NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #1482 most downloaded on PyPI
WorkOS Python Client
Last release today
19 Oct 2026
Ships fairly regularly
a new release about every 2 weeks
Some releases are documented
notes for 33 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
182 releases · first in 2019
iterate only the current page when looping over a list response
release 10.6.0 (5c1faa3)
#747 feat(generated)!: regenerate from spec (9 changes)
⚠️ Breaking
AddDataIntegrationsUpsertApiKeyRequestAddDataIntegrationsUpsertClientCredentialsRequestAddDataIntegrationsUpsertApiKeyRequestConnectionOwnerAddDataIntegrationsUpsertClientCredentialsRequestConnectionOwnerFeatures
RevokeLinkexternal_user_id to GenerateLinkPOST /portal/revoke_linkPOST /portal/generate_linkAgentBlueprintInvocableAsAgentBlueprintsCreateRequestInvocableAsAgentBlueprintsUpdateRequestInvocableAsinvocable_as to AgentBlueprintinvocable_as to AgentBlueprintsCreateRequestinvocable_as to AgentBlueprintsUpdateRequestAgentBlueprintInvocableAsInstanceTypesAgentBlueprintsCreateRequestInvocableAsInstanceTypesAgentBlueprintsUpdateRequestInvocableAsInstanceTypesGET /audit_logs/actionsGET /audit_logs/actions/{actionName}/schemasPOST /audit_logs/actions/{actionName}/schemasPOST /audit_logs/eventsPOST /audit_logs/exportsGET /audit_logs/exports/{auditLogExportId}GET /authorization/organization_memberships/{organization_membership_id}/role_assignmentsPOST /authorization/groups/{group_id}/role_assignmentsPUT /authorization/groups/{group_id}/role_assignmentsGET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}POST /authorization/organization_memberships/{organization_membership_id}/checkGET /authorization/organization_memberships/{organization_membership_id}/resourcesGET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissionsGET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissionsPOST /authorization/organization_memberships/{organization_membership_id}/role_assignmentsGET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}PATCH /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/organization_membershipsGET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/role_assignmentsGET /authorization/resourcesPOST /authorization/resourcesGET /authorization/resources/{resource_id}PATCH /authorization/resources/{resource_id}GET /authorization/resources/{resource_id}/organization_membershipsGET /authorization/resources/{resource_id}/role_assignmentsDirectorySyncResponseDirectorySyncRateLimitErrorPOST /directories/{id}/syncPUT /feature-flags/{slug}/disablePUT /feature-flags/{slug}/enableDELETE /user_management/organization_memberships/{id}GET /organizations/{id}/audit_logs_retentionPUT /organizations/{id}/audit_logs_retentionPOST /organizations/{organization_id}/it_contacts/{contact_id}/inviteestablished_by_user_id to ConnectedAccountWriteResponsestate_reason to ConnectedAccountWriteResponseestablished_by_user_id to ConnectedAccountstate_reason to ConnectedAccountestablished_by_user_id to DataIntegrationsListResponseDataConnectedAccountstate_reason to DataIntegrationsListResponseDataConnectedAccountPOST /data-integrations/{slug}/api-keyPOST /data-integrations/{slug}/client-credentialsPOST /organizations/{organization_id}/connected_accounts/{slug}POST /user_management/users/{user_id}/connected_accounts/{slug}ConnectedAccountWriteResponseConnectedAccountWriteResponseWarningaccount_display_name to CreateOrganizationConnectedAccountaccount_identifier to CreateOrganizationConnectedAccountaccount_display_name to OrganizationConnectedAccountaccount_identifier to OrganizationConnectedAccountaccount_display_name to CreateConnectedAccountaccount_identifier to CreateConnectedAccountaccount_display_name to ConnectedAccountInputaccount_identifier to ConnectedAccountInputaccount_display_name to DataIntegrationsCreateApiKeyConnectionRequestaccount_identifier to DataIntegrationsCreateApiKeyConnectionRequestaccount_display_name to DataIntegrationsUpsertApiKeyRequestaccount_identifier to DataIntegrationsUpsertApiKeyRequestaccount_display_name to ReauthorizeDataIntegrationsUpsertApiKeyRequestaccount_identifier to ReauthorizeDataIntegrationsUpsertApiKeyRequestaccount_display_name to DataIntegrationsUpsertApiKeyRequest2account_identifier to DataIntegrationsUpsertApiKeyRequest2account_display_name to DataIntegrationsGetDataIntegrationAuthorizeUrlRequestaccount_display_name to AddDataIntegrationsGetDataIntegrationAuthorizeUrlRequestaccount_display_name to ReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequestaccount_display_name to DataIntegrationsCreateClientCredentialsConnectionRequestaccount_identifier to DataIntegrationsCreateClientCredentialsConnectionRequestaccount_display_name to DataIntegrationsUpsertClientCredentialsRequestaccount_identifier to DataIntegrationsUpsertClientCredentialsRequestaccount_display_name to ReauthorizeDataIntegrationsUpsertClientCredentialsRequestaccount_identifier to ReauthorizeDataIntegrationsUpsertClientCredentialsRequestaccount_display_name to DataIntegrationsUpsertClientCredentialsRequest2account_identifier to DataIntegrationsUpsertClientCredentialsRequest2ConnectedAccountWriteResponseConnectionRoleConnectedAccountWriteResponseAuthMethodConnectedAccountWriteResponseStatePOST /data-integrations/{slug}/api-keyPOST /data-integrations/{slug}/authorizePOST /data-integrations/{slug}/client-credentialsAddDataIntegrationsGetDataIntegrationAuthorizeUrlRequestReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequestAddDataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwnerReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwnerDataIntegrationsCreateApiKeyConnectionRequestDataIntegrationsCreateClientCredentialsConnectionRequestDataIntegrationsCreateApiKeyConnectionRequestConnectionOwnerDataIntegrationsCreateClientCredentialsConnectionRequestConnectionOwnerPOST /data-integrations/{slug}/api-keyPOST /data-integrations/{slug}/client-credentialsconfig to DataIntegrationVendedCredentialDataIntegrationVendedCredentialCreateOrganizationConnectedAccountCreateConnectedAccountAddDataIntegrationsUpsertApiKeyRequestReauthorizeDataIntegrationsUpsertApiKeyRequestDataIntegrationsUpsertApiKeyRequest2AddDataIntegrationsUpsertClientCredentialsRequestReauthorizeDataIntegrationsUpsertClientCredentialsRequestDataIntegrationsUpsertClientCredentialsRequest2CreateOrganizationConnectedAccountStateCreateConnectedAccountStateAddDataIntegrationsUpsertApiKeyRequestConnectionOwnerReauthorizeDataIntegrationsUpsertApiKeyRequestConnectionOwnerDataIntegrationsUpsertApiKeyRequest2ConnectionOwnerAddDataIntegrationsUpsertClientCredentialsRequestConnectionOwnerReauthorizeDataIntegrationsUpsertClientCredentialsRequestConnectionOwnerDataIntegrationsUpsertClientCredentialsRequest2ConnectionOwnerOrganizationsDataProviders.updateOrganizationDataInstallation.connection_intentUserManagementDataProviders.updateUserDataInstallation.connection_intentOrganizationConnectedAccountOrganizationConnectedAccountStatePOST /radar/attemptsPUT /radar/attempts/{id}POST /radar/lists/{type}/{action}code_verifier to TokenQueryPOST /user_management/invitationsPOST /user_management/invitations/{id}/resendPOST /user_management/waitlist_entries/{id}/approvePUT /user_management/users/{id}Fixes
POST /agents/blueprints/{agent_blueprint_id}/tokensPipes.createApiKeyConnection from ConnectedAccount to ConnectedAccountWriteResponsePipes.upsertApiKey from ConnectedAccount to ConnectedAccountWriteResponsePipes.createClientCredentialsConnection from ConnectedAccount to ConnectedAccountWriteResponsePipes.upsertClientCredentials from ConnectedAccount to ConnectedAccountWriteResponseOrganizationsDataProviders.createOrganizationDataInstallation from ConnectedAccount to ConnectedAccountWriteResponseOrganizationsDataProviders.updateOrganizationDataInstallation from ConnectedAccount to ConnectedAccountWriteResponseUserManagementDataProviders.createUserDataInstallation from ConnectedAccount to ConnectedAccountWriteResponseUserManagementDataProviders.updateUserDataInstallation from ConnectedAccount to ConnectedAccountWriteResponsePOST /organizations/{organization_id}/connected_accounts/{slug}POST /user_management/users/{user_id}/connected_accounts/{slug}PUT /data-integrations/{slug}/api-keyPipes.getDataIntegrationAuthorizeUrlPOST /data-integrations/{slug}/authorizePUT /data-integrations/{slug}/client-credentialsPipes.upsertApiKeyPipes.upsertClientCredentialsDataIntegrationCredentialsResponse.credentialconnected_account_id from DataIntegrationsUpsertApiKeyRequestconnected_account_id from DataIntegrationsUpsertClientCredentialsRequestOrganizationsDataProviders.createOrganizationDataInstallation from OrganizationConnectedAccount to CreateOrganizationConnectedAccountUserManagementDataProviders.createUserDataInstallation from ConnectedAccountInput to CreateConnectedAccountOrganizationsDataProviders.createOrganizationDataInstallation from ConnectedAccountInput to OrganizationConnectedAccountOrganizationsDataProviders.updateOrganizationDataInstallation from ConnectedAccountInput to OrganizationConnectedAccountPUT /organizations/{organization_id}/connected_accounts/{slug}POST /connectionsPOST /connections/{connectionId}/saml_sp_signing_cert#749 feat(generated)!: regenerate from spec (3 changes)
Features
POST /user_management/usersPOST /user_management/magic_authFixes
POST /user_management/authenticate#752 fix(generated): regenerate from spec
Features
revoked_at to AgentRegistrationPOST /agents/registrations/{id}/revokeOne column per quarter.
Added model UserRoleAssignmentSourceGroup
#734 feat(generated): regenerate from spec
Features
UserRoleAssignmentSourceGroupgroup to UserRoleAssignmentSourceAdd optional jwt_issuer option for session token validation
reject empty and dot path segments before building request URLs (#728) (21735d2)
#723 fix(generated): regenerate from spec
Features
connected_account_id to DataIntegrationsVendCredentialsRequestconnected_account_id to DataIntegrationsGetUserTokenRequestUserManagementDataProviders.getUserDataInstallation.connected_account_idGET /user_management/users/{user_id}/connected_accounts/{slug}UserManagementDataProviders.updateUserDataInstallation.connected_account_idPUT /user_management/users/{user_id}/connected_accounts/{slug}UserManagementDataProviders.deleteUserDataInstallation.connected_account_idDELETE /user_management/users/{user_id}/connected_accounts/{slug}connected_accounts to DataIntegrationsListResponseDataPUT /data-integrations/{slug}PUT /data-integrations/{slug}/api-keyPUT /data-integrations/{slug}/client-credentialsPOST /data-integrations/{slug}/credentialsPOST /data-integrations/{provider}/token#727 feat(generated): regenerate from spec (4 changes)
Features
PortalLinkResponse.linkAgentsSessions.list.organization_idClaimViewResponse.user_codeAgentAdminValidateCredentialRequest.credentialValidateApiKey.valueOrganizationApiKeyWithValue.valueUserApiKeyWithValue.valueAuthenticationChallenge.codeAuthenticationFactorEnrolledTotp.secretAuthenticationFactorEnrolledTotp.qr_codeAuthenticationFactorEnrolledTotp.uriAuthenticationChallengesVerifyRequest.codesupports_multiple_connections to DataIntegrationsVendCredentialsRequestsupports_multiple_connections to DataIntegrationsGetUserTokenRequestUserManagementDataProviders.getUserDataInstallation.supports_multiple_connectionsUserManagementDataProviders.updateUserDataInstallation.supports_multiple_connectionsUserManagementDataProviders.deleteUserDataInstallation.supports_multiple_connectionsUserManagementDataProviders.getUserDataIntegrations.supports_multiple_connectionsPipesOwnershipuser to CreateDataIntegrationOwnershipuser to DataIntegrationOwnershipGET /data-integrations/{slug}/organizationPUT /data-integrations/{slug}/organizationDELETE /data-integrations/{slug}/organizationPipes.listDataIntegrations.ownershipGET /data-integrationsPUT /user_management/users/{user_id}/connected_accounts/{slug}DELETE /user_management/users/{user_id}/connected_accounts/{slug}DataIntegrationCredentialsResponseCredential.valueconnection_owner to DataIntegrationsUpsertApiKeyRequestconnection_owner to DataIntegrationsUpsertClientCredentialsRequestDataIntegrationsUpsertApiKeyRequestConnectionOwnerDataIntegrationsUpsertClientCredentialsRequestConnectionOwnerAccountSelectionRequiredErrorconnected_account_id to DataIntegrationsUpsertApiKeyRequestconnected_account_id to DataIntegrationsUpsertClientCredentialsRequestownership to CreateDataIntegrationownership to DataIntegrationconnection_owner to DataIntegrationsVendCredentialsRequestconnection_owner to DataIntegrationsGetUserTokenRequestCreateDataIntegrationOwnershipDataIntegrationOwnershipDataIntegrationsVendCredentialsRequestConnectionOwnerDataIntegrationsGetUserTokenRequestConnectionOwnerPOST /data-integrations/{slug}/credentialsPOST /data-integrations/{provider}/tokenCreateConnectionKeyPair.keyTokenQuery.codeSSOLogoutAuthorizeResponse.logout_urlCreateAuthkitOAuthResourceAuthkitOAuthResourceUserManagementAuthkitOAuthResourcesDeviceAuthorizationResponse.verification_uri_completeVerifyEmailAddress.codeConfirmEmailChange.codeMagicAuth.codeUserInvite.accept_invitation_urlEmailVerification.codePasswordReset.password_reset_urlAuthenticateResponse.authkit_authorization_codeDeviceAuthorizationResponse.device_codeDeviceAuthorizationResponse.user_codeAuthorizationCodeSessionAuthenticateRequest.codeAuthorizationCodeSessionAuthenticateRequest.code_verifierMagicAuthCodeSessionAuthenticateRequest.codeEmailVerificationCodeSessionAuthenticateRequest.codeMfaTotpSessionAuthenticateRequest.codeRadarEmailChallengeCodeSessionAuthenticateRequest.codeRadarSmsChallengeCodeSessionAuthenticateRequest.codeDeviceCodeSessionAuthenticateRequest.device_codeInvitation.accept_invitation_urlMagicAuthSendMagicAuthCodeAndReturnResponse.codeRadarChallenge.codeCreateObjectRequest.valueVaultObject.valueUpdateObjectRequest.valueFixes
userland_user from CreateDataIntegrationOwnershipuserland_user from DataIntegrationOwnershipPOST /user_management/users/{user_id}/connected_accounts/{slug}PUT /data-integrations/{slug}/api-keyPUT /data-integrations/{slug}/client-credentialsPOST /data-integrations/{slug}/credentialsPOST /data-integrations/{provider}/tokenGET /user_management/users/{user_id}/connected_accounts/{slug}PUT /user_management/users/{user_id}/connected_accounts/{slug}DELETE /user_management/users/{user_id}/connected_accounts/{slug}DataIntegrationInstallation.user_id#732 fix(generated): regenerate from spec (1 change)
Features
POST /auth/factors/{id}/challengeconnection_owner to DataIntegrationsListResponseDataDataIntegrationsListResponseDataConnectionOwnerconnection_role to DataIntegrationsListResponseDataConnectedAccountaccount_identifier to DataIntegrationsListResponseDataConnectedAccountaccount_display_name to DataIntegrationsListResponseDataConnectedAccountDataIntegrationsListResponseDataConnectedAccountConnectionRoleconnection_role to DataIntegrationInstallationaccount_identifier to DataIntegrationInstallationaccount_display_name to DataIntegrationInstallationDataIntegrationInstallationConnectionRoleconnection_owner to DataIntegrationsGetDataIntegrationAuthorizeUrlRequestDataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwnerPipes: client.pipes.get_organization_connected_account, create_organization_connected_account, update_organization_connected_account, delete_organization_connected_account, list_organization_data_providersconnection_role to ConnectedAccountaccount_identifier to ConnectedAccountaccount_display_name to ConnectedAccountConnectedAccountConnectionRolepipes.account_connection.add_failed to CreateWebhookEndpointEventspipes.account_connection.connected to CreateWebhookEndpointEventspipes.account_connection.connection_failed to CreateWebhookEndpointEventspipes.account_connection.disconnected to CreateWebhookEndpointEventspipes.account_connection.reauthorization_needed to CreateWebhookEndpointEventspipes.account_connection.add_failed to UpdateWebhookEndpointEventspipes.account_connection.connected to UpdateWebhookEndpointEventspipes.account_connection.connection_failed to UpdateWebhookEndpointEventspipes.account_connection.disconnected to UpdateWebhookEndpointEventspipes.account_connection.reauthorization_needed to UpdateWebhookEndpointEventsFixes
POST /auth/factors/{id}/challenge#733 fix(generated): regenerate from spec (1 change)
Fixes
POST /auth/factors/{id}/challengeRemoved enum TokenBodyGrantType
#719 feat(generated)!: regenerate from spec (6 changes)
⚠️ Breaking
AgentsTokenBodyTokenBodyGrantTypeTokenQuerySSO.token.grant_typeFeatures
AgentBlueprintAgentInstanceAgentTokenAgentInstanceSessionAgentBlueprintInvocableByAgentBlueprintSessionSettingAgentBlueprintsCreateRequestAgentBlueprintsCreateRequestInvocableByAgentBlueprintsCreateRequestSessionSettingAgentBlueprintsUpdateRequestAgentBlueprintsUpdateRequestInvocableByAgentBlueprintsUpdateRequestSessionSettingAgentBlueprintsTokenMintTokenRequestAgentInstanceTypeAgentInstanceSessionStatusAgentBlueprintsTokenMintTokenRequestTypeAgentsBlueprintsAgentsBlueprintsTokensAgentsInstancesAgentsRegistrationsAgentsSessionsretention_period to UpdateAuditLogsRetentionUpdateAuditLogsRetention.retention_period_in_days optionalUpdateAuditLogsRetentionRetentionPeriodCreateItContactInviteItContactItContactItContactListItContactListListMetadataInviteItContactIntentsOrganizationsItContactsCreateTeamTeamTeamProductionStatePlatformTeamsTokenQueryTokenQueryGrantTypeCreateConnectionKeyPairCreateConnectionSAMLOptionsCreateConnectionOidcOptionsCreateConnectionStandardAttributesCreateConnectionAttributeMapsCreateConnectionPatchConnectionSAMLOptionsPatchConnectionOidcOptionsPatchConnectionStandardAttributesPatchConnectionAttributeMapsPatchConnectionCreateSAMLIdpSigningCertificateSAMLIdpSigningCertificateSAMLIdpSigningCertificateListSAMLSpEncryptionCertificateSAMLSpEncryptionCertificateListSAMLSpSigningCertificateCreateConnectionOidcOptionsIdTokenSignatureAlgorithmPatchConnectionOidcOptionsIdTokenSignatureAlgorithmPOST /connectionsGET /connections/{connectionId}/saml_idp_signing_certsPOST /connections/{connectionId}/saml_idp_signing_certsDELETE /connections/{connectionId}/saml_idp_signing_certs/{certificateId}GET /connections/{connectionId}/saml_sp_encryption_certsPOST /connections/{connectionId}/saml_sp_encryption_certsDELETE /connections/{connectionId}/saml_sp_encryption_certs/{certificateId}GET /connections/{connectionId}/saml_sp_signing_certPOST /connections/{connectionId}/saml_sp_signing_certDELETE /connections/{connectionId}/saml_sp_signing_cert/{certificateId}PATCH /connections/{id}TokenBodyTokenBodyGrantTypeSSOGrantTypeSSO.token.codeCreateConnectionOidcOptionsTokenAuthenticationMethodPatchConnectionOidcOptionsTokenAuthenticationMethodEmailCompletionSessionAuthenticateRequestCreateWaitlistEntryWaitlistWaitlistEntryWaitlistEntryStateUserManagementWaitlistsStateUserManagementWaitlistsagent.instance.created to CreateWebhookEndpointEventsagent.instance.deleted to CreateWebhookEndpointEventsagent.instance.session.created to CreateWebhookEndpointEventsagent.instance.session.revoked to CreateWebhookEndpointEventsagent.instance.created to UpdateWebhookEndpointEventsagent.instance.deleted to UpdateWebhookEndpointEventsagent.instance.session.created to UpdateWebhookEndpointEventsagent.instance.session.revoked to UpdateWebhookEndpointEventsagent.blueprint.created to CreateWebhookEndpointEventsagent.blueprint.deleted to CreateWebhookEndpointEventsagent.blueprint.updated to CreateWebhookEndpointEventsagent.blueprint.created to UpdateWebhookEndpointEventsagent.blueprint.deleted to UpdateWebhookEndpointEventsagent.blueprint.updated to UpdateWebhookEndpointEventsFixes
SSO.token from TokenBody to TokenQueryDiscordOAuth from ConnectionTypeGrokOAuth from ConnectionTypeXOAuth from ConnectionTypeDiscordOAuth from ProfileConnectionTypeGrokOAuth from ProfileConnectionTypeXOAuth from ProfileConnectionTypeDiscordOAuth from ConnectionsConnectionTypeGrokOAuth from ConnectionsConnectionTypeXOAuth from ConnectionsConnectionTypeSSO.token from TokenQuery to TokenBodyUserManagementAuthentication.authenticatePOST /user_management/authenticateDiscordOAuth from AuthenticateResponseAuthenticationMethodGrokOAuth from AuthenticateResponseAuthenticationMethodXOAuth from AuthenticateResponseAuthenticationMethodDiscordOAuth from UserIdentitiesGetItemProviderGrokOAuth from UserIdentitiesGetItemProviderXOAuth from UserIdentitiesGetItemProviderDELETE /user_management/users/{id}#722 fix(generated): regenerate from spec
Features
AgentBlueprintsCreateRequest.session_settings optionalAgentTokenValidationAgentBlueprintsTokenValidateTokenRequestPOST /agents/blueprints/{agent_blueprint_id}/tokens/validateChanged required status for parameter Events.list.events
#710 feat(generated)!: regenerate from spec (3 changes)
⚠️ Breaking
Events.list.eventsFeatures
Groups.list.searchclient_id to ConnectedAccountclient_secret_last_4 to ConnectedAccountconfig to ConnectedAccountclient_id to DataIntegrationsListResponseDataConnectedAccountclient_secret_last_4 to DataIntegrationsListResponseDataConnectedAccountconfig to DataIntegrationsListResponseDataConnectedAccountPOST /data-integrations/{slug}/credentialsCustomProviderDefinition.authorization_url optionalCustomProviderDefinition.token_url optionalDataIntegrationsUpsertClientCredentialsRequestclient_credentials to CreateDataIntegrationAuthMethodsPUT /data-integrations/{slug}/client-credentialsXOAuth to ConnectionTypeXOAuth to ProfileConnectionTypeXOAuth to ConnectionsConnectionTypeGrokOAuth to ConnectionTypeGrokOAuth to ProfileConnectionTypeGrokOAuth to ConnectionsConnectionTypeDELETE /user_management/users/{id}password_salt_position to CreateUserpassword_salt_position to UpdateUserRadarSmsChallengeCodeSessionAuthenticateRequest.verification_id optionalRadarSmsChallengeCodeSessionAuthenticateRequest.phone_number optionalCreateUserPasswordSaltPositionUpdateUserPasswordSaltPositionXOAuth to AuthenticateResponseAuthenticationMethodXOAuth to UserIdentitiesGetItemProviderGrokOAuth to AuthenticateResponseAuthenticationMethodGrokOAuth to UserIdentitiesGetItemProvideragent.registration.refreshed to CreateWebhookEndpointEventsagent.registration.refreshed to UpdateWebhookEndpointEventsFixes
DataIntegration.credentialsPOST /user_management/authenticatePOST /user_management/usersPUT /user_management/users/{id}bump cryptography to ~=50.0 for CVE-2026-69247
Added config to DataIntegrationsGetDataIntegrationAuthorizeUrlRequest
release 10.1.0 (1889026)
#702 feat(generated)!: regenerate from spec (2 changes)
Features
config to DataIntegrationsGetDataIntegrationAuthorizeUrlRequestclient_credentials to DataIntegrationAuthMethodsclient_credentials to DataIntegrationsListResponseDataAuthMethodsclient_credentials to DataIntegrationsListResponseDataConnectedAccountAuthMethodconfig to Pipes modelsclient_credentials to ConnectedAccountAuthMethodFixes
POST /user_management/invitationsPOST /user_management/invitations/{id}/resendPOST /user_management/magic_authPOST /user_management/authenticate#704 feat(generated)!: regenerate from spec (1 change)
Fixes
callback_endpoint from Connectionuser_management: honor client_id in PKCE authorization URL
Add NOT_GIVEN sentinel for nullable optional params
clarify Idempotency-Key is only honored on audit log event creation (#692) (15003c0)
#690 fix(generated): regenerate from spec
Features
expired to AuditLogExportState#695 feat(generated)!: regenerate from spec (9 changes)
Features
ClaimViewResponseClaimViewResponseOrganizationAgentAdminLinkClaimAttemptToExternalUserRequestAgentAdminLinkClaimAttemptToExternalUserRequestUserClaimViewResponseStatusPATCH /agents/claims/attemptsAgentRegistrationAgentCredentialValidationAgentRegistrationAgentIdentityAgentRegistrationClaimAgentAdminValidateCredentialRequestAgentRegistrationClaimClaimCompletionAgentRegistrationStatusAgentRegistrationKindAgentAdminValidateCredentialRequestTypeAgentsagent_registration_id to ApiKeyValidationResponseApplicationsRegistrationTypesApplications.list.registration_typesDirectoryUsers.list.idp_idDirectoryUsers.list.emailOrganizationAuthorizedConnectApplicationListOrganizationAuthorizedConnectApplicationListDataOrganizationAuthorizedConnectApplicationListListMetadataOrganizationsAuthorizedApplicationsDataIntegrationInstallationauth_methods to CreateDataIntegrationapi_key to CreateDataIntegrationapi_key to UpdateDataIntegrationauth_methods to DataIntegrationinstallation to DataIntegrationCreateDataIntegrationAuthMethodsDataIntegrationAuthMethodsDataIntegrationCredentialsResponseDataIntegrationCredentialsResponseCredentialDataIntegrationsUpsertApiKeyRequestDataIntegrationsVendCredentialsRequestDataIntegrationCredentialsResponseErrorPUT /data-integrations/{slug}/api-keyPOST /data-integrations/{slug}/credentialsSSO.authorize.promptssha256 to CreateUserPasswordHashTypessha256 to UpdateUserPasswordHashTypeGET /user_management/radar_challenges/{id}agent.registration.revoked to CreateWebhookEndpointEventsagent.registration.revoked to UpdateWebhookEndpointEventsagent.registration.deleted to CreateWebhookEndpointEventsagent.registration.deleted to UpdateWebhookEndpointEventsradar.challenge_created to CreateWebhookEndpointEventsradar.challenge_created to UpdateWebhookEndpointEventsagent.registration.expired to CreateWebhookEndpointEventsagent.registration.expired to UpdateWebhookEndpointEventsWidgetSessionToken.organization_id optional#698 feat(generated)!: regenerate from spec (5 changes)
⚠️ Breaking
[user_management](https://workos.com/docs/reference/authkit/user):
#687 fix(generated): regenerate from spec
Features
UserRoleAssignmentSourcesource to UserRoleAssignmentUserRoleAssignmentSourceTypeUserManagementAuthentication.authorize.max_ageGET /user_management/cors_originsGET /user_management/redirect_urisFixes
[pipes](https://workos.com/docs/reference/pipes):
#681 fix(generated): regenerate from spec
Features
DataIntegrationCredentialsResponseDataIntegrationCredentialsResponseCredentialDataIntegrationsUpsertApiKeyRequestDataIntegrationsVendCredentialsRequestDataIntegrationCredentialsResponseErrorPUT /data-integrations/{slug}/api-keyPOST /data-integrations/{slug}/credentials#683 fix(generated): regenerate from spec
⚠️ Breaking
SessionReauthenticatedSessionReauthenticatedDataSessionReauthenticatedDataImpersonatorSessionReauthenticatedDataAuthMethodSessionReauthenticatedDataStatusFeatures
agent.registration.created to CreateWebhookEndpointEventsagent.registration.claim.attempt.created to CreateWebhookEndpointEventsagent.registration.claim.completed to CreateWebhookEndpointEventsagent.registration.credential.issued to CreateWebhookEndpointEventsagent.registration.organization.switched to CreateWebhookEndpointEventsauthentication.reauthentication_succeeded to CreateWebhookEndpointEventsagent.registration.created to UpdateWebhookEndpointEventsagent.registration.claim.attempt.created to UpdateWebhookEndpointEventsagent.registration.claim.completed to UpdateWebhookEndpointEventsagent.registration.credential.issued to UpdateWebhookEndpointEventsagent.registration.organization.switched to UpdateWebhookEndpointEventsauthentication.reauthentication_succeeded to UpdateWebhookEndpointEventssession.reauthenticated to CreateWebhookEndpointEventssession.reauthenticated to UpdateWebhookEndpointEventspipes.connected_account.connection_failed to CreateWebhookEndpointEventspipes.connected_account.connection_failed to UpdateWebhookEndpointEventsUserRoleAssignmentSourcesource to UserRoleAssignmentUserRoleAssignmentSourceTypeUserManagementAuthentication.authorize.max_ageGET /user_management/cors_originsGET /user_management/redirect_urisAuditLogExportCreation.range_startAuditLogExportCreation.range_endexpired to AuditLogExportStateFixes
intent_options from GenerateLinksession.reauthenticated from CreateWebhookEndpointEventssession.reauthenticated from UpdateWebhookEndpointEvents#685 feat(generated): regenerate from spec (1 change)
Features
DataIntegrationCredentialsDtoCustomProviderDefinitionCreateDataIntegrationUpdateCustomProviderDefinitionUpdateDataIntegrationDataIntegrationDataIntegrationListDataIntegrationListListMetadataDataIntegrationCredentialDataIntegrationCustomProviderDataIntegrationCredentialsTypeCustomProviderDefinitionAuthenticateViaUpdateCustomProviderDefinitionAuthenticateViaDataIntegrationStateDataIntegrationCredentialTypeDataIntegrationCustomProviderAuthenticateViaGET /data-integrationsPOST /data-integrationsGET /data-integrations/{slug}PUT /data-integrations/{slug}DELETE /data-integrations/{slug}POST /user_management/users/{user_id}/connected_accounts/{slug}PUT /user_management/users/{user_id}/connected_accounts/{slug}#686 feat(generated)!: regenerate from spec (3 changes)
Features
SendRadarSmsChallengeSendRadarSmsChallengeResponseUrnWorkosOAuthGrantTypeRadarEmailChallengeCodeSessionAuthenticateRequestUrnWorkosOAuthGrantTypeRadarSmsChallengeCodeSessionAuthenticateRequestMagicAuthSendMagicAuthCodeAndReturnResponseUserCreateResponseip_address to CreateMagicCodeAndReturnuser_agent to CreateMagicCodeAndReturnradar_auth_attempt_id to CreateMagicCodeAndReturnsignals_id to CreateMagicCodeAndReturnip_address to CreateUseruser_agent to CreateUsersignals_id to CreateUsersignals_id to AuthorizationCodeSessionAuthenticateRequestsignals_id to PasswordSessionAuthenticateRequestradar_auth_attempt_id to PasswordSessionAuthenticateRequestradar_auth_attempt_id to UrnWorkosOAuthGrantTypeMagicAuthCodeSessionAuthenticateRequestPOST /user_management/radar_challengessignals_id to RadarStandaloneAssessRequestFixes
UserManagementAuthentication.authenticateUserManagementUsers.create from User to UserCreateResponseUserManagementMagicAuth.sendMagicAuthCodeAndReturn from MagicAuth to MagicAuthSendMagicAuthCodeAndReturnResponse[organization_membership](https://workos.com/docs/reference/authkit/organization-membership):
#676 fix(generated): regenerate from spec
Fixes
roles to organization membership modelsFix Session.refresh() KeyError by sealing session client-side
Fix Session.refresh() KeyError by sealing session client-side (#673) (6c7ccfd)
#670 feat(generated)!: regenerate from spec (12 changes)
⚠️ Breaking
UserManagementOrganizationMembership.listUserManagementInvitations.listFeatures
ReplaceGroupRoleAssignmentEntryReplaceGroupRoleAssignmentsDeleteGroupRoleAssignmentsByCriteriaPOST /authorization/groups/{group_id}/role_assignmentsPUT /authorization/groups/{group_id}/role_assignmentsDELETE /authorization/groups/{group_id}/role_assignmentsGET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}ClientApiTokenClientApiTokenResponseClientauth_method to ConnectedAccountapi_key_last_4 to ConnectedAccountConnectedAccountAuthMethodCreateGroupRoleAssignmentGroupRoleAssignmentGroupRoleAssignmentListGroupRoleAssignmentResourceUserOrganizationMembershipListUserOrganizationMembershipListListMetadataDataIntegrationCredentialsDataIntegrationConfigurationResponseDataIntegrationConfigurationListResponseConfigureDataIntegrationBodyauth_methods to DataIntegrationsListResponseDataauth_method to DataIntegrationsListResponseDataConnectedAccountapi_key_last_4 to DataIntegrationsListResponseDataConnectedAccountDataIntegrationCredentialsCredentialsTypeDataIntegrationsListResponseDataAuthMethodsDataIntegrationsListResponseDataConnectedAccountAuthMethodPipesProviderUserInviteListUserInviteListListMetadataAuthorizationCodeSessionAuthenticateRequest.client_secret optionalRefreshTokenSessionAuthenticateRequest.client_secret optionalwidgets:pipes:manage to WidgetSessionTokenScopesrenovate: explicitly enable minor and patch updates
#665 feat(generated)!: regenerate from spec (9 changes)
⚠️ Breaking
expires_at required in API key modelsDsyncDeactivatedDsyncDeactivatedDataDsyncDeactivatedDataDomainDsyncDeactivatedDataTypeDsyncDeactivatedDataStatedomain_sign_up_rate_limit from RadarStandaloneResponseControlreturn_to from RevokeSessionFeatures
ExpireApiKeyApiKeyUpdatedApiKeyUpdatedDataApiKeyUpdatedDataOwnerUserApiKeyUpdatedDataOwnerApiKeyUpdatedDataPreviousAttributePOST /api_keys/{id}/expireSnowflake to AuditLogConfigurationLogStreamTypename to UserObjectDsyncTokenCreatedDsyncTokenCreatedDataDsyncTokenRevokedDsyncTokenRevokedDataname to user management modelsapi_key.updated to CreateWebhookEndpointEventsapi_key.updated to UpdateWebhookEndpointEventsdeps: update dependency cryptography to v48
deps: update dependency cryptography to v48 (#659) (1ccc411)
#662 feat(generated)!: regenerate from spec (10 changes)
⚠️ Breaking
list_organization_memberships, create_organization_membership, get_organization_membership, update_organization_membership, delete_organization_membership, deactivate_organization_membership, and reactivate_organization_membership methods from UserManagement.RoleSingle and RoleMultiple dataclasses from UserManagement.OrganizationMembershipService.client.user_management_organization_membership_groups to client.organization_membership.OrganizationMembershipService with list_organization_memberships, create_organization_membership, get_organization_membership, update_organization_membership, delete_organization_membership, deactivate_organization_membership, reactivate_organization_membership, and list_organization_membership_groups methods.RoleSingle and RoleMultiple dataclasses to support role assignment.AsyncOrganizationMembershipService for async operations.workos.vault module (vault.py) has been replaced by a generated vault/_resource.py service. Method renames:
read_object → get_kvread_object_by_name → get_nameget_object_metadata → removed (no direct equivalent)list_objects → list_kvlist_object_versions → list_kv_versionscreate_object → create_kvupdate_object → update_kvdelete_object → delete_kvcreate_data_key(key_context=...) → create_data_key(context=...)decrypt_data_key → create_decryptDataKey, DataKeyPair, ObjectDigest, ObjectUpdateBy. Replaced by new generated models (CreateDataKeyResponse, DecryptResponse, ObjectMetadata, ObjectSummary, ObjectWithoutValue, VaultObject, etc.).create_rekey, list_kv_metadata.AsyncVault for async operations.encrypt/decrypt (AES-GCM) methods are preserved with the same signatures.ConnectApplication is now a discriminated union
ConnectApplication was a single dataclass; it is now a discriminated union dispatcher based on application_type.list_applications, create_application, get_application, update_application) now return ConnectApplicationVariant (a union of ConnectApplicationM2M, ConnectApplicationOAuth, or ConnectApplicationUnknown).isinstance(x, ConnectApplication) or accessing type-specific fields without checking the variant will need updating.device_fingerprint and bot_score optional parameters from Radar.create_attempt and AsyncRadar.create_attempt methods.RadarStandaloneAssessRequest model.RadarAction to RadarListAction and RadarType to RadarListType (affects add_list_entry and remove_list_entry method signatures).RadarStandaloneResponseBlocklistType is now a lazy re-export alias of RadarListType.credential_stuffing and ip_sign_up_rate_limit values from RadarStandaloneResponseControl enum.login, signup, sign_up, and sign_in values from RadarStandaloneAssessRequestAction enum; only sign-up and sign-in remain.search parameter from Authorization.list_resources and AsyncAuthorization.list_resources.resource_id, resource_external_id, resource_type_slug parameters to list_role_assignments method.role_slug parameter to list_role_assignments_for_resource_by_external_id and list_role_assignments_for_resource methods.expires_at optional field to CreateOrganizationApiKey model.expires_at optional field to CreateUserApiKey model.expires_at to organizational and user API key models (OrganizationApiKey, OrganizationApiKeyWithValue, UserApiKey, UserApiKeyWithValue).expires_at parameter to create_organization_api_key and create_user_api_key methods.AuditLogActionJson to AuditLogAction.AuditLogExportJson to AuditLogExport.AuditLogSchemaJson to AuditLogSchema.AuditLogSchemaJsonActor to AuditLogSchemaActorInput and AuditLogSchemaJsonTarget to AuditLogSchemaTargetInput.AuditLogSchemaInput model (used for schema creation payloads).AuditLogsRetentionJson to AuditLogsRetention.WebhookEndpointJson model to WebhookEndpoint.Features
Actor model representing the user or API key that performed an action.Error model for error response bodies.PipeConnectedAccount model with state enumeration.PipesConnectedAccountConnected, PipesConnectedAccountDisconnected, PipesConnectedAccountReauthorizationNeeded.AuditLogExportJsonState to AuditLogExportState.WebhookEndpointJsonStatus to WebhookEndpointStatus.UserManagementAuthenticationScreenHint to use RadarStandaloneAssessRequestAction type alias.Harden webhook, vault, session, and base client paths
api_keys: Restructure API key models for dual ownership
generated: Add Groups API and Waitlist User events support
list Slack as an auth provider for the authorization URL
export missing types and update event tests
restore typed EventSchema discriminated union dispatcher
do not JSON parse arbitrary bodies
add documentation on sealing sessions
forward Radar context from authenticate_with_code_pkce
### Bug Fixes * slight rename
regenerate methods to include missing params
v6 is a breaking release and now requires Python 3.10 or newer.
workos.client.portal has been renamed to client.admin_portal, and client.fga is not available in v6.See the V6 migration guide before upgrading from v5.
make vault events available in SDK
return organization_name on OrganizationMembership
Add Connect Applications and Client Secrets module
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →