WorkOS

用 curl 示例封装 WorkOS 身份管理接口：查询组织与 SSO 连接、同步 SCIM 目录用户和组、生成 Admin Portal 链接，以及基于 AuthKit 的用户查询与删除。需要 WORKOS_API_KEY，并且示例包含删除操作，因此执行前需要确认。

dwhite-oss

热度 46.17

最近更新 2026-05-11 17:37:27

分类：安全依赖：代码执行 / 第三方 API应用场景：API 集成 / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add workos

Metadata

name: workos
description: Manage enterprise SSO, Directory Sync (SCIM), Admin Portal, and user management via WorkOS API. Use when asked to set up SSO for an organization, provision users via SCIM, list directory users or groups, generate an Admin Portal link, or check SSO connection status. Requires WORKOS_API_KEY env var.

WorkOS Skill

WorkOS REST API base: https://api.workos.com

Auth

curl -H "Authorization: Bearer $WORKOS_API_KEY" https://api.workos.com/...

Organizations

List Organizations

curl "https://api.workos.com/organizations?limit=10" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Create Organization

curl -X POST "https://api.workos.com/organizations" \
  -H "Authorization: Bearer $WORKOS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "Acme Corp", "domains": [{"domain": "acme.com"}]}'

SSO

List SSO Connections

curl "https://api.workos.com/connections?organization_id=<org_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Get SSO Authorization URL

curl -X POST "https://api.workos.com/sso/authorize" \
  -H "Authorization: Bearer $WORKOS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "<WORKOS_CLIENT_ID>",
    "redirect_uri": "https://yourapp.com/auth/callback",
    "connection": "<connection_id>",
    "state": "<random_state>"
  }'

Get Profile After SSO Callback

curl -X POST "https://api.workos.com/sso/token" \
  -H "Authorization: Bearer $WORKOS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"code": "<auth_code>", "client_id": "<WORKOS_CLIENT_ID>"}'

Directory Sync (SCIM)

List Directories

curl "https://api.workos.com/directories?organization_id=<org_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

List Directory Users

curl "https://api.workos.com/directory_users?directory=<dir_id>&limit=25" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

List Directory Groups

curl "https://api.workos.com/directory_groups?directory=<dir_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Get Directory User

curl "https://api.workos.com/directory_users/<user_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Admin Portal

Generate Admin Portal Link

curl -X POST "https://api.workos.com/portal/generate_link" \
  -H "Authorization: Bearer $WORKOS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"intent": "sso", "organization": "<org_id>", "return_url": "https://yourapp.com/settings"}'
# Returns: { link: "https://..." } — share with customer's IT admin

intent options: sso, dsync, log_streams, audit_logs

User Management (WorkOS AuthKit)

List Users

curl "https://api.workos.com/user_management/users?limit=25" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Get User

curl "https://api.workos.com/user_management/users/<user_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Delete User

curl -X DELETE "https://api.workos.com/user_management/users/<user_id>" \
  -H "Authorization: Bearer $WORKOS_API_KEY"

Connection Types

OktaSAML, AzureSAML, GoogleSAML, OneLoginSAML, GenericSAML, ADFSSAML, PingFederateSAML, OktaOIDC, MicrosoftOIDC, GoogleOIDC