@workos/mcp-docs-server 0.1.0

package/.docs/organized/docs/reference/workos-connect/metadata/openid-configuration/index.mdx

@@ -0,0 +1,70 @@
+---
+descriptions:
+  workos_connect_openid_configuration:
+    id_token_signing_alg_values_supported: >
+      A list of the algorithms supported for signing ID tokens. Currently this
+      is always `["RS256"]`.
+    jwks_uri: >
+      The URL of the JSON Web Key Set (JWKS) endpoint that contains the public
+      keys used to validate tokens.
+    subject_types_supported: >
+      A list of the subject identifier types supported. Currently this is always
+      `["public"]`.
+    userinfo_endpoint: >
+      The URL of the userinfo endpoint that can be used to get information about
+      the user specified in an access token.
+reference:
+  curl:
+    - url: /reference/workos-connect/openid-configuration
+      key: workos_connect_openid_configuration
+      id: workos_connect_openid_configuration
+      title: /.well-known/openid-configuration
+      type: GET
+      returns:
+        - key: anonymous
+          type: object
+          unwrap: true
+          properties:
+            - key: issuer
+              type: string
+              description: (workos_connect_well_known_metadata.issuer)
+            - key: authorization_endpoint
+              type: string
+              description: (workos_connect_well_known_metadata.authorization_endpoint)
+            - key: grant_types_supported
+              type: array
+              description: (workos_connect_well_known_metadata.grant_types_supported)
+            - key: id_token_signing_alg_values_supported
+              type: array
+              description: >-
+                (workos_connect_openid_configuration.id_token_signing_alg_values_supported)
+            - key: introspection_endpoint
+              type: string
+              description: (workos_connect_well_known_metadata.introspection_endpoint)
+            - key: jwks_uri
+              type: string
+              description: (workos_connect_openid_configuration.jwks_uri)
+            - key: response_types_supported
+              type: array
+              description: (workos_connect_well_known_metadata.response_types_supported)
+            - key: subject_types_supported
+              type: array
+              description: (workos_connect_openid_configuration.subject_types_supported)
+            - key: token_endpoint
+              type: string
+              description: (workos_connect_well_known_metadata.token_endpoint)
+            - key: userinfo_endpoint
+              type: string
+              description: (workos_connect_openid_configuration.userinfo_endpoint)
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/metadata/openid-configuration/index.mdx
+---
+
+### OpenID configuration
+
+This discovery endpoint provides the standard configuration for OpenID clients to interact with WorkOS Connect.
+
+<CodeBlock referenceId="workos_connect_openid_configuration">
+  <CodeBlockTab title="Request" file="openid-configuration-request" />
+  <CodeBlockTab title="Response" file="openid-configuration-response" />
+</CodeBlock>

package/.docs/organized/docs/reference/workos-connect/token/authorization-code-grant/access-token.mdx

@@ -0,0 +1,53 @@
+---
+reference:
+  json:
+    - url: /reference/workos-connect/token/authorization-code-grant/access-token
+      key: workos_connect_token_authorization_code_grant_access_token
+      id: workos_connect_token_authorization_code_grant_access_token
+      title: Access token JWT
+      properties:
+        - key: iss
+          type: string
+          description: >
+            The issuer of the JWT, your AuthKit domain
+            (`https://authkit_domain`).
+        - key: aud
+          type: string
+          description: >
+            The client ID of the environment that issued the token (in other
+            words, your app).
+        - key: sub
+          type: string
+          description: (user.id)
+        - key: sid
+          type: string
+          description: >
+            The session identifier for the token, which for a WorkOS Connect
+            OAuth Application is the identifier of the consent granted by the
+            user.
+        - key: jti
+          type: string
+          description: A unique identifier for this access token.
+        - key: exp
+          type: DateTime
+          description: >-
+            The token should not be trusted after this time. The timestamp is
+            the number of seconds since epoch.
+        - key: iat
+          type: DateTime
+          description: >-
+            The token was issued at this time. The timestamp is the number of
+            seconds since epoch.
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/authorization-code-grant/access-token.mdx
+---
+
+#### Access token
+
+The access token for WorkOS Connect OAuth Applications contains the following claims.
+
+<CodeBlock
+  file="token-authorization-code-access-token"
+  referenceId="workos_connect_token_authorization_code_grant_access_token"
+  title="Decoded access token"
+/>

package/.docs/organized/docs/reference/workos-connect/token/authorization-code-grant/id-token.mdx

@@ -0,0 +1,60 @@
+---
+reference:
+  json:
+    - url: /reference/workos-connect/token/authorization-code-grant/id-token
+      key: workos_connect_token_authorization_code_grant_id_token
+      id: workos_connect_token_authorization_code_grant_id_token
+      title: ID token JWT
+      properties:
+        - key: iss
+          type: string
+          description: (workos_connect_id_token.iss)
+        - key: aud
+          type: string
+          description: (workos_connect_id_token.aud)
+        - key: sub
+          type: string
+          description: (user.id)
+        - key: name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.name)
+        - key: given_name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.given_name)
+        - key: family_name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.family_name)
+        - key: email
+          type: string
+          optional: true
+          description: (workos_connect_id_token.email)
+        - key: email_verified
+          type: boolean
+          optional: true
+          description: (workos_connect_id_token.email_verified)
+        - key: exp
+          type: DateTime
+          description: >-
+            The token should not be trusted after this time. The timestamp is
+            the number of seconds since epoch.
+        - key: iat
+          type: DateTime
+          description: >-
+            The token was issued at this time. The timestamp is the number of
+            seconds since epoch.
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/authorization-code-grant/id-token.mdx
+---
+
+#### ID token
+
+The ID token, when requested with the `openid` scope, contains information about the user’s identity, like name and email address.
+
+<CodeBlock
+  file="token-authorization-code-id-token"
+  referenceId="workos_connect_token_authorization_code_grant_id_token"
+  title="Decoded ID token"
+/>

package/.docs/organized/docs/reference/workos-connect/token/authorization-code-grant/index.mdx

@@ -0,0 +1,69 @@
+---
+descriptions:
+  workos_connect_token_authorization_code_grant:
+    grant_type: Always `"authorization_code"` for this flow.
+    code: >
+      The authorization code received from authenticating the user, provided
+      when the user is redirected back to the client.
+    redirect_uri: >
+      The URL to redirect the user to after they have logged in. This must be
+      the same redirect URI used in the initial `/oauth2/authorize` request.
+reference:
+  curl:
+    - url: /reference/workos-connect/token/authorization-code-grant
+      key: workos_connect_token_authorization_code_grant
+      id: workos_connect_token_authorization_code_grant
+      title: /oauth2/token
+      type: POST
+      parameters:
+        - key: client_id
+          type: string
+          description: (workos_connect_token_request.client_id)
+        - key: client_secret
+          type: string
+          description: (workos_connect_token_request.client_secret)
+        - key: grant_type
+          type: '"authorization_code"'
+          description: (workos_connect_token_authorization_code_grant.grant_type)
+        - key: code
+          type: string
+          description: (workos_connect_token_authorization_code_grant.code)
+        - key: redirect_uri
+          type: string
+          description: (workos_connect_token_authorization_code_grant.code)
+      returns:
+        - key: anonymous
+          type: object
+          unwrap: true
+          properties:
+            - key: access_token
+              type: string
+              description: (workos_connect_token_response.access_token)
+            - key: expires_in
+              type: integer
+              description: (workos_connect_token_response.expires_in)
+            - key: id_token
+              type: string
+              description: (workos_connect_token_response.id_token)
+            - key: refresh_token
+              type: string
+              optional: true
+              description: (workos_connect_token_response.refresh_token)
+            - key: token_type
+              type: '"bearer"'
+              description: (workos_connect_token_response.token_type)
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/authorization-code-grant/index.mdx
+---
+
+### Authorization code grant
+
+Used by WorkOS Connect OAuth Applications to exchange an authorization code for access tokens, ID tokens, and refresh tokens.
+
+<CodeBlock referenceId="workos_connect_token_authorization_code_grant">
+  <CodeBlockTab title="Request" file="token-authorization-code-grant-request" />
+  <CodeBlockTab
+    title="Response"
+    file="token-authorization-code-grant-response"
+  />
+</CodeBlock>

package/.docs/organized/docs/reference/workos-connect/token/client-credentials-grant/access-token.mdx

@@ -0,0 +1,46 @@
+---
+reference:
+  json:
+    - url: /reference/workos-connect/token/client-credentials-grant/access-token
+      key: workos_connect_token_client_credentials_grant_access_token
+      id: workos_connect_token_client_credentials_grant_access_token
+      title: Access token JWT
+      properties:
+        - key: iss
+          type: string
+          description: |
+            The issuer of the JWT, your AuthKit domain.
+        - key: sub
+          type: string
+          description: |
+            The WorkOS Connect Application’s client ID.
+        - key: org_id
+          type: string
+          optional: true
+          description: (organization.id)
+        - key: jti
+          type: string
+          description: A unique identifier for this access token.
+        - key: exp
+          type: DateTime
+          description: >-
+            The token should not be trusted after this time. The timestamp is
+            the number of seconds since epoch.
+        - key: iat
+          type: DateTime
+          description: >-
+            The token was issued at this time. The timestamp is the number of
+            seconds since epoch.
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/client-credentials-grant/access-token.mdx
+---
+
+#### Access token
+
+The access token for WorkOS Connect M2M Applications contains the following claims.
+
+<CodeBlock
+  file="token-client-credentials-access-token"
+  referenceId="workos_connect_token_client_credentials_grant_access_token"
+  title="Decoded access token"
+/>

package/.docs/organized/docs/reference/workos-connect/token/client-credentials-grant/index.mdx

@@ -0,0 +1,56 @@
+---
+descriptions:
+  workos_connect_token_client_credentials_grant:
+    grant_type: Always `"client_credentials"` for this flow.
+    scope: |
+      A space-separated set of scopes to use for the access token.
+reference:
+  curl:
+    - url: /reference/workos-connect/token/client-credentials-grant
+      key: workos_connect_token_client_credentials_grant
+      id: workos_connect_token_client_credentials_grant
+      title: /oauth2/token
+      type: POST
+      parameters:
+        - key: client_id
+          type: string
+          description: (workos_connect_token_request.client_id)
+        - key: client_secret
+          type: string
+          description: (workos_connect_token_request.client_secret)
+        - key: grant_type
+          type: '"client_credentials"'
+          description: (workos_connect_token_client_credentials_grant.grant_type)
+        - key: scope
+          type: string
+          optional: true
+          description: (workos_connect_token_client_credentials_grant.scope)
+      returns:
+        - key: anonymous
+          type: object
+          unwrap: true
+          properties:
+            - key: access_token
+              type: string
+              description: (workos_connect_token_response.access_token)
+            - key: expires_in
+              type: integer
+              description: (workos_connect_token_response.expires_in)
+            - key: token_type
+              type: '"bearer"'
+              description: (workos_connect_token_response.token_type)
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/client-credentials-grant/index.mdx
+---
+
+### Client credentials grant
+
+Used by WorkOS Connect M2M Applications to exchange the app’s credentials for access tokens.
+
+<CodeBlock referenceId="workos_connect_token_client_credentials_grant">
+  <CodeBlockTab title="Request" file="token-client-credentials-grant-request" />
+  <CodeBlockTab
+    title="Response"
+    file="token-client-credentials-grant-response"
+  />
+</CodeBlock>

package/.docs/organized/docs/reference/workos-connect/token/index.mdx

@@ -0,0 +1,39 @@
+---
+descriptions:
+  workos_connect_token_request:
+    client_id: |
+      The client ID of the WorkOS Connect Application.
+    client_secret: |
+      A secret key associated with the WorkOS Connect Application.
+  workos_connect_token_response:
+    access_token: |
+      A JWT that can be used to authorize requests.
+    expires_in: |
+      The number of seconds until the access token expires.
+    id_token: |
+      A JWT that contains information about the user.
+    refresh_token: >
+      An opaque token that can be exchanged for new access, ID, and refresh
+      tokens.
+    token_type: >
+      How to use the access token to authorize requests. Currently, this is
+      always `"bearer"`, which means it should be included in the
+      `Authorization` header of requests, e.g. `Authorization: Bearer <access
+      token>`.
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/index.mdx
+---
+
+## Token
+
+This endpoint is called by WorkOS Connect Applications to get access tokens, ID tokens, and refresh tokens, depending on the `grant_type` provided when requested.
+
+This endpoint is authenticated by provided the WorkOS Application’s client ID and client secret in the body of the request.
+
+There are three grant types available:
+
+- [Authorization code](/reference/workos-connect/token/authorization-code-grant)
+- [Refresh token](/reference/workos-connect/token/refresh-token-grant)
+- [Client credentials](/reference/workos-connect/token/client-credentials-grant)
+
+Each is describe in greater detail below.

package/.docs/organized/docs/reference/workos-connect/token/refresh-token-grant.mdx

@@ -0,0 +1,69 @@
+---
+descriptions:
+  workos_connect_token_refresh_token_grant:
+    grant_type: Always `"refresh_token"` for this flow.
+    refresh_token: |
+      The refresh token received from a previous token request.
+    scope: >
+      A space-separated set of scopes to use for the tokens to be issued by this
+      request. Must be a subset of the scopes initially specified in the
+      `/oauth2/authorize` request.
+reference:
+  curl:
+    - url: /reference/workos-connect/token/refresh-token-grant
+      key: workos_connect_token_refresh_token_grant
+      id: workos_connect_token_refresh_token_grant
+      title: /oauth2/token
+      type: POST
+      parameters:
+        - key: client_id
+          type: string
+          description: (workos_connect_token_request.client_id)
+        - key: client_secret
+          type: string
+          description: (workos_connect_token_request.client_secret)
+        - key: grant_type
+          type: '"refresh_token"'
+          description: (workos_connect_token_refresh_token_grant.grant_type)
+        - key: refresh_token
+          type: string
+          description: (workos_connect_token_refresh_token_grant.refresh_token)
+        - key: scope
+          type: string
+          optional: true
+          description: (workos_connect_token_refresh_token_grant.scope)
+      returns:
+        - key: anonymous
+          type: object
+          unwrap: true
+          properties:
+            - key: access_token
+              type: string
+              description: (workos_connect_token_response.access_token)
+            - key: expires_in
+              type: integer
+              description: (workos_connect_token_response.expires_in)
+            - key: id_token
+              type: string
+              description: (workos_connect_token_response.id_token)
+            - key: refresh_token
+              type: string
+              optional: true
+              description: (workos_connect_token_response.refresh_token)
+            - key: token_type
+              type: '"bearer"'
+              description: (workos_connect_token_response.token_type)
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/refresh-token-grant.mdx
+---
+
+### Refresh token grant
+
+Used by WorkOS Connect OAuth Applications to exchange a refresh token for new access tokens and/or ID tokens. The refresh token is provided when the initial `oauth2/authorize` request is made with the `offline_access` scope.
+
+The [access token](reference/workos-connect/token/authorization-code-grant/access-token) and [ID tokens](reference/workos-connect/token/authorization-code-grant/id-token) issued here are the same as those issued for the initial `authorization_code` grant.
+
+<CodeBlock referenceId="workos_connect_token_refresh_token_grant">
+  <CodeBlockTab title="Request" file="token-refresh-token-grant-request" />
+  <CodeBlockTab title="Response" file="token-refresh-token-grant-response" />
+</CodeBlock>

package/.docs/organized/docs/reference/workos-connect/userinfo/index.mdx

@@ -0,0 +1,46 @@
+---
+reference:
+  curl:
+    - url: /reference/workos-connect/userinfo
+      key: workos_connect_userinfo
+      id: workos_connect_userinfo
+      title: /oauth2/userinfo
+      type: POST
+      returns:
+        - key: sub
+          type: string
+          description: (user.id)
+        - key: name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.name)
+        - key: given_name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.given_name)
+        - key: family_name
+          type: string
+          optional: true
+          description: (workos_connect_id_token.family_name)
+        - key: email
+          type: string
+          optional: true
+          description: (workos_connect_id_token.email)
+        - key: email_verified
+          type: boolean
+          optional: true
+          description: (workos_connect_id_token.email_verified)
+originalPath: >-
+  .tmp-workos-clone/packages/docs/content/reference/workos-connect/userinfo/index.mdx
+---
+
+## User information
+
+Provides information about the [User](/reference/user-management/user) referenced by the access token’s `sub` claim. Which claims are returned depends on the scopes originally granted when the access token was issued.
+
+This endpoint is authenticated by providing the previously acquired access token in the `Authorization` header.
+
+<CodeBlock referenceId="workos_connect_userinfo">
+  <CodeBlockTab title="Request" file="workos-connect-userinfo-request" />
+  <CodeBlockTab title="Response" file="workos-connect-userinfo-response" />
+</CodeBlock>

package/.docs/organized/docs/sdks/dotnet.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/dotnet.mdx
+---
+## Installation
+
+<CodeBlock title="Command Line" file="install-dotnet-sdk" />

package/.docs/organized/docs/sdks/elixir.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/elixir.mdx
+---
+## Installation
+
+<CodeBlock title="mix.exs" file="install-elixir-sdk" />

package/.docs/organized/docs/sdks/go.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/go.mdx
+---
+## Installation
+
+<CodeBlock title="Command Line" file="install-go-sdk" />

package/.docs/organized/docs/sdks/java.mdx

@@ -0,0 +1,9 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/java.mdx
+---
+## Installation
+
+<CodeBlock title="Install the WorkOS SDK">
+  <CodeBlockTab language="java" file="install-sdk-maven" title="Maven" />
+  <CodeBlockTab language="java" file="install-sdk-gradle" title="Gradle" />
+</CodeBlock>

package/.docs/organized/docs/sdks/laravel.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/laravel.mdx
+---
+## Installation
+
+<CodeBlock title="Command Line" file="install-laravel-sdk" />

package/.docs/organized/docs/sdks/node.mdx

@@ -0,0 +1,9 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/node.mdx
+---
+## Installation
+
+<CodeBlock>
+  <CodeBlockTab language="js" file="install-sdk-npm" title="npm" />
+  <CodeBlockTab language="js" file="install-sdk-yarn" title="yarn" />
+</CodeBlock>

package/.docs/organized/docs/sdks/php.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/php.mdx
+---
+## Installation
+
+<CodeBlock title="Command Line" file="install-php-sdk" />

package/.docs/organized/docs/sdks/python.mdx

@@ -0,0 +1,6 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/python.mdx
+---
+## Installation
+
+<CodeBlock title="Command Line" file="install-python-sdk" />

package/.docs/organized/docs/sdks/ruby.mdx

@@ -0,0 +1,9 @@
+---
+originalPath: .tmp-workos-clone/packages/docs/content/sdks/ruby.mdx
+---
+## Installation
+
+<CodeBlock title="Install the WorkOS SDK">
+  <CodeBlockTab language="ruby" file="install-sdk-terminal" title="Terminal" />
+  <CodeBlockTab language="ruby" file="install-sdk-bundler" title="Bundler" />
+</CodeBlock>

package/.docs/organized/docs/sso/_navigation.mdx

@@ -0,0 +1,44 @@
+---
+title: Single Sign-On
+links:
+  - title: Getting Started
+    links:
+      - title: Quick Start
+        url: /sso
+      - title: Test SSO
+        url: /sso/test-sso
+      - title: Example Apps
+        url: /sso/example-apps
+  - title: User Experience
+    links:
+      - title: Sign-In
+        url: /sso/ux/sign-in
+  - title: Going Live
+    links:
+      - title: Login Flows
+        url: /sso/login-flows
+      - title: Redirect URIs
+        url: /sso/redirect-uris
+      - title: Domains
+        url: /sso/domains
+      - title: Signing Certificates
+        url: /sso/signing-certificates
+      - title: JIT Provisioning
+        url: /sso/jit-provisioning
+      - title: Profile Attributes
+        url: /sso/attributes
+      - title: Launch Checklist
+        url: /sso/launch-checklist
+      - title: FAQ for IT teams
+        url: /sso/it-team-faq
+      - title: SAML Security
+        url: /sso/saml-security
+      - title: On-prem Deployment
+        url: /on-prem-deployment
+  - title: Mapping Roles
+    links:
+      - title: IdP Role Assignment
+        url: /sso/identity-provider-role-assignment
+originalPath: .tmp-workos-clone/packages/docs/content/sso/_navigation.mdx
+---
+