Catalog Systems Agent identity & auth WorkOS AuthKit for MCP

WorkOS AuthKit for MCP

https://workos.com/mcp

WorkOS AuthKit acts as an OAuth 2.1 authorization server for MCP servers, giving AI agents scoped access to an app with PKCE, scopes and tool permissions. WorkOS Connect can provide only the MCP OAuth flows in front of an existing user system.

Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 10 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Product vendor fix
Tier
T3
Section
Agent identity & auth
Created
searched not found fix
Latest release
searched not found fix
License
proprietary vendor fix
GitHub
not applicable — no GitHub repo fix
Pricing
searched not found fix
Funding
searched not found fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
commercial vendor fix
SDK languages
csharp, elixir, go, java, kotlin, php, python, rest, ruby, rust, typescript vendor fix
Compliance
ccpa, gdpr, hipaa, soc2-type2 vendor fix

When to use

Optimised for: searched not found

Anti-fit: searched not found

Pros & cons

Pros

searched not found

Cons

searched not found

Claims & capabilities

Give AI agents access to your app with OAuth 2.1 flows, tool permissions, PKCE, scopes, and more.

Technical surface

API surface
searched not found
Backend storage
searched not found
Deployment
searched not found
Embedding model
searched not found
Multi-tenancy
searched not found
MCP
searched not found
A2A
searched not found
OpenTelemetry
searched not found

Alternatives to WorkOS AuthKit for MCP → live options ranked by shared design, licence, hosting and MCP support

Similar systems

Other agent identity & auth in the catalog, ranked by inbound references.

  • Okta Cross App Access (XAA) T3

    Okta-backed protocol for secure agent-to-app and app-to-app access, letting enterprise IT admins manage and audit which agents connect to which applications instead of relying on shared credentials or embedded tokens.

  • Auth0 for AI Agents T3

    Auth0's identity layer for AI agents, covering user authentication, calling first- and third-party APIs on a user's behalf through delegated authorization, asynchronous human-in-the-loop approval (CIBA), fine-grained authorization for RAG, and auth for MCP.

  • Descope Agentic Identity Hub T3

    Identity provider for AI agents and MCP servers that adds auth, consent, SSO, access control and policy to AI systems. It also manages purpose-built agent credentials for downstream connections and keeps a directory of an organization's agents.

  • Keycard T3

    Runtime auth for agents that gives each agent its own identity and issues just-in-time, scoped credentials after verifying the workload, the user it acts for, and policy.

  • Merge Agent Handler T3

    Production MCP connectors that link AI agents to thousands of enterprise tools, with guided user authentication, data-access controls and observability built in.

  • Nango T3

    Code-first integration platform that connects products and AI agents to 1,000+ APIs. It handles end-user OAuth, MCP and tools, syncs, webhooks and a request proxy.

Sources (9 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-30 Added to the catalog #347

Related systems

References (2)