Use WorkOS-authenticated user tokens with Char.
Ensure your token audience configuration matches what you enter in Char allowed audiences.
Enter issuer/domain settings and allowed audiences.
2) Get token from WorkOS auth layer
const idToken = await getWorkOSIdToken();
3) Connect
agent.connect({
publishableKey: "pk_live_...",
idToken,
});