WorkOS

Recently shipped native iOS and Android SDKs, Atlas AI coworker, email deliverability checks, and a SCIM migration bridge.

Mobile SDKs bring the full WorkOS API to Swift and Kotlin. Both are async-first (Swift concurrency and coroutines respectively), with generated typed resources, structured error handling, safe retries, and auto-pagination. PublicClient needs only a client ID, so no API key ships in the app. iOS — 2026-08-05. Android — 2026-08-17.

AuthKit rejects sign-ups from undeliverable addresses. Typos like oops@gmail.con surface immediately instead of hard-bouncing against email reputation. Dummy addresses on example.com, example.net, example.org, and .test domains still work and skip sends.

SCIM Bridge migrates existing SCIM connections with zero downtime. The proxy dual-writes requests from current connections to WorkOS, with a control panel to backfill per connection, monitor before cutover, and roll back safely.

Accepted invitations now count as email verification. Users who accept within 10 minutes of the invite email skip the separate verification step; authentication.email_verification_succeeded still fires.

Pipes gained token proxy and Relay to call third-party apps on behalf of users without handling secrets, plus earlier API-key support for non-OAuth tools like Granola, Orb, and Plain (access via support).

Also shipped: @workos/emulate local API server for CI/CD testing, AI agents via auth.md, Atlas AI coworker, dashboard read-only roles (Sandbox Developers, Support Viewers), and MCP plugin for Claude and ChatGPT.