WorkOS Emulator
Stateful WorkOS emulator: AuthKit user management (hosted login, code + refresh grants, sealed-session JWKS), organizations, memberships, invitations, API keys, Vault KV, and an OAuth authorization server for MCP clients.
Create an instance
Each instance is isolated, stateful, and addressable at its own host. The server generates an unguessable name; an optional {"instance":"<prefix>"} body adds a readable prefix.
curl -s -X POST https://workos.emulators.dev/_emulate/instancesHosted deployments create instances lazily when the returned URL is first used. The instance URL is a capability: anyone who has it can read and modify the instance, so save the returned URLs. Never store real secrets in an emulator.
Sample instance host: https://workos.your-instance.emulators.dev
Surfaces
| Surface | Status | Path |
|---|---|---|
| WorkOS REST API | partial | / |
| Hosted AuthKit login | supported | /user_management/authorize |
| OAuth authorization server (MCP) | supported | /oauth2 |
| Vault KV | supported | /vault/v1/kv |
Control API
manifest | quickstart | specs | coverage | connections