Skip to content
ProductArena

How WorkOS’s scores are calculated

The full audit trail, recomputed from the verdict data at build time through the same code that produced the leaderboard: verdict × quality × story weight per cell, cells sum to dimension scores, dimensions blend into the PA Score. Every number on the product page is reproducible from this page alone; for why the formula looks like this, see the methodology.

verdict factors: full ×1.0 · partial ×0.6 · disputed ×0.3 · none ×0.0 · n/a excluded from both sides · cell points = weight × quality × factor · cell max = weight × 10

PA Score23/100

Agent-ready 58.8 × 0.30 = 17.64

API quality 0.0 × 0.20 = 0.00

Openness 16.0 × 0.20 = 3.20

Built-in AI 8.0 × 0.15 = 1.20

Automation 7.2 × 0.15 = 1.08

(17.64 + 0.00 + 3.20 + 1.20 + 1.08) ÷ (0.30 + 0.20 + 0.20 + 0.15 + 0.15) = 23.12 ÷ 1.00 = 23.1

Scores are stored to 1 decimal; the product page’s pills round to whole numbers for display. Each dimension below shows the stories, verdicts, and cited evidence behind its number.

Agent-ready58.8/100×0.30 of the PA blend

Outside-in: can YOUR agent reach and drive this product — API, MCP, CLI, headless runs, agent docs.

Point an agent at llms.txt or agent-oriented docsweight 2

2 (weight) × 9 (quality) × 1.0 (full) = 18.0 of 20 max

  • [probe] https://workos.com/llms.txt“PROBE llms.txt: HTTP 200 at https://workos.com/llms.txt # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [probe] https://workos.com/docs.md“PROBE docs-md: HTTP 200 at https://workos.com/docs.md # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”

Run the product headlessly / in CI for automationweight 2

2 (weight) × 5 (quality) × 0.6 (partial) = 6.0 of 20 max

  • [claimed-docs] https://workos.com/docs/authkit/connect/m2m.md“M2M applications are commonly used to provide API access credentials to customers or partners, allowing them to programmatically access your APIs”
  • [github] https://github.com/workos/workos-node“For apps that can't securely store secrets, initialize with just a client ID”
  • [github] https://github.com/workos/workos-node“The SDK automatically retries requests that fail with a transient error — a network error, a request timeout (408), a rate limit (429), or a server error”
  • [github] https://github.com/workos/workos-node“The SDK automatically retries requests that fail with a transient error — a network error, a request timeout (408), a rate limit (429), or a server error (500, 502, 503, 504) — using exponential backoff with jitter.”
  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”
  • [claimed-docs] https://workos.com/docs/reference/authkit/cli-auth/device-authorization.md“CLI Auth enables command-line applications to authenticate users through the web using the OAuth 2.0 Device Authorization Flow”

Plug MCP servers into this product so it can use their toolsweight 3

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Connect an agent via an official MCP serverweight 3

3 (weight) × 8 (quality) × 1.0 (full) = 24.0 of 30 max

  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“WorkOS and AuthKit can provide a secure way to manage access to your MCP server with minimal effort.”
  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”
  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“AuthKit, which is a spec-compatible OAuth authorization server.”
  • [claimed-docs] https://workos.com/docs“Built-in support for MCP and OAuth applications.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [probe] https://workos.com/docs/mcp“official MCP server documented at https://workos.com/docs/mcp”

Use an official CLIweight 2

2 (weight) × 3 (quality) × 0.6 (partial) = 3.6 of 20 max

  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“The fastest way to export Auth0 data is with the WorkOS CLI migrations tool”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”

Drive the product through a documented public APIweight 3

3 (weight) × 9 (quality) × 1.0 (full) = 27.0 of 30 max

  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”
  • [probe] https://workos.com/llms.txt“PROBE llms.txt: HTTP 200 at https://workos.com/llms.txt # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [probe] https://workos.com/docs.md“PROBE docs-md: HTTP 200 at https://workos.com/docs.md # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“WorkOS and AuthKit can provide a secure way to manage access to your MCP server with minimal effort.”
  • [github] https://github.com/workos/workos-node“Install the package with: npm install @workos-inc/node”
  • [probe] https://workos.com/docs/mcp“official MCP server documented at https://workos.com/docs/mcp”

Issue scoped/least-privilege API credentials for an agentweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://workos.com/docs/authkit/connect/m2m.md“M2M applications are commonly used to provide API access credentials to customers or partners, allowing them to programmatically access your APIs”
  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“WorkOS and AuthKit can provide a secure way to manage access to your MCP server with minimal effort.”
  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“AuthKit, which is a spec-compatible OAuth authorization server.”
  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/rbac.md“teams can also define custom roles at the organization or tenant level, assign permissions to those roles, and enforce access policies at scale.”
  • [claimed-docs] https://workos.com/docs/rbac.md“Configure roles, permissions, and organization-scoped roles directly in the WorkOS Dashboard or using the API”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”

Build against official SDKsweight 2

2 (weight) × 7 (quality) × 1.0 (full) = 14.0 of 20 max

  • [github] https://github.com/workos/workos-node“Install the package with: npm install @workos-inc/node”
  • [github] https://github.com/workos/workos-node“For apps that can't securely store secrets, initialize with just a client ID”
  • [github] https://github.com/workos/workos-node“The SDK automatically retries requests that fail with a transient error — a network error, a request timeout (408), a rate limit (429), or a server error”
  • [github] https://github.com/workos/workos-node“The SDK automatically retries requests that fail with a transient error — a network error, a request timeout (408), a rate limit (429), or a server error (500, 502, 503, 504) — using exponential backoff with jitter.”

Subscribe to events via webhooksweight 2

2 (weight) × 5 (quality) × 0.6 (partial) = 6.0 of 20 max

  • [claimed-docs] https://workos.com/docs/directory-sync.md“Directory Sync sends automatic updates to your app for changes to directories, groups, users, or access rules.”
  • [claimed-docs] https://workos.com/docs/directory-sync.md“Directory Sync docs: "SCIM: System for Cross-domain Identity Management... a standard that many directory providers interface with. WorkOS supports dozens of integrations including SCIM. Directory updates can be delivered to you via webhooks or retrieved using the Events API."”
  • [claimed-docs] https://workos.com/docs/audit-logs.md“This guide will show you how to: 1. Configure and emit Audit Log Events 2. Export Audit Log Events”
  • [claimed-docs] https://workos.com/docs/audit-logs.md“Audit Logs are a collection of events that contain information relevant to notable actions taken by users in your application.”

Agent-ready = 105.8 ÷ 180 × 100 = 58.8

API quality0.0/100×0.20 of the PA blend

The programmable surface once an agent is there — machine-readable spec, interactive docs, sandbox, versioning discipline.

Explore an interactive API reference with runnable examplesweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”
  • [probe] https://workos.com/docs.md“PROBE docs-md: HTTP 200 at https://workos.com/docs.md # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [probe] https://workos.com/llms.txt“PROBE llms.txt: HTTP 200 at https://workos.com/llms.txt # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”

Download a machine-readable API spec (OpenAPI or equivalent)weight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”

Test against a sandbox environment without touching production dataweight 1

1 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 10 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Rely on versioned APIs with a documented deprecation policyweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

API quality = 0.0 ÷ 70 × 100 = 0.0

Openness16.0/100×0.20 of the PA blend

Can you leave, inspect, or self-host — data export, open source, portability.

Do everything through the API that I can do in the UIweight 2

2 (weight) × 8 (quality) × 1.0 (full) = 16.0 of 20 max

  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/rbac.md“Configure roles, permissions, and organization-scoped roles directly in the WorkOS Dashboard or using the API”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [probe] https://workos.com/openapi.json“PROBE openapi: HTTP 200 at https://workos.com/openapi.json — contains "openapi" key”
  • [probe] https://workos.com/docs/mcp“official MCP server documented at https://workos.com/docs/mcp”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”

Export all of my data in open formats and leaveweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“we will walk through the steps to export, and then import your users, organizations, and enterprise SSO connections from Auth0”
  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“The WorkOS AuthKit API allows you to migrate your existing user data from a variety of existing sources. In this guide, we will walk through the steps to export, and then import your users, organizations, and enterprise SSO connections from Auth0.”
  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“The fastest way to export Auth0 data is with the WorkOS CLI migrations tool”
  • [community] https://news.ycombinator.com/item?id=31353130“User raised concern about vendor lock-in: customer login data lives in WorkOS's database, questioning how to export it, cost, and contractual guarantees if switching away.”

Read the product's source under an open licenseweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Self-host the core productweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [community] https://news.ycombinator.com/item?id=31353130“User raised concern about vendor lock-in: customer login data lives in WorkOS's database, questioning how to export it, cost, and contractual guarantees if switching away.”
  • [probe] https://workos.com/llms.txt“PROBE llms.txt: HTTP 200 at https://workos.com/llms.txt # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”
  • [probe] https://workos.com/docs.md“PROBE docs-md: HTTP 200 at https://workos.com/docs.md # WorkOS Documentation > WorkOS is the enterprise authentication and identity platform for SaaS companies. AuthKit ship”

Openness = 16.0 ÷ 100 × 100 = 16.0

Built-in AI8.0/100×0.15 of the PA blend

Inside-out: how agentic the product itself is for its users — built-in assistants, autonomous features.

Get AI-generated insights and suggestions from my data inside the productweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs“Protect your app from bots, fraud, and abuse.”
  • [claimed-docs] https://workos.com/pricing“WorkOS pricing lists "Radar (Bot & Fraud Protection)" — first 1,000 checks free, per-50K-check pricing beyond — and "Log streaming (per SIEM connection) $125/mo" for audit-log export; the Auth0 migration guide describes Radar as "Protect against bots, fraud, and abuse."”

Set up automations that run autonomously in the backgroundweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [claimed-docs] https://workos.com/docs/directory-sync.md“Directory Sync sends automatic updates to your app for changes to directories, groups, users, or access rules.”

Delegate tasks to a built-in AI assistant inside the productweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”

Operate the product with natural-language commandsweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/mcp.md“The WorkOS MCP server is a remote management Model Context Protocol server that lets MCP-compatible AI agents act on your WorkOS workspace.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”
  • [probe] https://workos.com/docs/mcp“official MCP server documented at https://workos.com/docs/mcp”
  • [claimed-docs] https://workos.com/docs/authkit/mcp.md“WorkOS and AuthKit can provide a secure way to manage access to your MCP server with minimal effort.”

Built-in AI = 7.2 ÷ 90 × 100 = 8.0

Automation7.2/100×0.15 of the PA blend

Depth of automation primitives — rules, scheduling, bulk operations, webhooks.

Perform bulk operations across many items at onceweight 2

2 (weight) × 3 (quality) × 0.6 (partial) = 3.6 of 20 max

  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“This produces a migration package with users, organizations, memberships, roles, SSO handoff files, and warnings.”
  • [claimed-docs] https://workos.com/docs/migrate/auth0.md“The fastest way to export Auth0 data is with the WorkOS CLI migrations tool”
  • [claimed-docs] https://workos.com/docs/mcp.md“Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more) by calling the WorkOS API on your behalf.”
  • [claimed-docs] https://workos.com/docs/mcp.md“lets MCP-compatible AI agents act on your WorkOS workspace. Once connected, your agent can read and change the same dashboard data you can (managing organizations, connections, users, branding, and more)”

Define rules that trigger actions automatically on eventsweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://workos.com/docs/directory-sync.md“Directory Sync sends automatic updates to your app for changes to directories, groups, users, or access rules.”
  • [claimed-docs] https://workos.com/docs/audit-logs.md“Audit Logs are a collection of events that contain information relevant to notable actions taken by users in your application.”
  • [claimed-docs] https://workos.com/docs/directory-sync.md“Directory Sync docs: "SCIM: System for Cross-domain Identity Management... a standard that many directory providers interface with. WorkOS supports dozens of integrations including SCIM. Directory updates can be delivered to you via webhooks or retrieved using the Events API."”

Schedule recurring jobs or workflowsweight 2

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Version, review, and roll back my automationsweight 1

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Automation = 3.6 ÷ 50 × 100 = 7.2