WorkOS
Boris Cherny: Claude Code & the Future of Engineering | Acquired Unplugged presented by WorkOS
updated
• Multiple Roles in RBAC → workos.com/blog/multiple-roles
• Convex + AuthKit → workos.com/blog/convex-authkit
• Localization in AuthKit → workos.com/blog/localization-in-authkit
• Custom Email Providers → workos.com/blog/custom-email-providers
• Feature Flags in Slack → workos.com/blog/feature-flags-in-slack
Explore all announcements here: workos.com/launch-week
If you’re scaling authentication, permissions, or integrations, these updates simplify your developer workflow. From RBAC with multiple-role support to Resend integration and Slack feature flags — this is how modern teams ship faster.
CHAPTERS
00:00 WorkOS Fall Launch Week
00:18 Multiple Roles in RBAC
00:48 Localization in AuthKit
01:23 Custom Email Providers
01:47 Convex + AuthKit
02:15 Feature Flags in Slack
Key Takeaways
• Anthropic and OpenAI collaborate through MCP.
• MCP provides a neutral, shared protocol for AI tools across companies.
• Real-world use cases include logs, Slack, and production workflows.
• MCP standardizes secure connections between AI models and external systems.
• Shared protocols like MCP shape the future of AI tooling.
Chapters
00:00:00 Intro & Welcome
00:00:59 Origins of MCP – Anthropic’s perspective
00:02:05 OpenAI’s entry into MCP
00:03:00 Early MCP use cases
00:04:38 MCP and agents: how they interact
00:06:10 Biggest blockers to MCP adoption
00:20:00 Closing
Matthew McClure, co-founder of Mux, demonstrates unprecedented capabilities for video creators and producers using their brand-new MCP server—secured by WorkOS.
00:00:00 Intro & Welcome – Michael Grinich
00:01:24 The Startup Story in 2025
00:04:12 What is MCP?
00:06:07 WorkOS AuthKit for MCP
00:13:27 Mux MCP Server Demonstration – Matthew McClure
00:19:23 Closing Thoughts
If you’ve been waiting for the right moment to jump into WorkOS, this is it!
workos.com/launch-week/summer-2025
Chapters
00:00 WorkOS Launch Week (Summer Kickoff)
00:16 AuthKit Custom CSS
00:39 Feature Flags
01:10 AuthKit Add-ons
01:28 CLI Auth
01:49 Launch Week Recap… recap
Blog post links:
1. AuthKit Custom CSS: workos.com/blog/authkit-custom-css
2. WorkOS Feature Flags: workos.com/blog/feature-flags
3. Supabase–WorkOS auth: workos.com/blog/supabase-integration
4. AuthKit Add-ons: workos.com/blog/authkit-add-ons
5. CLI Auth: workos.com/blog/cli-auth
Learn more: workos.com
This is the keynote that kicked off MCP Night—a first-of-its-kind event from WorkOS focused on the future of Model Context Protocol (MCP) and agent-native architecture.
In this keynote, the Michael Grinich lays out
- Why MCP is the missing spec for the agent ecosystem
- What’s new in the MCP Auth spec
- How the dev community is building real apps with tools like AuthKit, Claude, and WorkOS
⚡ Hosted by WorkOS
🤖 Featuring Cloudflare, Vercel, Sentry, Postman, Block, and more
🎉 Followed by lightning talks and a rooftop afterparty
At MCP Night, Cameron shows how to integrate remote MCP servers into a real-world web app using Next.js, WorkOS AuthKit, and the latest MCP Auth spec.
The result: mcp.shop, a live e-commerce storefront where AI agents can browse, buy, and act—just like users.
In this talk, you’ll learn:
How the MCP Auth spec separates concerns cleanly between client, server, and authorization
How to use WorkOS AuthKit for a plug-and-play OAuth setup
Why building secure, authenticated agent actions is no longer a hack
🛍 Real app. Real OAuth. Real web-native agent UX.
🔐 Goodbye whispered API keys. Hello production-grade auth.
In this no-bull talk from MCP Night, David Cramer (founder of Sentry) lays out a hilariously honest, technically sharp view on what actually works with MCP—and how Sentry found a natural fit.
This talk covers:
Why most MCP demos are contrived—and what to do instead
How Sentry’s new MCP server enables auto-debugging and fix generation
Lessons from building a beta system that’s already catching real bugs (and breaking things beautifully)
No fluff, no live demos—just real insight into building agent integrations that actually matter.
🐞 Powered by Sentry’s error data
🔧 Connect to mcp.sentry.dev to trigger agent-based fixes
⚠️ It’s in beta. It breaks. That’s the point.
Dustin Schau (Postman) demos how Postman’s public API network can be used to instantly scaffold high-quality MCP servers—no backend coding required.
In this talk from MCP Night, you’ll learn:
How Postman’s 100,000+ validated APIs power agent-native experiences
How to build MCP servers natively within the Postman platform
Why quality APIs are the foundation for reliable agent tooling
From zero to agent-accessible in minutes. Postman is going full MCP.
🌐 Use the API Network as your agent’s toolbox
⚡ Turn public APIs into MCP endpoints on the fly
🧪 Bonus: Dustin buys a WorkOS T-shirt mid-demo
Mattt Zmuda (Loopwork) unveils iMCP—a macOS app that connects Claude (and other agents) to the native Apple apps you actually use.
This live demo from MCP Night shows:
How iMCP bridges Apple’s ecosystem with the broader MCP protocol
Why Loopwork believes in “Netscape for MCP”
Real-world workflows like birthday reminders and messaging automations
With iMCP, agents don’t live in the cloud—they live right next to your Cmd key.
🍎 Native macOS menu bar experience
💬 Secure access to Messages, Contacts, and more
🤖 Claude Desktop integration out of the box
Andre Landgraf (Neon) walks us through how Neon's evolving MCP server powers remote-first, codegen-focused developer workflows.
In this talk from MCP Night, Andre covers:
The evolution from local to remote MCP servers
Why same.new (Neon’s codegen UX) is built around agent-native workflows
How remote MCPs enable OAuth, sandboxing, and secure multi-user tooling
Neon’s bet? MCP should fade into the background—just another transport layer—while agents get to work building your backend.
🧠 Remote-first, secure, and scalable agent infra
🔌 Built with Cursor and the MCP Remote npm package
Angie Jones (Block) introduces Codename Goose—an open source, LLM-agnostic MCP client that turns your laptop into an agent playground.
Available as both a CLI and desktop app, Goose can:
Connect to any MCP server
Work with any LLM
Run complex dev tasks, from project bootstraps to full-stack builds
In this live demo from MCP Night, Angie shows how Goose handles end-to-end development flows, with a little humor and a lot of power.
🧠 Local, open source, and agent-native
🧰 Use Goose to code, automate, and deploy—all from your machine
🔗 github.com/block/goose
Andrew Qu (Vercel) shares the lessons and challenges from building the Vercel MCP adapter, designed to support any framework with minimal configuration.
In this talk from MCP Night, Andrew walks through:
A one-line MCP server adapter for frameworks like Next.js, SvelteKit, and Nuxt
Real-world tradeoffs when building dev-first agent infra
The path toward future-proofing agent architectures across platforms
Whether you’re building on Vercel or rolling your own infra, this talk lays out what resilient agent systems look like in the wild.
⚙️ Vercel MCP Adapter: zero-config, framework-independent
🎯 Demo included (recorded, rehearsed, and sharp)
Paul Klein IV (Browserbase) delivers a fast-paced, hilarious walkthrough of how the Browser MCP server turns the humble web browser into your agent’s universal interface.
From solving CAPTCHAs to navigating the DMV, this talk explores how running thousands of browsers in the cloud bridges the gap between AI agents and the real, messy internet.
You'll learn:
Why a browser is the most versatile tool in your agent stack
How Browserbase lets agents interact with any site—no API needed
The power of treating the internet itself as the “unstructured” legacy system
💻 Browserbase: browserbase.com
📼 Includes a live browser MCP server demo
Chris Bell (Knock) demos how Knock’s Agent Toolkit introduces deferred tool execution—a powerful pattern for agent-driven workflows that lets humans stay in the loop without blocking system progress.
In this high-tempo demo from MCP Night, Chris shows off:
- How Knock’s MTP server integrates with their agent toolkit
- A prompt-driven notification system that creates entire workflows on the fly
- Why “YOLO mode” is the fastest way to test your agent infra in production-like settings
Get inspired to rethink the relationship between tools, agents, and the humans guiding them.
In this talk from MCP Night, Kylie shares how Cloudflare’s Workers and Agents SDK enable powerful, durable agents that do more than just single-shot tasks. Learn how MCP (Multi-Component Programs) shifts your architecture thinking from request/response models to ongoing agent-managed state, inter-agent communication, and shared memory.
You'll learn:
- What an MCP host is and how it manages agent context
- How Cloudflare’s Agents SDK enables long-lived workflows
- Design patterns for building agent-based systems beyond microservices
Explore the future of programmable infrastructure—one agent at a time.
🔗 agents.cloudflare.com
🛠 npm install agents
In this video, we cover:
* Setting up permissions and roles in the WorkOS dashboard.
* Assigning roles to users within your organization.
* Conditionally exposing MCP tools based on user permissions.
* Testing the authorization flow using Cloudflare's Worker AI LLM Playground.
* A quick look at the code implementing the permission check.
Secure your AI tools and ensure only authorized users can access specific features. If you missed Part 1 on Authentication, check it out here: youtu.be/jChR5eopdro
Learn more about WorkOS: workos.com
Check out the code: github.com/cloudflare/ai/tree/main/demos/remote-mcp-authkit
Interested in MCP Night? workos.com/mcp-night
Chapters:
00:00 RBAC Authorization with WorkOS AuthKit
00:14 Demo Goal: Adding Image Generation Permission
00:44 Prerequisites: Add Users to Org
01:00 Creating a Permission in WorkOS
01:14 Creating a Role (Subscriber) & Assigning Permission
01:30 Assigning the Role to a User
01:44 Testing with Cloudflare Worker AI Playground
01:53 Reconnecting & Authenticating
02:04 Verifying Authorized Tools (Add vs. Generate Image)
02:10 Using the Permission-Gated Tool
02:34 Code Walkthrough: Conditional Tool Access
03:06 Recap: Easy MCP RBAC with WorkOS
03:19 Event Plug: MCP Night
Read more on the Cloudflare blog:
blog.cloudflare.com/building-ai-agents-with-mcp-authn-authz-and-durable-objects/#workos
Cloudflare's remote MCP GitHub OAuth doc:
github.com/cloudflare/ai/blob/main/demos/remote-mcp-github-oauth/README.md#access-the-remote-mcp-server-from-claude-desktop
Chapters
00:00 Intro
00:16 Piecing together the Agent Puzzle: MCP + AuthKit
00:40 Deploy to Cloudflare: MCP + AuthKit
00:51 Navigate the deployed project
01:47 Add WorkOS CLIENT ID and API KEY from dashboard
02:14 Test MCP Authentication with the Cloudflare Workers AI Playground
02:26 Add Redirect URI to WorkOS
02:34 Authenticate with MCP Server in the AI Playground using WorkOS AuthKit
03:01 Example: Use the MCP tool to inform LLM responses
03:29 Integrate the hosted MCP server into AI tools like Cursor
03:49 Learn more in the cloudflare/ai repository
WorkOS Connect: workos.com/blog/workos-connect
WorkOS Vault: workos.com/blog/vault
Custom Objects and JWT Templates: workos.com/blog/custom-objects
New Identity Providers: workos.com/blog/authkit-login-integrations
User Profile and Org Switching Widgets: workos.com/blog/new-widgets-released-user-profile-and-organization-switcher
Chapters
00:00 Introduction
00:15 WorkOS Connect
00:38 WorkOS Vault
01:01 Custom Metadata & JWT Templates
01:27 New OAuth Providers
01:47 User Profile & Org Switching Widgets
02:01 Conclusion
Learn more: workos.com/blog/new-widgets-released-user-profile-and-organization-switcher
Learn more: workos.com/blog/custom-objects
Learn more: workos.com/blog/vault
In this video, we'll create a new Laravel app with the React starter kit, configure WorkOS for authentication (including social sign-in), and deploy the app to Laravel Cloud - all in just a few minutes. You'll see how seamlessly WorkOS integrates with Laravel, providing a secure and polished authentication experience right out of the box. If you're a Laravel developer looking to streamline authentication for your apps, this video is a must-watch!
Chapters
00:00 Introduction
01:00 The Rise of SaaS and Need for Data Governance
03:18 Limitations of Trust-Based Compliance
05:40 Encryption Keys Give Customers Direct Control
10:50 How EKM Systems Work
17:20 Observability and Verifiability
19:19 Real Examples - Box, Airtable, Doppler
22:30 The Future of EKM for AI Data Governance
Chapters
00:00 Introduction
01:00 About Garret
02:36 The Importance of Audit Logs
04:47 Security Requirements for Audit Logs
10:27 Legal Requirements: eDiscovery
15:12 Compliance Requirements
20:20 Data Loss Prevention (DLP) & CASB
25:53 Retention & Legal Holds
29:37 Redaction Capabilities
31:50 Customer Expectations & Future Trends
34:00 Q&A
Learn about the industry trends driving this shift, including increased granularity, zero-trust security, and the rise of AI. Explore real-world examples from companies like Google, Airbnb, and Carta, and understand the technical challenges they faced in implementing fine-grained authorization systems. Aditya provides a deep dive into the Google Zanzibar model, explaining how it represents authorization rules as tuples and constructs a relationship graph for efficient access control. Gain insights into transitioning from RBAC to fine-grained authorization, the infrastructure requirements, and the option of using managed services like WorkOS FGA. By the end of this video, you'll have a solid understanding of when and why to adopt fine-grained authorization in your applications, ensuring granular access control, enhanced security, and a competitive edge.
Chapters
00:00 Introduction
01:35 What is Authorization?
04:35 Fine-Grained Authorization Trends
10:30 Real-World Examples
16:00 The Google Zanzibar Model
22:40 Transitioning from RBAC to FGA
28:20 Managed FGA Services
34:10 When to Adopt Fine-Grained Authorization
37:45 Conclusion
In this tutorial, we'll install AuthKit from the supplied errors, learning what each part of the installation controls. Redirects, environment variables, endpoints, server functions and more.
AuthKit simplifies auth and scales with you, from your first customers to your first enterprise sale.
Chapters
00:00 Introduction
01:00 Setting up AuthKit in Next.js
05:18 Add sign-in and sign-up buttons
09:47 Create auth callback route
14:22 Display user session data
18:15 Sign out with Server Actions
21:40 Configuring WorkOS dashboard
workos.com
Chapters
00:00 Introduction
01:00 Identity for Product-Led Growth
05:23 Analyzing Slack's Identity Model
13:08 Notion's Approach to Identity
21:43 GitHub's Unique Identity Implementation
29:12 Aligning Identity with Business Strategy
34:27 Q&A Session
From defining enterprise readiness and understanding buyer personas to managing customer requirements and prioritizing product roadmaps, they uncover the nuances that make or break success in the enterprise world.
Discover actionable tips on stakeholder management, contractual negotiations, data governance, and striking the right balance between user needs and enterprise demands. Whether you're a product leader, entrepreneur, or simply curious about enterprise dynamics, this video offers a comprehensive masterclass on unleashing your product's enterprise potential.
Chapters
00:00 Introduction
01:00 Defining Enterprise Readiness
08:37 Understanding Buyer vs. User Personas
14:45 Managing Customer Requirements
21:02 Prioritizing Product Roadmaps
28:17 Stakeholder Management
35:41 Contractual Negotiations
42:28 Data Governance and Privacy
49:12 Balancing User Needs and Enterprise Demands
- Passkeys for password-less authentication
- Widgets for drop-in, E2E user-management components
- Entitlements for feature gating with Stripe
- Actions for extending authentication flows with application code
- Radar for advanced bot protection
This keynote covers the importance of being enterprise ready, the challenges of building for enterprises, and live demos of each new product. WorkOS provides the infrastructure to help companies rapidly build enterprise capabilities into their applications.
Chapters
00:00 CrossingThe Enterprise Chasm
28:05 Passkeys
31:58 Widgets
40:20 Entitlements
45:13 Actions
50:51 Radar
58:59 AI: Agent Identity
00:00 Introduction
01:00 The Problem with Using Email for User Identity
02:19 Modeling Database with WorkOS ID
05:41 Handling WorkOS Webhooks
10:12 Fixing Data Sync Issues
13:40 State API & Data Reconciliation
Learn more: workos.com/blog
Chapters:
00:00 - Launch Week Recap
00:26 - Passkeys: Password-less Authentication
01:30 - Widgets: Drop-in User Management UI
03:41 - Entitlements: Plan-Based Feature Access
05:38 - Actions: Custom Auth Workflows
07:43 - Radar: Advanced Security & Bot Protection
09:35 - Next.js B2B Starter Kit
10:09 - FGA (Fine-Grained Authorization)
10:51 - Get started…
• Manage multiple user events (created, updated, deleted)
• Implement clear error handling
• Debug webhook responses
• Validate event types properly
Watch to streamline your webhook implementation and improve your error handling.
🔗 Resources mentioned in video:
[Add relevant documentation links]
⏱️ Timestamps:
0:00 - Introduction
0:33 - Webhook Dashboard Setup
0:52 - Handler Code Implementation
1:24 - Error Handling
1:55 - Debugging
2:50 - Final Implementation
The full episode with the transcript is also available here: workos.com/podcast/how-to-make-b2b-marketing-for-developers-actually-helpful
In this episode, we cover:
0:00 Intro
0:40 Francois' background
1:46 Early days at Twilio as the VP of global marketing
2:52 Things that weren't working well as Twilio pivoted to the enterprise
4:15 First enterprise marketing tactics that Francois deployed at Twilio
6:28 Why Twilio consolidated growth marketing and demand gen
8:01 What is a technical BDR?
10:06 "Inspire and equip"
12:22 What does it mean for marketing to be genuinely helpful for devs?
15:42 Signals that indicated it was time for Twilio to go after the enterprise
18:20 What's inherently different about marketing to the enterprise?
21:08 Creating technical content for devs
23:39 What to focus on first when branching out from pure PLG
26:28: Advice for founders going from PLG to the enterprise


