WorkOS

The agent was faking test runs by writing directly to the expected output file. @nicknisi fixed it with SHA-256 hashing, make it easier to do the real work than to lie about it. He then deleted 95% of his agent skills and got better results. Watch the talk👇

Dwarkesh Patel. Live. SFJAZZ. July 22.

OAuth flows, token refresh, credential storage — 100+ providers, all handled by one API.

AI-assisted code leaks secrets at 2x the base rate. GitGuardian found 24,000 exposed secrets in MCP config files on GitHub. The fix isn't better hygiene, it's credentials designed for how agents actually operate. Link👇

OAuth's "implicit flow" was deprecated because browser history stored the access token in the redirect URL. The whole authorization code dance exists to keep sensitive credentials off the front channel. OAuth explained from first principles. Link👇

"Always have an agent running while you work." Mitchell Hashimoto's new rule, one of our favorite episodes of @Pragmatic_Eng we've sponsored this year. newsletter.pragmaticengineer.com/p/mitchell-has…

The best marketing engineers aren't the best marketers or the best engineers. They're the ones willing to sit down and figure it out. Last night at the WorkOS SoHo office, we saw what that looks like in practice. @knocklabs — full onboarding workflow built live in 5 min with Claude + Knock MCP @tryprofound — Google Ads agents, social→CRM dashboards, $722 in flagged wasted spend @tryramp — 3-phase AI adoption: personal → workflow → system leverage @cursor_ai — 70% of internal PRs opened by cloud agents; landing page skill built in 10 min from Slack @vercel — Slack-native marketing ops agent, 200+ hours saved in 8 weeks @WorkOS — autonomous content pipeline: draft → AI-ism removal → citation check → publish "The barrier wasn't technical skill. It was sitting down feeling dumb for a couple of hours and pushing through." Full recording: youtube.com/live/I1G6m4rRE…

We're excited to host @dwarkesh_sp and @drfeifei for a live discussion in SF on July 22. Space is limited. luma.com/f28a739d

Route guards in TanStack Start are a UX concern, not a security boundary. Every server function is an HTTP endpoint. Enforce permissions inside the function itself. Complete guide to RBAC in TanStack Start. workos.com/blog/tanstack-…

WorkOS + Knock | Marketing Engineer Meetup x.com/i/broadcasts/1…

Agents are becoming the new users. @firecrawl is betting on that directly, launching agent-native signups powered by WorkOS 𝐚𝐮𝐭𝐡.𝐦𝐝. Ask your agent to add Firecrawl, it claims the API key, pulls live web data in seconds. Works with Codex, Claude Code, and Grok Build. 🔥 Learn more: workos.com/auth-md

GTM engineers are building what marketing vendors won't. Jack Parales from WorkOS speaks at the Marketing Engineering Meetup tomorrow in NYC with @tryprofound, @tryramp, @cursor_ai, and @knocklabs. Register here: luma.com/lwiievxa

The golden age of the generalist is here. @bcherny on building Claude Code, at Acquired Unplugged presented by WorkOS. Full recap: workos.com/blog/boris-che…

Most people think the AI transition is happening inside AI companies. It's not. The whole ecosystem is accelerating. @grinich joined @KentBeck on Still Burning to talk about what enterprise infrastructure reveals about where tech is headed. youtu.be/Kh24KYFfH5Q?si…

150+ developers. 7 demos. One night in NYC. Here's what teams demoed at Agents & APIs Demo Night: @Composio: granular MCP permissions @Postman: headless API automation via MCP @Render: parallel AI image gen workflows @Daytona: agents that record themselves to prove their work @WorkOS: natural language dashboards, live from your data @Public: the world's first agentic brokerage @Zapier: live-coded a task board with the new Zapier SDK Watch all the demos: youtube.com/live/DiEUPkJJZ…