WorkOS

Recently shipped AuthKit waitlists, step-up authentication, and a browser-side Widgets API.

AuthKit added step-up authentication — users re-verify their session before sensitive actions, like changing security settings or initiating payments.

The Widgets API is a session-aware GraphQL endpoint for building UI components directly with WorkOS data from the browser.

A Management MCP Server exposes hundreds of operations across the product, letting AI agents and tooling manage WorkOS resources programmatically.

API Gateway unifies API key and user authentication at the edge, simplifying the integration experience for frontend and backend alike.

Environments can now be organized into Projects with per-environment branding. Each environment gets its own login page styling, email templates, and SSO configuration.

Roles for Groups and Snowflake log streaming shipped alongside existing waitlist and custom provider support.

Projects & Branding per Environment — organize environments into Projects with independent branding and configuration.

Pipes Custom Providers — connect any compatible data source to your application beyond the built-in integrations.

Snowflake log streaming — audit logs write each event as a row alongside your existing data in Snowflake.

Roles for Groups — assign roles to named groups of users, managing permissions by team or department.