WorkOS
Manage your WorkOS environment — organisations, users, SSO connections, and directory sync. Sign in with WorkOS to connect.
What WorkOS exposes.
Every tool below is one this server advertised the last time Omniio refreshed it, under the workos__ namespace. Your agent never loads them all — it searches, and gets the few that match.
workos__list_operations3 arguments
Discover the WorkOS operations available through the query and mutate tools. Without arguments, returns the full index of operation names — call it once and reuse the result. Pass filter to narrow the index by keyword (operation name or description). Pass operation for that operation’s parameters and input types, or type to fully expand a specific input/enum type by name. Call whoami to see available environments and their IDs.
workos__mutate4 arguments · 1 required
Run a mutation against your WorkOS account by name. Mutations change real data in the targeted environment. Call list_operations first to discover available operations and their parameters. Pass environment_id to choose the environment (whoami returns your available environments); when the operation declares an environmentId parameter it is applied automatically, so you don’t pass it twice. Without environment_id, operations that don’t require one run against a sandbox environment. Destructive operations (permanent deletes) and billing changes require a confirmation token — the first call returns the impact plus a single-use "confirmation_token" and does not execute; pass the token back with the same arguments to proceed.
Required
operationworkos__query3 arguments · 1 required
Run a query against your WorkOS account by name. Call list_operations first to discover available operations and their parameters. Pass environment_id to choose the environment (whoami returns your available environments); when the operation declares an environmentId parameter it is applied automatically, so you don’t pass it twice. Without environment_id, operations that don’t require one run against a sandbox environment.
Required
operationworkos__whoamino arguments
Who am I
Return the identity, role, and capability posture of the authenticated caller. Includes the team, a description of what the role can and cannot do, and the available environments grouped by project, each with its ID and OAuth client ID. Environment names repeat across projects, so identify an environment by its client ID (match the WORKOS_CLIENT_ID in the app’s config) or by its project, not by name. Use the returned environment IDs as the environment_id argument for query and mutate calls.
Three steps, and the last one is not yours.
Point a client at Omniio
One URL, authorized once by your client. If you already use Omniio, this step is done.
Switch WorkOS on
Authorize it from your library; the grant is yours and stays yours.
Ask for what you need
The agent searches, reads the one schema it picked, and runs it. You do not name the tool.
claude mcp add --transport http omniio https://mcp.omniio.devOthers in the same category.
They share the endpoint, so having more than one on costs you nothing in context — the search decides which is relevant.
