Blog — WorkOS - NFHN Reader

Subscribe via

Guides

Oct 7, 2025

A developer’s guide to MCP auth

Everything you need to know to secure your MCP server using OAuth 2.1 and PKCE, server and auth metadata, client registration, JWT validation, and role-based access control.

Maria Paktiti

Guides

Sep 9, 2025

Why OAuth is the right fit for the MCP Registry

By creating a central catalog of available servers, the MCP Registry has solved the discovery problem—but that's only half the equation. The real challenge lies in authentication.

Zack Proser

Sep 9, 2025

Guides

Jul 22, 2025

Why most enterprise AI projects fail — and the patterns that actually work

42% of companies abandoned most AI initiatives in 2025, up from just 17% in 2024. After analyzing dozens of enterprise deployments, we found 4 patterns that separate winners from the graveyard of abandoned prototypes.

Zack Proser

Jul 22, 2025

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Guides

All posts

Jan 9, 2026

Understanding URL-mode elicitation in MCP

Why some user interactions cannot safely happen inside the MCP client, and how URL-mode elicitation helps.

Maria Paktiti

Jan 9, 2026

All posts

Jan 8, 2026

Authorization for RAG at Scale: Why You Shouldn't Sync Every Document

The naive approach to RAG authorization creates a scaling nightmare. Here's the pattern that actually works.

Zack Proser

Jan 8, 2026

Guides

All posts

Jan 8, 2026

Customer and user onboarding for real-world B2B SaaS

A practical guide to onboarding organizations, admins, and users at scale.

Maria Paktiti

Jan 8, 2026

Guides

All posts

Jan 8, 2026

Fireworks.ai: The PyTorch Team's Bet on Inference as the New Runtime

Fireworks.ai is betting that inference is the real AI runtime. A look at its PyTorch roots, serving stack, and compound model strategy.

Zack Proser

Jan 8, 2026

Product

All posts

Jan 7, 2026

December Updates

WorkOS Pipes, AuthKit for Platforms, Multiple Roles for SSO and SCIM, & more

Conner Simmons

Jan 7, 2026

Guides

All posts

Jan 7, 2026

The enterprise infrastructure layer behind successful AI applications

The hidden stack that lives between a model that works and a product that scales.

Maria Paktiti

Jan 7, 2026

Guides

All posts

Jan 7, 2026

How MCP Clients Find Your Auth Server (Without You Telling Them)

The spec evolution that made zero-config MCP connections possible—and closed a category of security holes

Zack Proser

Jan 7, 2026

Guides

All posts

Jan 6, 2026

Feature Flags as a Change Management Strategy for B2B Apps

How enterprise software teams can ship faster without breaking trust

Zack Proser

Jan 6, 2026

Glossary

All posts

Dec 22, 2025

Private Key JWT vs Client Secret: Choosing the right OAuth authentication for confidential clients

Understand how OAuth clients authenticate and when you should use client secrets vs private key JWT.

Maria Paktiti

Dec 22, 2025

Tutorials

All posts

Dec 15, 2025

MCP auth for AI agents: How to register a Python OAuth client using CIMD

Build a CIMD-based confidential MCP client in Python using Authorization Code + PKCE.

Maria Paktiti

Dec 15, 2025

Guides

All posts

Dec 12, 2025

The Agentic AI Foundation: Competitors Building the AI Standard Together

Anthropic, OpenAI, Block, and the Linux Foundation discuss governing MCP together as the new Agentic AI Foundation launches with 50 companies on day one.

Zack Proser

Dec 12, 2025

Guides

All posts

Dec 12, 2025

MCP Night The Holiday Edition Keynote: MCP Turns One, Joins the Linux Foundation

Michael Grinich traces MCP's evolution from local file system interface to industry standard, announces the Agentic AI Foundation, and walks through the latest spec updates.

Zack Proser

Dec 12, 2025

Guides

All posts

Dec 12, 2025

Chrome DevTools: Bringing Browser State to Your Coding Agent

Paul Irish shows how Chrome DevTools' MCP integration lets AI agents parse 15M-line performance traces and debug browser sessions programmatically.

Zack Proser

Dec 12, 2025

Guides

All posts

Dec 12, 2025

Microsoft: MCP Auth Without the Configuration Nightmare

Den Delimarsky demonstrates MCP's new auth flow—Protected Resource Metadata replaces Dynamic Client Registration for zero-config authentication.

Zack Proser

Dec 12, 2025

Guides

All posts

Dec 12, 2025

Datadog: SQL Is the New Bash for AI Agents

Reilly Wood on why structured queries beat freeform commands at scale

Zack Proser

Dec 12, 2025

No results found

Please try a different search

We’re hiring

Our global team is growing and we’re hiring all types of roles.

View open roles

About us

WorkOS builds developer tools for quickly adding enterprise features to applications.

Learn more