workosProvider

workosProvider wires authentication through WorkOS AuthKit, so your tools receive a signed-in WorkOS user.

Example

server.ts

import { McpServer, workosProvider } from "skybridge/server";

const server = new McpServer(
  { name: "personal-shopper", version: "0.0.1" },
  { capabilities: {} },
  {
    oauth: await workosProvider({
      domain: process.env.AUTHKIT_DOMAIN,
      audience: process.env.SERVER_URL,
    }),
  },
);

Signature

workosProvider(opts: WorkosProviderOptions): Promise<OAuthConfig>;

Parameters

`opts`

domain is the AuthKit domain, for example acme.authkit.app.
audience is the Resource Indicator configured in the WorkOS dashboard, typically this server’s public URL. AuthKit binds it into the token’s aud claim.

It also accepts the shared CustomProviderOptions options: baseUrl, serverUrl, scopes, requiredScopes, and metadataOverrides. Requires Dynamic Client Registration enabled in the WorkOS dashboard (Connect → Configuration).

Returns

A Promise for the OAuthConfig you pass to the oauth constructor option.

Connect an Identity Provider

Set up sign-in with a hosted provider

Authenticate Users

Add sign-in to your app end to end

customProvider

Wire OAuth from any IdP’s discovery document

Stytch Custom

⌘I

Server

Auth

Identity Providers

Hooks

Utilities

Types

Low-level

Example

Signature

Parameters

`opts`

Returns

Connect an Identity Provider

Authenticate Users

customProvider

​Example

​Signature

​Parameters

​opts

​Returns

Connect an Identity Provider

Authenticate Users

customProvider

Example

Signature

Parameters

`opts`

Returns