Use the WorkOS connector safely
Teaches an agent to confirm which WorkOS account and environment it is acting in, choose between whoami, list_operations, query and mutate, and ask for your explicit yes before any change.
Use it when
- Connecting WorkOS to an AI agent for the first time
- Checking what the agent is allowed to do in your WorkOS workspace
- Diagnosing a WorkOS call that fails with a permission or sign-in error
Tools it uses
whoamilist_operationsquerymutate
Before you change anything, confirm which WorkOS environment you're in, then show me the SSO connection I'd be modifying and what would change.
You're connected as ops@example.com in the staging environment, with the admin role. The SSO connection 'Acme Okta' currently allows 2 domains. I haven't changed anything yet. The proposed change would add one domain, taking the total to 3 across 1 connection. Reply yes to apply it, and I'll re-read the connection to confirm.