api_keys_list workos.workos_user_api_keys_list Read read
integration__workos__workos_user_api_keys_create workos.workos_user_api_keys_create Write write
integration__workos__workos_userland_user_feature_flags_list workos.workos_userland_user_feature_flags_list Read read
integration__workos__workos_authorized_applications_list workos.workos_authorized_applications_list Read read
integration__workos__workos_authorized_applications_delete workos.workos_authorized_applications_delete Write write
integration__workos__workos_data_integrations_user_management_get_user_data_installation workos.workos_data_integrations_user_management_get_user_data_installation Read read
integration__workos__workos_data_integrations_user_management_delete_user_data_installation workos.workos_data_integrations_user_management_delete_user_data_installation Write write
integration__workos__workos_data_integrations_user_management_get_user_data_integrations workos.workos_data_integrations_user_management_get_user_data_integrations Read read
integration__workos__workos_userland_user_authentication_factors_create_0 workos.workos_userland_user_authentication_factors_create_0 Write write
integration__workos__workos_userland_user_authentication_factors_list_0 workos.workos_userland_user_authentication_factors_list_0 Read read
integration__workos__workos_webhook_endpoints_list workos.workos_webhook_endpoints_list Read read
integration__workos__workos_webhook_endpoints_create workos.workos_webhook_endpoints_create Write write
integration__workos__workos_webhook_endpoints_update workos.workos_webhook_endpoints_update Write write
integration__workos__workos_webhook_endpoints_delete workos.workos_webhook_endpoints_delete Write write
integration__workos__workos_widgets_public_issue_widget_session_token workos.workos_widgets_public_issue_widget_session_token Write write

Write Access

Start with --write=deny for read-only MCP clients. Use --write=ask or --write=allow only when the client and workspace are trusted.