{"eid":"workos","name":"WorkOS","domain":"workos.com","resolved_by":"domain","topics":["dev-services"],"n_records":1,"best_vorder":1,"review":null,"aliases":["WorkOS","workos.com"],"records":[{"rid":"dev-services/workos","card":{"rid":"dev-services/workos","eid":"workos","topic":"dev-services","slug":"workos","provider":"WorkOS","url":"https://workos.com/pricing","domain":"workos.com","category":"hosted authentication and user management (AuthKit), enterprise SSO and directory sync","tier":"AuthKit free allowance","verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","self_hosted":0,"confidence":"documented","binding":"write-gated","identity_kind":"card","identity_basis":"stated","needs_card":1,"needs_phone":null,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"rest","egress_metered":0,"per_object_bytes":null,"retention_days":30,"verified_at":"2026-11-02T00:37:55.410Z","verified_basis":"live","checked_on":"2026-11-02","stale_on":"2026-12-03","n_evidence":43,"usd_month":null,"usd_per_tb_month":null,"summary":"AuthKit user management free for the first 1 million monthly active users; staging environments are free; the production environment needs a payment method o...","duplicate_of":null,"n_unknown":0,"free_unit":"users"},"record":{"topic":"dev-services","slug":"workos","provider":"WorkOS","tier":"AuthKit free allowance","url":"https://workos.com/pricing","category":"hosted authentication and user management (AuthKit), enterprise SSO and directory sync","free_tier":{"stated":"AuthKit user management free for the first 1 million monthly active users; staging environments are free; the production environment needs a payment method on file","unit":"users","metered_on":"identity-count","source_url":"https://workos.com/pricing","read_on":"2026-10-30","notes":"An MAU is a user who signs up, signs in or updates a profile in a calendar month. AuthKit covers email and password, social login, passkeys, MFA, magic auth and enterprise SSO. SSO and Directory Sync connections cost USD 125 each for the first 15, a custom domain USD 99 a month; Radar includes 1,000 checks. A production environment activates only after a payment method is added, even when usage stays inside the free allowance."},"per_object_cap":{"stated":"metadata on a user or an organization: up to 10 key-value pairs, each key up to 40 characters and each value up to 600 characters, ASCII only","bytes":null,"source_url":"https://workos.com/docs/authkit/metadata","notes":"The OpenAPI specification of the WorkOS API sets maxProperties 50 on the metadata of a user, with keys of at most 40 characters and values of at most 600 characters, which disagrees with the 10 key-value pairs of the documentation page."},"retention":{"stated":"Audit Log events are kept 30 days by default and then deleted; longer retention is priced per 1M events","days":30,"source_url":"https://workos.com/docs/audit-logs"},"egress":{"terms":"not applicable: an authentication API; no traffic allowance or egress term is published","metered":false,"free_allowance":null,"price_per_tb":null,"source_url":"https://workos.com/pricing"},"interface":["rest"],"interface_detail":"REST API at https://api.workos.com with a Bearer API key (a GET /events without a key answered 401); hosted AuthKit sign-in pages; an events API; WorkOS Connect serves OAuth authorization server metadata at /.well-known/oauth-authorization-server and an OpenID configuration at /.well-known/openid-configuration on the AuthKit domain.","endpoint":"https://api.workos.com","tooling":"WorkOS SDKs for Node, Ruby, Python and other languages, the WorkOS CLI (npx workos@latest), or any HTTP client with a Bearer key.","chaining":"A staging environment for building and testing sign-in at no cost; production sign-in for real users needs a card on file.","limits":[{"kind":"volume-quota","value":"1,000,000 monthly active users","source":"https://workos.com/pricing"},{"kind":"write-gated","value":"a payment method is required to activate the production environment; staging environments are free","source":"https://workos.com/docs/dashboard/billing"},{"kind":"request-rate","value":"6,000 requests per 60 seconds per API key","source":"https://workos.com/docs/reference/rate-limits"},{"kind":"request-rate","value":"AuthKit: 1,000 reads and 500 writes per 10 seconds per environment","source":"https://workos.com/docs/reference/rate-limits"},{"kind":"retention-clamped","value":"Audit Log events kept 30 days by default","source":"https://workos.com/docs/audit-logs"},{"kind":"per-object-cap","value":"metadata on a user or organization: 10 key-value pairs (documentation page) or 50 (OpenAPI specification), keys up to 40 characters, values up to 600 characters","source":"https://workos.com/docs/authkit/metadata"}],"binding":"write-gated","binding_note":"The 1 million MAU allowance applies in a production environment, which activates only after a payment method is added; without one the account has staging only.","identity_cost":{"kind":"card","detail":"The sign-up page asks for an email address or a Google sign-in and states no credit card is required, and staging needs none; the production environment activates only after a payment method (card details and cardholder name, billing address) is added. Whether a later step of the dashboard sign-up asks for a phone number is unverified: behind a sign-up.","country":null},"reliability_note":"Email sent through the shared WorkOS provider (Magic Auth, verification, password reset) can be temporarily limited for unusual volume or spam patterns; a 429 may carry Retry-After.","confidence":"documented","confidence_note":"Every value is quoted from first-party pricing, docs, billing and sign-up pages; the API host was probed and answered 401 without a key. An authenticated call in a staging environment would move it to measured.","evidence":[{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"the first 1 million MAUs are free","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"Enterprise-ready authentication and identity for every app. First 1 million monthly active users free."},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"AuthKit is free for the first 1M MAUs","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"| First 1M MAUs           | Free      |"},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"AuthKit covers password, social, passkeys, MFA, magic auth and SSO","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"AuthKit includes email + password, social login, passkeys, MFA, magic auth, and enterprise SSO — all from one integration."},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"an MAU is a user who signs up, signs in or updates a profile in a month","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"- Monthly Active User (MAU): A user who performs any action (sign up, sign in, or profile update) within a calendar month."},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"staging environments are free; only production is billed","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"- Staging environments: Free for testing. Only production environments are billed."},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"SSO and Directory Sync connections cost USD 125 each for the first 15","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"| 1–15        | $125/ea              | —                                                 |"},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"a custom domain costs USD 99 a month","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"| Custom domain | $99/mo |"},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"Radar includes 1,000 checks","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"| First 1,000 checks        | Free    |"},{"url":"https://workos.com/pricing","date":"2026-10-30","proved":"longer audit log retention is priced per 1M events","capture":"sha256:f9cff0ec9cddb7e4d5a39529f1e1000beb8268e6a483f88b38c548e08d3c28c3","quote":"| Event retention (per 1M events)     | $99/mo  |"},{"url":"https://workos.com/docs/authkit/environments","date":"2026-10-30","proved":"staging is free","capture":"sha256:b029105d01d84f66aa76b3cdf9f596dc9950b798bf303d47138eaf6e3701fbe4","quote":"Staging is free. No connections in staging incur charges, regardless of type."},{"url":"https://workos.com/docs/authkit/environments","date":"2026-10-30","proved":"production needs billing information even inside the free allowance","capture":"sha256:b029105d01d84f66aa76b3cdf9f596dc9950b798bf303d47138eaf6e3701fbe4","quote":"you still need to [add billing information](https://workos.com/docs/dashboard/billing#payment-method) to unlock the production environment"},{"url":"https://workos.com/docs/dashboard/billing","date":"2026-10-31","proved":"a payment method is required for production","capture":"sha256:1e36d98b9b42d4aecefb4e15727546eff4546c94075c830a1cf13440b0e67822","quote":"A payment method is required to activate your production environment. Staging environments are free and don't require one."},{"url":"https://workos.com/docs/dashboard/billing","date":"2026-10-31","proved":"the payment method is a card","capture":"sha256:1e36d98b9b42d4aecefb4e15727546eff4546c94075c830a1cf13440b0e67822","quote":"- Card details and cardholder name: processed by Stripe; WorkOS doesn't store your card number."},{"url":"https://workos.com/docs/dashboard/billing","date":"2026-10-31","proved":"the payment form asks for a billing address","capture":"sha256:1e36d98b9b42d4aecefb4e15727546eff4546c94075c830a1cf13440b0e67822","quote":"- Billing address and tax information: shown on invoices."},{"url":"https://workos.com/docs/authkit/platforms","date":"2026-10-30","proved":"production needs a payment method; without one only sandbox environments exist","capture":"sha256:0696de50cae1b291a6aca4f5483aff31c98b0cb4144768fa13ce0487b7d733c6","quote":"- Production environments require active billing on the team. Until a team admin adds a payment method in the WorkOS Dashboard, your platform can only create sandbox environments."},{"url":"https://workos.com/blog/workos-joins-stripe-projects","date":"2026-10-30","proved":"the Stripe Projects route asks no account form or card","capture":"sha256:d0f29cab13cd0b64642115e50f187a6f9da01af68d6709e570ae4135f7a847c5","quote":"One command. No account creation form, no credit card prompt, no email verification loop."},{"url":"https://workos.com/blog/workos-joins-stripe-projects","date":"2026-10-30","proved":"the Stripe Projects route provisions a sandbox environment","capture":"sha256:d0f29cab13cd0b64642115e50f187a6f9da01af68d6709e570ae4135f7a847c5","quote":"By default, this provisions a sandbox environment."},{"url":"https://workos.com/blog/workos-joins-stripe-projects","date":"2026-10-30","proved":"a WorkOS CLI exists","capture":"sha256:d0f29cab13cd0b64642115e50f187a6f9da01af68d6709e570ae4135f7a847c5","quote":"npx workos@latest"},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"all requests are limited to 6,000 per 60 seconds per API key","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"| All requests | \\*   | 6,000 requests per 60 seconds per API key |"},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"AuthKit limits apply per environment","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"Rate limiting for AuthKit APIs are enforced on a per environment basis."},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"AuthKit reads are limited to 1,000 per 10 seconds","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"| Reads                                                       | /user\\_management/\\*                          | 1,000 requests per 10 seconds                        |"},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"AuthKit writes are limited to 500 per 10 seconds","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"| Writes                                                      | /user\\_management/\\*                          | 500 requests per 10 seconds                          |"},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"shared-provider email can be temporarily limited","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"may have some or all of its outbound email temporarily limited"},{"url":"https://workos.com/docs/reference/rate-limits","date":"2026-10-30","proved":"a 429 may carry Retry-After","capture":"sha256:899ce3e0049496f57eab5aed1daa2786185d3b33ff768b630f57e50497b4a8fe","quote":"When a `429 Too Many Requests` response includes a `Retry-After` header, wait for the indicated delay before retrying."},{"url":"https://workos.com/docs/audit-logs","date":"2026-10-31","proved":"audit log events are kept 30 days by default","capture":"sha256:9ed0e7e71a57d0e86135615cd1e533d03e3d746b5680349ca520fd65cf213fa8","quote":"Audit Log Events are retained for 30 days by default and permanently deleted when the retention period ends."},{"url":"https://workos.com/docs/reference/events","date":"2026-10-31","proved":"the API is served at api.workos.com","capture":"sha256:1627a16f8f910b079be38ffec2b58cca75fe2dc748329a3efbd0ff273f739246","quote":"curl \"https://api.workos.com/events\""},{"url":"https://workos.com/docs/reference/events","date":"2026-10-31","proved":"the API takes a Bearer key","capture":"sha256:1627a16f8f910b079be38ffec2b58cca75fe2dc748329a3efbd0ff273f739246","quote":"--header \"Authorization: Bearer sk_example_123456789\""},{"url":"https://workos.com/docs/reference/events","date":"2026-10-31","proved":"a Node SDK exists","capture":"sha256:1627a16f8f910b079be38ffec2b58cca75fe2dc748329a3efbd0ff273f739246","quote":"import { WorkOS } from '@workos-inc/node';"},{"url":"https://workos.com/signup","date":"2026-10-31","proved":"the sign-up asks for an email address or a Google sign-in","capture":"sha256:99fff0475fc69164d1ee03f57cb55ee359b4e8de3c5766202acb537ec038c3d1","quote":"# Create your WorkOS account\n\nEmail\n\nContinue\n\nOR\n\n[Continue with Google]"},{"url":"https://workos.com/signup","date":"2026-10-31","proved":"the sign-up page states no credit card is required","capture":"sha256:99fff0475fc69164d1ee03f57cb55ee359b4e8de3c5766202acb537ec038c3d1","quote":"- No credit card required."},{"url":"probe:https://api.workos.com/events","date":"2026-10-31","proved":"api.workos.com/events answers 401 without a key","capture":"sha256:d4e7fb7feae092099a721c755f6ad01478eedfbeb497641ce38a818b981460b0","quote":"\"status\": 401"},{"url":"https://workos.com/docs/authkit/metadata","date":"2026-11-01","proved":"WorkOS documents up to 10 key-value pairs of metadata on an organization or user","capture":"sha256:851a82fece8fac36d05439a92ddf854a3a4acb113261405bfa9f88b159cf5296","quote":"You can add up to 10 key-value pairs to an organization or user within these data limits:"},{"url":"https://workos.com/docs/authkit/metadata","date":"2026-11-01","proved":"a metadata key is up to 40 characters and a value up to 600 characters, ASCII only","capture":"sha256:851a82fece8fac36d05439a92ddf854a3a4acb113261405bfa9f88b159cf5296","quote":"- Key: Up to 40 characters long. ASCII only.\n- Value: Up to 600 characters long. ASCII only."},{"url":"https://raw.githubusercontent.com/workos/openapi-spec/main/spec/open-api-spec.yaml","date":"2026-11-01","proved":"the WorkOS OpenAPI specification sets maxProperties 50 and a key length of 40 on the metadata of a user","capture":"sha256:16611af477f24d84ad1d5f58ce5c26b93c08fdc4db22f8801f75bf10e18729a4","quote":"description: Object containing metadata key/value pairs associated with the user.\n          example:\n            timezone: America/New_York\n          propertyNames:\n            maxLength: 40\n          maxProperties: 50"},{"url":"https://docs.stripe.com/projects","date":"2026-11-01","proved":"Stripe hands the provider a Shared Payment Token for a selected paid plan","capture":"sha256:206381346bcd229992c7e9108ed06cec133f731f74955818da75a7f2345dce38","quote":"When you select a paid plan in the CLI, Stripe tokenizes your payment credentials into a [Shared Payment Token](https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens.md) and grants the provider a payment credential for that upgrade."},{"url":"https://docs.stripe.com/projects","date":"2026-11-01","proved":"the payment method of Stripe Projects is added to Stripe once","capture":"sha256:206381346bcd229992c7e9108ed06cec133f731f74955818da75a7f2345dce38","quote":"You only need to add your payment method to Stripe once."},{"url":"https://docs.stripe.com/cli/projects.md","date":"2026-11-01","proved":"Stripe requires its payment method before a paid plan tier is provisioned","capture":"sha256:65dbc14bb9004a7417af841d4779cde75d56d71fd24534f3d1c8d6fc3db0321d","quote":"Add or update the payment method used for Stripe Projects billing. We require it before you can provision any paid plan tier."},{"url":"https://workos.com/docs/authkit/platforms","date":"2026-11-01","proved":"WorkOS requires a payment method added in its Dashboard before a platform can create production environments","capture":"sha256:0696de50cae1b291a6aca4f5483aff31c98b0cb4144768fa13ce0487b7d733c6","quote":"Production environments require active billing on the team. Until a team admin adds a payment method in the WorkOS Dashboard, your platform can only create sandbox environments."},{"url":"https://workos.com/blog/workos-joins-stripe-projects","date":"2026-11-01","proved":"production through Stripe Projects is the same command with the production configuration","capture":"sha256:feb49f7d455781c533cfd2ef6eac6abf027409b9e6ad69747f69ed63a743999c","quote":"When you're ready to ship to real users, run the same command again and select the `production` configuration. The flow is identical; only the environment changes."},{"url":"https://workos.com/signup","date":"2026-11-01","proved":"the sign-up page states no credit card is required","capture":"sha256:6dba8fb05e4cf19d54ab91b340205d0215431bac5d06b59d5f8d686afa004c68","quote":"- No credit card required."},{"url":"https://workos.com/docs/reference/workos-connect/metadata","date":"2026-11-01","proved":"WorkOS Connect serves an OpenID configuration discovery endpoint","capture":"sha256:f546df677e8723755ec8649770145d4ba32b8998b464e7fb12cd472d7402cf82","quote":"This discovery endpoint provides the standard configuration for OpenID clients to interact with WorkOS Connect."},{"url":"https://workos.com/docs/reference/workos-connect/metadata","date":"2026-11-01","proved":"the OpenID configuration is served at /.well-known/openid-configuration on the AuthKit domain","capture":"sha256:f546df677e8723755ec8649770145d4ba32b8998b464e7fb12cd472d7402cf82","quote":"curl https://authkit_domain/.well-known/openid-configuration"},{"url":"https://workos.com/docs/reference/workos-connect/metadata","date":"2026-11-01","proved":"the OAuth authorization server metadata is served at /.well-known/oauth-authorization-server on the AuthKit domain","capture":"sha256:f546df677e8723755ec8649770145d4ba32b8998b464e7fb12cd472d7402cf82","quote":"curl https://authkit_domain/.well-known/oauth-authorization-server"}],"verdict":"qualifies-with-caveat","verified_at":"2026-11-02T00:37:55.410Z","notes":"Provisioning through Stripe Projects (stripe projects add workos/auth) creates a sandbox environment with no account form or credit card prompt; production is a second configuration of the same command. Stripe states that a payment method is added to Stripe once and handed to the provider as a Shared Payment Token when a paid plan is selected, and WorkOS states that production environments require a payment method added in the WorkOS Dashboard; whether the production configuration provisioned through Stripe Projects needs a payment method on the WorkOS team as well is unverified: behind a sign-up."},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":1.0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:volume-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[1].value","kind":"limit:write-gated","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[2].value","kind":"limit:request-rate","num":6000.0,"unit":"requests","per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.limits[3].value","kind":"limit:request-rate","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[4].value","kind":"limit:retention-clamped","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[5].value","kind":"limit:per-object-cap","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[],"history":[],"drift":[]}]}