WorkOS

List agent blueprints

List agent instances

List agent instance sessions

Get an agent blueprint

Get an agent instance

Get an agent registration

Get an agent instance session

Create an agent blueprint

Mint an agent token

Update an agent blueprint

Delete an agent blueprint

Delete an agent instance

Link a claim attempt to an external user

Revoke an agent instance session

Validate an agent token

Validate an agent credential

List API keys for an organization

Create an API key for an organization

Delete an API key

Expire an API key

Validate API key

Get a list of all Audit Log actions in the current environment.

Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching…

Get a list of all schemas for the Audit Logs action identified by :name.

Get the configured event retention period for the given Organization.

Create an Audit Log Event. This API supports idempotency which guarantees that performing the same operation multiple ti…

Create an Audit Log Export. Exports are scoped to a single organization within a specified date range.

Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the action does not exist…

Set the event retention period for the given Organization.

List CORS origins

List redirect URIs

Get JWT template

Create a CORS origin

Create a redirect URI

Update JWT template

Delete a redirect URI

List role assignments for a group

List effective permissions for an organization membership on a resource

List resources for organization membership

List role assignments

List permissions

List organization memberships for resource

List memberships for a resource by external ID

List effective permissions for an organization membership on a resource by external ID

List role assignments for a resource

List role assignments for a resource by external ID

List resources

Get a group role assignment

Get a custom role

Get a permission

Get a resource

Get a resource by external ID

Get an environment role

Assign a role to a group

Assign a role

Create a custom role

Create a permission

Create an authorization resource

Create an environment role

Add a permission to a custom role

Add a permission to an environment role

Update a custom role

Update a permission

Update a resource

Update a resource by external ID

Update an environment role

Replace all role assignments for a group

Set permissions for a custom role

Set permissions for an environment role

Check authorization

Remove a group role assignment

Remove group role assignments by criteria

Remove a role assignment by ID

Remove a role assignment

Delete a custom role

Remove a permission from a custom role

Delete a permission

Delete an authorization resource

Delete an authorization resource by external ID

List Client Secrets for a Connect Application

List Connect Applications

Get a Connect Application

Create a new client secret for a Connect Application

Create a Connect Application

Update a Connect Application

Delete a Connect Application

Get a list of all of your existing connections matching the criteria specified.

Get the details of an existing connection.

Creates a new connection for an organization. Provide saml_options or oidc_options to configure the identity provide…

Updates an existing connection. Only the provided fields are changed; fields that accept null are reset to their defau…

Permanently deletes an existing connection. It cannot be undone.

List data integrations

Create a data integration

List providers for an organization

List providers for a user

Get a data integration

Get an organization-owned data integration

Get an organization connected account

Get a connected account

Create another API key connected account

Create another client credentials connected account

Vend credentials for a connected account

Get an access token for a connected account

Import an organization connected account

Import a connected account

Update a data integration

Update an organization connected account

Update a connected account

Upsert an API key for a connected account

Upsert client credentials for a connected account

Update an organization-owned data integration

Get authorization URL

Delete a data integration

Delete an organization-owned data integration

Delete an organization connected account

Delete a connected account

Get a list of all of your existing directories matching the criteria specified.

Get the details of an existing directory.

Request an asynchronous sync from the directory provider. Currently supports Google Workspace directories in linked or v…

Permanently deletes an existing directory. It cannot be undone.

Get a list of all of existing directory groups matching the criteria specified.

Get the details of an existing Directory Group.

Get a list of all of existing Directory Users matching the criteria specified.

Get the details of an existing Directory User.

Get an email verification code

Verify email

Send verification email

List events for the current environment.

List feature flags

List enabled feature flags for an organization

List enabled feature flags for a user

Get a feature flag

Add a feature flag target

Remove a feature flag target

Disable a feature flag

Enable a feature flag

List Group members

List groups

List groups

Get a group

Add a member to a Group

Create a group

Update a group

Remove a member from a Group

Delete a group

Get a list of all of invitations matching the criteria specified.

Get the details of an existing invitation.

Retrieve an existing invitation using the token.

Sends an invitation email to the recipient.

Accepts an invitation and, if linked to an organization, activates the user’s membership in that organization.

Resends an invitation email to the recipient. The invitation must be in a pending state.

Revokes an existing invitation.

List IT contacts

Create an IT contact

Delete an IT contact

Invite an IT contact

Revoke an IT contact’s invitation

List authentication factors

Get Factor

Enroll an authentication factor

Challenge Factor

Delete Factor

Enroll Factor

Verify Challenge

Get the details of an existing organization domain.

Creates a new Organization Domain.

Initiates verification process for an Organization Domain.

Permanently deletes an organization domain. It cannot be undone.

Get a list of all organization memberships matching the criteria specified. At least one of user_id or `organization_i…

Get the details of an existing organization membership.

Creates a new active organization membership for the given organization and user. Calling this API with an organizatio…

Update the details of an existing organization membership.

Deactivates an active organization membership. Emits an [organization_membership.updated](https://workos.com/events/or…

Reactivates an inactive organization membership, retaining the pre-existing role(s). Emits an [organization_membership…

Permanently deletes an existing organization membership. It cannot be undone.

Get a list of all of your existing organizations matching the criteria specified.

Get the details of an existing organization.

Get the details of an existing organization by an [external identifier](https://workos.com/authkit/metadata/external-ide…

Get the unified view of audit log trail and stream configuration for an organization.

Creates a new organization in the current environment.

Updates an organization in the current environment.

Permanently deletes an organization in the current environment. It cannot be undone.

Get a password reset token

Create a password reset token

Reset the password

Get a team

Create a team

Generate a Portal Link scoped to an Organization.

Create an attempt

Add an entry to a Radar list

Update a Radar attempt

Remove an entry from a Radar list

List all environment roles in priority order.

Get a list of all roles that apply to an organization. This includes both environment roles and custom roles, returned i…

List IdP signing certificates

List SP encryption certificates

Get the SP signing certificate

Create an IdP signing certificate

Create an SP encryption certificate

Create an SP signing certificate

Delete an IdP signing certificate

Delete an SP encryption certificate

Delete the SP signing certificate

Revoke Session

Get a list of all of your existing users matching the criteria specified.

Get the details of an existing user.

Get a list of all active sessions for a specific user.

Get a list of identities associated with the user. A user can have multiple associated identities after going through [i…

Get the details of an existing user by an [external identifier](https://workos.com/authkit/metadata/external-identifiers…

Create a new user in the current environment.

Updates properties of a user. The omitted properties will be left unchanged.

Permanently deletes a user in the current environment. It cannot be undone.

List object versions

List objects

Read an object by ID

Read an object by name

Describe an object

Create an object

Create a data key

Update an object

Decrypt a data key

Delete an object

Re-encrypt a data key

List waitlist entries

List waitlists

Get a waitlist

Create a waitlist entry

Approve a waitlist entry

Delete a waitlist entry

Deny a waitlist entry

List Webhook Endpoints

Create a Webhook Endpoint

Update a Webhook Endpoint

Delete a Webhook Endpoint