By workos
Integrate WorkOS widgets for user management, SSO connections, admin portals, and domain verification into Next.js, React, SvelteKit, Ruby, Python, Go, PHP, Java apps via stack detection and OpenAPI specs. Access guides for implementing and debugging SSO, SAML, MFA, RBAC, Directory Sync across frameworks.
Use when the user is implementing, embedding, or debugging a WorkOS Widget — specifically the User Management, User Profile, Admin Portal SSO Connection, or Admin Portal Domain Verification widgets. Handles the full stack — detecting the frontend (Next.js, React, React Router, TanStack Start, Vite, SvelteKit), generating access tokens via the backend SDK in use (Node, Python, Go, Ruby, PHP, Java, .NET), and wiring up the widget component correctly per the bundled OpenAPI spec. Also use when code imports from @workos-inc/widgets or the user pastes <UserManagement /> or <UserProfile /> JSX.
Use when the user asks for a WorkOS docs URL, term, or dashboard field (Sign-in endpoint, initiate_login_uri, Redirect URI, `WORKOS_*` env vars), or is implementing, debugging, or migrating WorkOS — AuthKit, SSO/SAML, Directory Sync, RBAC, FGA, MFA, Vault, Audit Logs, Admin Portal, Pipes (Connected Apps), Feature Flags, Radar (bot/fraud detection), webhooks, Custom Domains, running the `workos` CLI in agent or sandbox sessions (`WORKOS_MODE`, `workos doctor`), or migrating from Auth0, Clerk, Cognito, Firebase, Supabase, Stytch, Descope, or Better Auth. Also triggers on @workos-inc/* imports.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
WorkOS skills for AI coding agents. Two skills and 40 reference files covering AuthKit, SSO, Directory Sync, RBAC, Vault, Migrations, backend SDKs, and more.
npx skills add workos/skills
This installs two skills: workos and workos-widgets. The workos skill acts as a router that automatically loads the right reference for your task (AuthKit setup, SSO, migrations, etc.) so you don't need to install references individually.
Works with Claude Code, Codex, Goose, and any agent that supports the skills.sh format.
Install from the Cursor Marketplace (search "WorkOS"), or clone and symlink locally — see Local Development below.
For programmatic access to skill/reference content (e.g., from the WorkOS CLI):
npm install @workos/skills
import { getReference, getSkill } from '@workos/skills';
// Read reference content directly
const content = await getReference('workos-authkit-nextjs');
// Read a skill's SKILL.md content
const router = await getSkill('workos');
Path helpers are also available for consumers that need file paths (e.g., skill discovery):
import { getReferencePath, getSkillsDir, getSkillPath } from '@workos/skills';
const refPath = getReferencePath('workos-authkit-nextjs'); // absolute path to .md file
const skillsDir = getSkillsDir(); // directory containing workos/ and workos-widgets/
const skillPath = getSkillPath('workos'); // absolute path to SKILL.md
| Function | Returns |
|---|---|
getReference(name) | Promise<string> — reference file content |
getSkill(skillName) | Promise<string> — skill SKILL.md content |
getReferencePath(name) | Absolute path to references/{name}.md |
getSkillsDir() | Absolute path to the skills/ directory |
getSkillPath(skillName) | Absolute path to skills/{skillName}/SKILL.md |
Two registered skills:
| Skill | Description |
|---|---|
workos | Router — identifies which reference to load based on the user's task |
workos-widgets | Multi-framework widget integration with on-demand OpenAPI spec querying |
Everything else is a reference file under references/. The router dispatches to the right reference via progressive disclosure.
Note: References are not standalone skills. They are loaded automatically by the
workosskill based on your task. You do not need to install them individually.
| Reference | Description |
|---|---|
workos-authkit-nextjs | Next.js App Router integration |
workos-authkit-react | React SPA integration |
workos-authkit-react-router | React Router v6/v7 integration |
workos-authkit-tanstack-start | TanStack Start integration |
workos-authkit-sveltekit | SvelteKit integration |
workos-authkit-vanilla-js | Vanilla JS integration |
workos-authkit-base | AuthKit architecture reference |
| Reference | Description |
|---|---|
workos-node | Node.js (Express/Fastify/Hono/Koa) |
workos-python | Python (Django/Flask/FastAPI) |
workos-dotnet | .NET (ASP.NET Core) |
workos-go | Go |
workos-ruby | Ruby (Rails) |
workos-php | PHP |
workos-php-laravel | PHP Laravel |
workos-kotlin | Kotlin |
workos-elixir | Elixir |
npx claudepluginhub workos/skills --plugin workosSkills for building language emitters, extractors, and smoke tests for the oagen OpenAPI SDK generator
Descope authentication skills: integration, Auth0/Okta/WorkOS/Stytch migration, Terraform, FGA authorization schemas, security review, and BYOS custom UI
Auth0 skills for quickstarts, migration, major version upgrades, MFA, branding, custom domains, Advanced Custom Universal Login (ACUL) screen generation, and framework-specific SDK integrations for React, Next.js, Vue, Nuxt, Angular, Express, Fastify, FastAPI, Flask, Go, Spring Boot, Java MVC, Swift, Android, Flutter, Flutter Web, ASP.NET Core, React Native, Expo, Ionic React (Capacitor), Ionic Angular (Capacitor), and Ionic Vue (Capacitor).
Claude Code skill pack for Clerk authentication (24 skills)
Skill for integrating Better Auth - comprehensive TypeScript authentication framework for Cloudflare D1, Next.js, Nuxt, and 15+ frameworks. Use when adding auth, encountering D1 adapter errors, or implementing OAuth/2FA/RBAC features.
Clerk feature skills: organizations, billing, webhooks, and testing
Authentication and security specialist for JWT implementation, OAuth2 flows, refresh tokens, session management, password hashing (bcrypt, argon2), 2FA, SSO, and security best practices. Use when implementing authentication, authorization, or security features.