Mastra Studio 支持独立 SSO 登录
Mastra 发布博客宣布，Mastra Studio 现在支持“自带认证”（bring your own auth），团队可用自选的 SSO 提供商登录 Studio，已支持的包括 WorkOS、Okta、Auth0、Clerk 和 Google。此前 SSO 只能在服务端配置并由 Studio 继承，无法单独为 Studio 设置权限；现在可以把 server.auth 与 studio.auth 分开，让外部智能体用户访问服务端、团队成员访问 Studio。使用方式为设置 MASTRA_PLATFORM_STUDIO_AUTH=disabled 并配置 studio.auth，需要 @mastra/core 1.42.0 或更高版本；官方同时提示，若禁用平台登录却未配置 studio.auth 或 server.auth，Studio 将处于公开可访问状态。
该改动让团队能把 Studio 的访问权限与对外服务端身份验证分开管理，而在此之前 Studio 只能继承服务端的 SSO 配置。
You can now bring your own auth to Mastra Studio, letting your team sign in using a preferred SSO provider. Support includes WorkOS, Okta, Auth0, Clerk, and Google.
Often teams want to separate out auth for Mastra’s server vs Studio, where external users of the agent have access to the server, but team members have access to Studio. Now, you can do that easier.
Your browser does not support the video tag.
Previously, you could configure SSO on the server, and Studio would inherit it, but there was no separate SSO permissioning available for the Studio.
Set MASTRA_PLATFORM_STUDIO_AUTH=disabled to replace the default platform sign-in with your studio.auth provider. Disabling platform sign-in without configuring studio.auth or server.auth leaves Studio publicly accessible.
Auth matrix
How each combination of settings protects Studio on Mastra platform: