WorkOS

OAuth's "implicit flow" was deprecated because browser history stored the access token in the redirect URL. The whole authorization code dance exists to keep sensitive credentials off the front channel. OAuth explained from first principles. Link👇

"Always have an agent running while you work." Mitchell Hashimoto's new rule, one of our favorite episodes of @Pragmatic_Eng we've sponsored this year. newsletter.pragmaticengineer.com/p/mitchell-has…

The best marketing engineers aren't the best marketers or the best engineers. They're the ones willing to sit down and figure it out. Last night at the WorkOS SoHo office, we saw what that looks like in practice. @knocklabs — full onboarding workflow built live in 5 min with Claude + Knock MCP @tryprofound — Google Ads agents, social→CRM dashboards, $722 in flagged wasted spend @tryramp — 3-phase AI adoption: personal → workflow → system leverage @cursor_ai — 70% of internal PRs opened by cloud agents; landing page skill built in 10 min from Slack @vercel — Slack-native marketing ops agent, 200+ hours saved in 8 weeks @WorkOS — autonomous content pipeline: draft → AI-ism removal → citation check → publish "The barrier wasn't technical skill. It was sitting down feeling dumb for a couple of hours and pushing through." Full recording: youtube.com/live/I1G6m4rRE…

We're excited to host @dwarkesh_sp and @drfeifei for a live discussion in SF on July 22. Space is limited. luma.com/f28a739d

Route guards in TanStack Start are a UX concern, not a security boundary. Every server function is an HTTP endpoint. Enforce permissions inside the function itself. Complete guide to RBAC in TanStack Start. workos.com/blog/tanstack-…

WorkOS + Knock | Marketing Engineer Meetup x.com/i/broadcasts/1…

Agents are becoming the new users. @firecrawl is betting on that directly, launching agent-native signups powered by WorkOS 𝐚𝐮𝐭𝐡.𝐦𝐝. Ask your agent to add Firecrawl, it claims the API key, pulls live web data in seconds. Works with Codex, Claude Code, and Grok Build. 🔥 Learn more: workos.com/auth-md

GTM engineers are building what marketing vendors won't. Jack Parales from WorkOS speaks at the Marketing Engineering Meetup tomorrow in NYC with @tryprofound, @tryramp, @cursor_ai, and @knocklabs. Register here: luma.com/lwiievxa

The golden age of the generalist is here. @bcherny on building Claude Code, at Acquired Unplugged presented by WorkOS. Full recap: workos.com/blog/boris-che…

Most people think the AI transition is happening inside AI companies. It's not. The whole ecosystem is accelerating. @grinich joined @KentBeck on Still Burning to talk about what enterprise infrastructure reveals about where tech is headed. youtu.be/Kh24KYFfH5Q?si…

150+ developers. 7 demos. One night in NYC. Here's what teams demoed at Agents & APIs Demo Night: @Composio: granular MCP permissions @Postman: headless API automation via MCP @Render: parallel AI image gen workflows @Daytona: agents that record themselves to prove their work @WorkOS: natural language dashboards, live from your data @Public: the world's first agentic brokerage @Zapier: live-coded a task board with the new Zapier SDK Watch all the demos: youtube.com/live/DiEUPkJJZ…

We made a custom card deck for Acquired Unplugged, our founder event with Ben Gilbert and David Rosenthal on building durable companies. Giving away 50 today, code 𝐔𝐍𝐏𝐋𝐔𝐆𝐆𝐄𝐃: shop.workos.com/product/acquir… One per person, while supplies last. For the full @djrosent, @gilbert, and @grinich interview + recap: workos.com/blog/acquired-…

#NYTechWeek | Agents & APIs Demo Night x.com/i/broadcasts/1…

Migrating auth at 200K+ users without a maintenance window is now a solved problem. workos.com/blog/migrating…

AI is changing how GTM teams build. June 9 in NYC, we're hosting a Marketing Engineer Meetup with @knocklabs. Come join speakers from @tryprofound, @tryramp, @clay_gtm, WorkOS and @cursor_ai. Spots are limited. luma.com/lwiievxa

Don't forget: Agents & APIs Demo Night in NYC tomorrow with @getpostman. Let's kick off #NYTechWeek with demos and great conversation. RSVP: partiful.com/e/XqIBMZmB4oub…

Identifying an agent is the easy part. Governing what it can actually do is where the existing permission model breaks. @grinich on @ChooseYourStack with Ryo Koyama (@ofcourseduh). Full interview: youtube.com/watch?v=esm_ZV…

Two more demos added. @zapier and @public are in. Agents & APIs Demo Night, June 2, NYC Tech Week. RSVP: partiful.com/e/XqIBMZmB4oub…

Read up on it here: workos.com/auth-md

Last week we announced auth.md - the spec that lets your agents sign-up for services on their own. The momentum has been insane - companies and builders were embracing auth.md spec and implementing it in the first week to complete the agentic loop: workos.com/blog/auth-md-o…