---
title: "Workato MCP server for AI agents - actionlake"
description: "Give Claude 334 Workato actions through one MCP server: genies, recipes, data pipelines. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/workato
updated: 2026-10-23
---

Connectors · Data & integration

# Workato MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Workato and the rest of your systems. It gives your agent 334 Workato actions (136 reads, 148 writes and 50 that wait for a confirmation) and holds the Workato credential itself, so the agent never does. It paces Workato's limits and records every call.

[Connect Workato free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "workato.environment_roles.list",
  intent: "check which Workato account is connected"
}
# List environment roles · read · 1 upstream call
```

- 334 actions in one signed file
- 136 read look, never change
- 148 write create and update
- 50 wait for a yes destructive, confirmed first

Set up

## Connect Workato in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Workato.
   Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_token` Workato API client token
   - `region` Your Workato region
   ```
   account { op: "connections.requirements", service: "workato" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "workato.environment_roles.list" }
   # list environment roles · read · 1 upstream call
   check { action: "workato.iam_users.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Workato at a glance

**Sign-in**

Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_token`

**Setup fields**

`region`

**Limits we pace to**

60 calls a minute, per connection

**API covered**

Workato Developer API (docs.workato.com, fetched 2026-10-23), at your Workato instance's API base URL, which you enter when connecting

**Built from**

Workato's documentation, read 23 October 2026[docs.workato.com](https://docs.workato.com/en/workato-api/resources.md) [docs.workato.com](https://docs.workato.com/en/workato-api.md)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

114 of 136 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

6, so ask can line Workato up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Workato.

334 actions in 86 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **136** read look, never change
- **148** write create and update
- **50** destructive wait for a confirmation

1. ### Genies
   16
   3 read · 8 write · 5 destructive
   Create a genie · List genies · Assign a knowledge base to a genie · Assign a skill to a genie
2. ### Recipes
   15
   4 read · 10 write · 1 destructive
   List recipes belonging to a user · Create a recipe · Get recipe details · Update a recipe
3. ### Data pipelines
   14
   7 read · 6 write · 1 destructive
   Clone a data pipeline · Create a data pipeline · Get configuration schema · List data pipelines
4. ### MCP servers
   13
   3 read · 8 write · 2 destructive
   Create an MCP server · List MCP servers · Create a hashed token · Assign tools to an MCP server
5. ### Deployments
   9
   2 read · 7 write · 0 destructive
   List deployments · Get a deployment · Deploy an approved deployment · Approve a deployment
6. ### On prem agents
   8
   5 read · 2 write · 1 destructive
   Create on-prem agent · List on-prem agents · Search for on-prem agent by common name · Get on-prem agent details
7. ### API client API keys V2
   7
   1 read · 5 write · 1 destructive
   Create an API key · List API keys · Delete API key · Update an API key
8. ### IAM user groups
   7
   2 read · 3 write · 2 destructive
   List user groups · Create user group · Get user group by ID · Update user group

**78 more areas · 245 actions**

- IAM users **7**
- Members **7**
- Xchange versions **7**
- API access profiles **6**
- Connections **6**
- Custom connectors **6**
- Data tables **6**
- Developer API clients **6**
- Event stream topics **6**
- On prem groups **6**
- Xchange package versions **6**
- API clients V2 **5**
- API collections **5**
- Cross workspace grants **5**
- Custom oauth profiles **5**
- Environment roles **5**
- Export manifests **5**
- Folders **5**
- Genie clients **5**
- Knowledge bases **5**
- Lookup table rows **5**
- MCP server access assignments **5**
- Project grants **5**
- Project roles **5**
- Projects **5**
- User groups **5**
- Xchange package sharing links **5**
- API endpoints **4**
- IAM app links **4**
- Recipe jobs **4**
- Tags **4**
- Xchange distributions **4**
- Lookup tables **3**
- MCP server tools **3**
- Recipe versions **3**
- Roles **3**
- SDK **3**
- Skills **3**
- User group members **3**
- Xchange packages **3**
- API clients **2**
- API collection API endpoints **2**
- Cert bundles **2**
- Cross workspace incoming grants **2**
- Data pipeline runs **2**
- Environment properties **2**
- Genie conversations **2**
- Integrations **2**
- MCP server tokens **2**
- Packages **2**
- Project builds **2**
- Project properties **2**
- Roles migration **2**
- Static asset files **2**
- Activity logs **1**
- API portals **1**
- Cross workspace source environments **1**
- Cross workspace target environments **1**
- Data pipeline objects **1**
- Deployment eligible reviewers **1**
- Developer API client roles **1**
- Genie conversation events **1**
- Genie guardrail pii entities **1**
- Genie guardrail policies **1**
- IAM user group members **1**
- Jobs **1**
- Knowledge base data sources **1**
- Knowledge base recipes **1**
- MCP user groups **1**
- Member project grants **1**
- Recipe test cases **1**
- Secrets management **1**
- Tag assignments **1**
- Test case run requests **1**
- Test cases **1**
- User group project grants **1**
- Users **1**
- Xchange package consumers **1**

Top actions

## The Workato API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 54 of Workato's 56 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `workato.environment_roles.list` List environment roles | List environment roles. | read | `identity.role.list` 184 connectors |
| `workato.iam_users.list` List users | List users. | read | `identity.user.list` 474 connectors |
| `workato.iam_users.create` Create user | Create user. | write | `identity.user.create` 262 connectors |
| `workato.iam_user_groups.list` List user groups | List user groups. | read | `identity.group.list` 262 connectors |
| `workato.iam_user_groups.create` Create user group | Create user group. | write | `identity.group.create` 205 connectors |
| `workato.environment_roles.create` Create an environment role | Create an environment role. | write | `identity.role.create` 105 connectors |
| `workato.iam_users.delete` Delete user | Delete user. | destructive | `identity.user.delete` 253 connectors |
| `workato.projects.list` List projects | List projects. | read | `work.project.list` 109 connectors |
| `workato.users.me` Get details | Get details. | read | `identity.current_user.get` 307 connectors |
| `workato.iam_user_group_members.list` List group members | List group members. | read | `identity.group_member.list` 103 connectors |
| `workato.api_client_api_keys_v2.create` Create an API key | Create an API key. | write | `identity.api_key.create` 100 connectors |
| `workato.api_client_api_keys_v2.list` List API keys | List API keys. | read | `identity.api_key.list` 96 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Workato actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Give me a one-line status for every active Workato project.
   calls `workato.projects.list`
2. Write write
   Create user in Workato. Show me exactly what you will send before you save it.
   calls `workato.iam_users.create`

Governance for Workato

## Destructive actions wait for a yes.

50 Workato actions are destructive. The first 10:

- Delete user `workato.iam_users.delete`
- Delete user group `workato.iam_user_groups.delete`
- Delete an environment role `workato.environment_roles.delete`
- Delete API key `workato.api_client_api_keys_v2.delete`
- Delete a project `workato.projects.delete`
- Delete a recipe `workato.recipes.delete`
- Delete a connection `workato.connections.delete`
- Delete a folder `workato.folders.delete`
- Delete data table `workato.data_tables.delete`
- Delete a topic `workato.event_stream_topics.delete`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do workato.iam_users.delete confirm_policy: **human**

Delete user?

**intent:** the user asked me to delete user

run suspended · waiting for a named person · key _workato-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "workato-agent",
  allowed_actions: ["workato.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "workato.iam_users.delete", approver: "lead@example.com" },
    { match: "workato.iam_user_groups.delete", approver: "lead@example.com" },
    { match: "workato.environment_roles.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Workato only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Workato costs on actionlake.

Every Workato action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Workato refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 334 Workato actions
- 334 actions page each page of a long list is one call
- 114 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Workato action.

334 actions by area: the id your agent calls, what it does, and its effect.

**Genies 16**

- `workato.genies.assign_knowledge_bases` Assign a knowledge base to a genie write
- `workato.genies.assign_skills` Assign a skill to a genie write
- `workato.genies.assign_user_groups` Assign a user group to a genie write
- `workato.genies.attach_client` Attach a client to a genie write
- `workato.genies.create` Create a genie write
- `workato.genies.delete` Delete a genie destructive
- `workato.genies.detach_client` Detach a client from a genie destructive
- `workato.genies.get` Get a genie by ID read
- `workato.genies.get_guardrail` Get a genie guardrail read
- `workato.genies.list` List genies read
- `workato.genies.remove_knowledge_bases` Remove a knowledge base from a genie destructive
- `workato.genies.remove_skills` Remove a skill from a genie destructive
- `workato.genies.remove_user_groups` Remove a user group from a genie destructive
- `workato.genies.start` Start a genie write
- `workato.genies.stop` Stop a genie write
- `workato.genies.update` Update a genie write

**Recipes 15**

- `workato.recipes.analyze_health` Start analyzing recipe health write
- `workato.recipes.connect` Update a connection for a recipe write
- `workato.recipes.copy` Copy a recipe write
- `workato.recipes.create` Create a recipe write
- `workato.recipes.delete` Delete a recipe destructive
- `workato.recipes.force_run` Force an on-demand run of a recipe write
- `workato.recipes.get` Get recipe details read
- `workato.recipes.get_health` Get recipe health read
- `workato.recipes.get_job_counts` List recipe job counts read
- `workato.recipes.list` List recipes belonging to a user read
- `workato.recipes.poll_now` Activate a polling trigger for a recipe write
- `workato.recipes.reset_trigger` Reset recipe trigger write
- `workato.recipes.start` Start a recipe write
- `workato.recipes.stop` Stop a recipe write
- `workato.recipes.update` Update a recipe write

**Data pipelines 14**

- `workato.data_pipelines.clone` Clone a data pipeline write
- `workato.data_pipelines.create` Create a data pipeline write
- `workato.data_pipelines.delete` Delete a data pipeline destructive
- `workato.data_pipelines.get` Get a data pipeline read
- `workato.data_pipelines.get_configuration_schema` Get configuration schema read
- `workato.data_pipelines.list` List data pipelines read
- `workato.data_pipelines.list_destinations` List destination providers read
- `workato.data_pipelines.list_source_object_fields` List source object fields read
- `workato.data_pipelines.list_source_objects` List source objects read
- `workato.data_pipelines.list_sources` List source providers read
- `workato.data_pipelines.resync` Re-sync objects write
- `workato.data_pipelines.start` Start a data pipeline write
- `workato.data_pipelines.stop` Stop a data pipeline write
- `workato.data_pipelines.update` Update a data pipeline write

**MCP servers 13**

- `workato.mcp_servers.assign_tools` Assign tools to an MCP server write
- `workato.mcp_servers.assign_user_groups` Assign user groups to an MCP server write
- `workato.mcp_servers.create` Create an MCP server write
- `workato.mcp_servers.delete` Delete an MCP server destructive
- `workato.mcp_servers.get` Get MCP server details read
- `workato.mcp_servers.get_server_policies` Get server policy configuration read
- `workato.mcp_servers.list` List MCP servers read
- `workato.mcp_servers.remove_user_groups` Remove user groups from an MCP server destructive
- `workato.mcp_servers.token_renew` Renew MCP server authentication token write
- `workato.mcp_servers.tokens` Create a hashed token write
- `workato.mcp_servers.update` Update an MCP server write
- `workato.mcp_servers.update_folder` Move MCP server to a different folder write
- `workato.mcp_servers.update_server_policies` Update server policy configuration write

**Deployments 9**

- `workato.deployments.approve` Approve a deployment write
- `workato.deployments.assign_reviewers` Assign reviewers to a deployment write
- `workato.deployments.deploy` Deploy an approved deployment write
- `workato.deployments.get` Get a deployment read
- `workato.deployments.list` List deployments read
- `workato.deployments.reject` Reject a deployment write
- `workato.deployments.reopen` Re-open a deployment for review write
- `workato.deployments.submit_for_review` Submit a deployment for review write
- `workato.deployments.update_review_comment` Update a deployment review comment write

**On prem agents 8**

- `workato.on_prem_agents.create` Create on-prem agent write
- `workato.on_prem_agents.delete` Delete on-prem agent destructive
- `workato.on_prem_agents.get` Get on-prem agent details read
- `workato.on_prem_agents.get_activation_code` Get on-prem agent activation code read
- `workato.on_prem_agents.get_status` Get on-prem agent status read
- `workato.on_prem_agents.list` List on-prem agents read
- `workato.on_prem_agents.search` Search for on-prem agent by common name read
- `workato.on_prem_agents.update` Update on-prem agent write

**API client API keys V2 7**

- `workato.api_client_api_keys_v2.create` Create an API key write
- `workato.api_client_api_keys_v2.delete` Delete API key destructive
- `workato.api_client_api_keys_v2.disable` Disable API key write
- `workato.api_client_api_keys_v2.enable` Enable API key write
- `workato.api_client_api_keys_v2.list` List API keys read
- `workato.api_client_api_keys_v2.refresh_secret` Refresh API key secret write
- `workato.api_client_api_keys_v2.update` Update an API key write

**IAM user groups 7**

- `workato.iam_user_groups.add_users` Add users to group write
- `workato.iam_user_groups.create` Create user group write
- `workato.iam_user_groups.delete` Delete user group destructive
- `workato.iam_user_groups.get` Get user group by ID read
- `workato.iam_user_groups.list` List user groups read
- `workato.iam_user_groups.remove_users` Remove users from group destructive
- `workato.iam_user_groups.update` Update user group write

**IAM users 7**

- `workato.iam_users.add_to_group` Add user to group write
- `workato.iam_users.create` Create user write
- `workato.iam_users.delete` Delete user destructive
- `workato.iam_users.get` Get user by ID read
- `workato.iam_users.list` List users read
- `workato.iam_users.remove_from_group` Remove user from group destructive
- `workato.iam_users.update` Update user write

**Members 7**

- `workato.members.delete` Delete a collaborator destructive
- `workato.members.get` Get collaborator details read
- `workato.members.get_privileges` Get collaborator privileges read
- `workato.members.get_projects_privileges` Get collaborator project privileges read
- `workato.members.invite` Invite a collaborator write
- `workato.members.list` Get list of collaborators read
- `workato.members.update` Update collaborator roles write

**Xchange versions 7**

- `workato.xchange_versions.approve` Approve a package version write
- `workato.xchange_versions.get` Get a package version read
- `workato.xchange_versions.get_draft_status` Get version creation status read
- `workato.xchange_versions.reject` Reject a package version write
- `workato.xchange_versions.reset` Reset a version review write
- `workato.xchange_versions.update` Update a version's metadata write
- `workato.xchange_versions.update_review_comment` Update a review comment write

**API access profiles 6**

- `workato.api_access_profiles.create` Create an access profile write
- `workato.api_access_profiles.disable` Disable an access profile write
- `workato.api_access_profiles.enable` Enable an access profile write
- `workato.api_access_profiles.list` List access profiles read
- `workato.api_access_profiles.refresh_secret` Refresh token/secret write
- `workato.api_access_profiles.update` Update an access profile write

**Connections 6**

- `workato.connections.create` Create a connection write
- `workato.connections.delete` Delete a connection destructive
- `workato.connections.disconnect` Disconnect a connection write
- `workato.connections.get_pick_list` Get picklist values read
- `workato.connections.list` List connections read
- `workato.connections.update` Update a connection write

**Custom connectors 6**

- `workato.custom_connectors.create` Create custom connector write
- `workato.custom_connectors.get_code` Get custom connector code read
- `workato.custom_connectors.release` Release custom connector write
- `workato.custom_connectors.search` Search custom connector read
- `workato.custom_connectors.share` Share custom connector write
- `workato.custom_connectors.update` Update custom connector write

**Data tables 6**

- `workato.data_tables.create` Create data table write
- `workato.data_tables.delete` Delete data table destructive
- `workato.data_tables.get` Get data table by ID read
- `workato.data_tables.list` List data tables read
- `workato.data_tables.truncate` Truncate data table destructive
- `workato.data_tables.update` Update data table write

**Developer API clients 6**

- `workato.developer_api_clients.create` Create a Developer API client write
- `workato.developer_api_clients.delete` Delete a Developer API client destructive
- `workato.developer_api_clients.get` Get a Developer API client by ID read
- `workato.developer_api_clients.list` List Developer API clients read
- `workato.developer_api_clients.regenerate` Regenerate a Developer API Client token write
- `workato.developer_api_clients.update` Update a Developer API client write

**Event stream topics 6**

- `workato.event_stream_topics.create` Create a topic write
- `workato.event_stream_topics.delete` Delete a topic destructive
- `workato.event_stream_topics.get` Get topic by ID read
- `workato.event_stream_topics.list` List topics read
- `workato.event_stream_topics.purge` Purge a topic destructive
- `workato.event_stream_topics.update` Update a topic write

**On prem groups 6**

- `workato.on_prem_groups.create` Create on-prem group write
- `workato.on_prem_groups.delete` Delete on-prem group destructive
- `workato.on_prem_groups.get` Get on-prem group details read
- `workato.on_prem_groups.get_status` Get on-prem group status read
- `workato.on_prem_groups.list` List on-prem groups read
- `workato.on_prem_groups.update` Update on-prem group write

**Xchange package versions 6**

- `workato.xchange_package_versions.clear_shared_link_version` Clear the package's shared-link version destructive
- `workato.xchange_package_versions.get_export_url` Get a version .zip download URL read
- `workato.xchange_package_versions.list` List a package's versions read
- `workato.xchange_package_versions.publish` Publish a version write
- `workato.xchange_package_versions.set_shared_link_version` Set the package's shared-link version write
- `workato.xchange_package_versions.unpublish` Unpublish a version write

**API clients V2 5**

- `workato.api_clients_v2.create` Create an API client (v2) write
- `workato.api_clients_v2.delete` Delete API client destructive
- `workato.api_clients_v2.get` Get API client read
- `workato.api_clients_v2.list` List API clients (v2) read
- `workato.api_clients_v2.update` Update API client write

**API collections 5**

- `workato.api_collections.create` Create an API collection write
- `workato.api_collections.delete` Delete an API collection destructive
- `workato.api_collections.get_openapi` Get API collection OpenAPI specification read
- `workato.api_collections.list` List API collections read
- `workato.api_collections.update` Update an API collection write

**Cross workspace grants 5**

- `workato.cross_workspace_grants.create` Create a grant write
- `workato.cross_workspace_grants.delete` Revoke a grant destructive
- `workato.cross_workspace_grants.get` Get an outgoing grant read
- `workato.cross_workspace_grants.list` List outgoing grants read
- `workato.cross_workspace_grants.update` Update a grant write

**Custom oauth profiles 5**

- `workato.custom_oauth_profiles.create` Create a Custom OAuth profile write
- `workato.custom_oauth_profiles.delete` Delete a Custom OAuth profile destructive
- `workato.custom_oauth_profiles.get` Get Custom OAuth profile by ID read
- `workato.custom_oauth_profiles.list` List Custom OAuth profiles read
- `workato.custom_oauth_profiles.update` Update a Custom OAuth profile write

**Environment roles 5**

- `workato.environment_roles.create` Create an environment role write
- `workato.environment_roles.delete` Delete an environment role destructive
- `workato.environment_roles.get` Get environment role details read
- `workato.environment_roles.list` List environment roles read
- `workato.environment_roles.update` Update an environment role write

**Export manifests 5**

- `workato.export_manifests.create` Create an export manifest write
- `workato.export_manifests.delete` Delete an export manifest destructive
- `workato.export_manifests.get` View an export manifest read
- `workato.export_manifests.list_folder_assets` View assets in a folder read
- `workato.export_manifests.update` Update an export manifest write

**Folders 5**

- `workato.folders.create` Create a project or folder write
- `workato.folders.delete` Delete a folder destructive
- `workato.folders.get` Get a folder read
- `workato.folders.list` List folders read
- `workato.folders.update` Update a folder write

**Genie clients 5**

- `workato.genie_clients.create` Create a genie client write
- `workato.genie_clients.delete` Delete a genie client destructive
- `workato.genie_clients.list` List genie clients read
- `workato.genie_clients.regenerate` Regenerate a genie client key write
- `workato.genie_clients.update` Update a genie client write

**Knowledge bases 5**

- `workato.knowledge_bases.create` Create a knowledge base write
- `workato.knowledge_bases.delete` Delete a knowledge base destructive
- `workato.knowledge_bases.get` Get a knowledge base by ID read
- `workato.knowledge_bases.list` List knowledge bases read
- `workato.knowledge_bases.update` Update a knowledge base write

**Lookup table rows 5**

- `workato.lookup_table_rows.create` Add a row write
- `workato.lookup_table_rows.delete` Delete a row destructive
- `workato.lookup_table_rows.get` Get a row read
- `workato.lookup_table_rows.list` List rows read
- `workato.lookup_table_rows.update` Update a row write

**MCP server access assignments 5**

- `workato.mcp_server_access_assignments.create` Create an MCP access assignment write
- `workato.mcp_server_access_assignments.delete` Delete an MCP access assignment destructive
- `workato.mcp_server_access_assignments.get` Get an MCP access assignment read
- `workato.mcp_server_access_assignments.list` List MCP access assignments read
- `workato.mcp_server_access_assignments.update` Update an MCP access assignment write

**Project grants 5**

- `workato.project_grants.delete` Delete a project grant destructive
- `workato.project_grants.get` Get a project grant read
- `workato.project_grants.list` List project grants read
- `workato.project_grants.update` Update a project grant write
- `workato.project_grants.upsert` Add or update project grants write

**Project roles 5**

- `workato.project_roles.create` Create a project role write
- `workato.project_roles.delete` Delete a project role destructive
- `workato.project_roles.get` Get project role details read
- `workato.project_roles.list` List project roles read
- `workato.project_roles.update` Update a project role write

**Projects 5**

- `workato.projects.build` Build a project write
- `workato.projects.delete` Delete a project destructive
- `workato.projects.deploy` Deploy a project write
- `workato.projects.list` List projects read
- `workato.projects.update` Update a project write

**User groups 5**

- `workato.user_groups.create` Create a collaborator group write
- `workato.user_groups.delete` Delete a collaborator group destructive
- `workato.user_groups.get` Get collaborator group details read
- `workato.user_groups.list` List collaborator groups read
- `workato.user_groups.update` Update a collaborator group write

**Xchange package sharing links 5**

- `workato.xchange_package_sharing_links.activate` Activate a sharing link write
- `workato.xchange_package_sharing_links.create` Create sharing links write
- `workato.xchange_package_sharing_links.deactivate` Deactivate a sharing link write
- `workato.xchange_package_sharing_links.delete` Delete a sharing link destructive
- `workato.xchange_package_sharing_links.list` List sharing links read

**API endpoints 4**

- `workato.api_endpoints.disable` Disable an API endpoint write
- `workato.api_endpoints.enable` Enable an API endpoint write
- `workato.api_endpoints.get_openapi` Get API endpoint OpenAPI specification read
- `workato.api_endpoints.list` List API endpoints read

**IAM app links 4**

- `workato.iam_app_links.batch_delete` Delete app links destructive
- `workato.iam_app_links.create` Create app link write
- `workato.iam_app_links.delete` Delete app link destructive
- `workato.iam_app_links.list` List app links read

**Recipe jobs 4**

- `workato.recipe_jobs.cancel` Cancel jobs destructive
- `workato.recipe_jobs.get` Get a job read
- `workato.recipe_jobs.list` List jobs from a recipe read
- `workato.recipe_jobs.repeat` Repeat jobs write

**Tags 4**

- `workato.tags.create` Create a tag write
- `workato.tags.delete` Delete a tag destructive
- `workato.tags.list` List tags read
- `workato.tags.update` Update a tag write

**Xchange distributions 4**

- `workato.xchange_distributions.create` Create a distribution batch write
- `workato.xchange_distributions.get` Get a distribution batch by ID read
- `workato.xchange_distributions.list` List distribution batches read
- `workato.xchange_distributions.retry_failed` Retry failed distributions write

**Lookup tables 3**

- `workato.lookup_tables.batch_delete` Delete lookup tables in batch destructive
- `workato.lookup_tables.create` Create a new lookup table write
- `workato.lookup_tables.list` List lookup tables read

**MCP server tools 3**

- `workato.mcp_server_tools.delete` Delete a tool destructive
- `workato.mcp_server_tools.list` List tools for an MCP server read
- `workato.mcp_server_tools.update` Update tool description write

**Recipe versions 3**

- `workato.recipe_versions.get` Get a specific recipe version read
- `workato.recipe_versions.list` Get recipe versions read
- `workato.recipe_versions.update` Update a recipe version comment write

**Roles 3**

- `workato.roles.copy` Copy a custom role write
- `workato.roles.list` List custom roles read
- `workato.roles.update` Update a custom role write

**SDK 3**

- `workato.sdk.generate_schema_from_csv` Generate schema from CSV read
- `workato.sdk.generate_schema_from_json` Generate schema from JSON read
- `workato.sdk.validate_code` Validate custom connector code read

**Skills 3**

- `workato.skills.create` Create a skill from an existing recipe write
- `workato.skills.get` Get a skill by ID read
- `workato.skills.list` List skills read

**User group members 3**

- `workato.user_group_members.add` Add members to a collaborator group write
- `workato.user_group_members.list` List collaborator group members read
- `workato.user_group_members.remove` Remove members from a collaborator group destructive

**Xchange packages 3**

- `workato.xchange_packages.get_installations` Get per-workspace installation report read
- `workato.xchange_packages.get_stats` Get package installation statistics read
- `workato.xchange_packages.list` List packages read

**API clients 2**

- `workato.api_clients.create` Create an API client write
- `workato.api_clients.list` List API clients read

**API collection API endpoints 2**

- `workato.api_collection_api_endpoints.create` Create an API endpoint write
- `workato.api_collection_api_endpoints.update` Update an API endpoint write

**Cert bundles 2**

- `workato.cert_bundles.delete` Delete a certificate bundle destructive
- `workato.cert_bundles.list` List certificate bundles read

**Cross workspace incoming grants 2**

- `workato.cross_workspace_incoming_grants.get` Get an incoming grant read
- `workato.cross_workspace_incoming_grants.list` List incoming grants read

**Data pipeline runs 2**

- `workato.data_pipeline_runs.get` Get a pipeline run read
- `workato.data_pipeline_runs.list` List pipeline runs read

**Environment properties 2**

- `workato.environment_properties.list` List properties by prefix read
- `workato.environment_properties.upsert` Upsert property write

**Genie conversations 2**

- `workato.genie_conversations.get` Get a conversation read
- `workato.genie_conversations.list` List conversations read

**Integrations 2**

- `workato.integrations.list` List connector metadata read
- `workato.integrations.list_all` List all platform connectors read

**MCP server tokens 2**

- `workato.mcp_server_tokens.delete` Delete a hashed token destructive
- `workato.mcp_server_tokens.refresh` Refresh a hashed token write

**Packages 2**

- `workato.packages.export` Export a package based on a manifest write
- `workato.packages.get` Get package by ID read

**Project builds 2**

- `workato.project_builds.deploy` Deploy a project build write
- `workato.project_builds.get` Get a project build read

**Project properties 2**

- `workato.project_properties.list` List project properties read
- `workato.project_properties.upsert` Upsert project properties write

**Roles migration 2**

- `workato.roles_migration.migrate_custom_role` Migrate a custom role write
- `workato.roles_migration.migrate_system_roles` Migrate system roles write

**Static asset files 2**

- `workato.static_asset_files.delete` Delete a resource destructive
- `workato.static_asset_files.list` List resources read

**Activity logs 1**

- `workato.activity_logs.list` Get activity audit log read

**API portals 1**

- `workato.api_portals.list` List API portals read

**Cross workspace source environments 1**

- `workato.cross_workspace_source_environments.list` List source environments read

**Cross workspace target environments 1**

- `workato.cross_workspace_target_environments.list` List target environments read

**Data pipeline objects 1**

- `workato.data_pipeline_objects.list` List pipeline objects read

**Deployment eligible reviewers 1**

- `workato.deployment_eligible_reviewers.list` List eligible reviewers for a deployment read

**Developer API client roles 1**

- `workato.developer_api_client_roles.list` List Developer API client roles read

**Genie conversation events 1**

- `workato.genie_conversation_events.list` List conversation events read

**Genie guardrail pii entities 1**

- `workato.genie_guardrail_pii_entities.list` List available PII entity types read

**Genie guardrail policies 1**

- `workato.genie_guardrail_policies.upsert` Create or update a policy write

**IAM user group members 1**

- `workato.iam_user_group_members.list` List group members read

**Jobs 1**

- `workato.jobs.resume` Resume a job write

**Knowledge base data sources 1**

- `workato.knowledge_base_data_sources.list` Get knowledge base data sources read

**Knowledge base recipes 1**

- `workato.knowledge_base_recipes.list` Get knowledge base recipes read

**MCP user groups 1**

- `workato.mcp_user_groups.list` List identity provider user groups read

**Member project grants 1**

- `workato.member_project_grants.list` List a collaborator's project grants read

**Recipe test cases 1**

- `workato.recipe_test_cases.list` Get test cases read

**Secrets management 1**

- `workato.secrets_management.clear_cache` Clear secrets management cache write

**Tag assignments 1**

- `workato.tag_assignments.update` Manage tag assignments write

**Test case run requests 1**

- `workato.test_case_run_requests.get` Get the current state of a test case run request read

**Test cases 1**

- `workato.test_cases.run` Run test cases write

**User group project grants 1**

- `workato.user_group_project_grants.list` List a collaborator group's project grants read

**Users 1**

- `workato.users.me` Get details read

**Xchange package consumers 1**

- `workato.xchange_package_consumers.list` List package consumers read

Questions

## The Workato MCP server, answered.

**Is there a Workato MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 334 Workato actions across genies, recipes, data pipelines and MCP servers, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Workato.

**What do I need to connect Workato?**

Workato API client token. Plus your region. The free call account { op: "connections.requirements", service: "workato" } lists exactly what to paste.

**Can an AI agent delete or change things in Workato?**

Only if its key allows it, and only with an explicit confirmation. 50 Workato actions are destructive, including delete user, delete user group and delete an environment role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Workato API limit?**

actionlake paces every call to the limits in the Workato service file: 60 calls a minute per connection. Repeated reads are answered from cache (114 Workato actions can be), which never reaches Workato.

**What does a Workato action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (334 Workato actions page). Cache hits, searches, dry runs and calls Workato refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Workato API does it cover?**

The Workato Developer API (docs.workato.com, fetched 2026-10-23) at your Workato instance's API base URL, which you enter when connecting. It is built from Workato's documentation as read on 23 October 2026. 334 actions in 86 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Workato data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Workato credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Workato

Shares the most action names with

- [Celigo integrator.io 31](https://actionlake.com/connectors/celigo-integrator-io)
- [n8n 23](https://actionlake.com/connectors/n8n)
- [Fivetran 17](https://actionlake.com/connectors/fivetran)
- [Starburst Galaxy 15](https://actionlake.com/connectors/starburst-galaxy)
- [Prefect Cloud 13](https://actionlake.com/connectors/prefect-cloud)
- [Apache Airflow 10](https://actionlake.com/connectors/apache-airflow)

Joins with, on shared entities

- [HaloPSA 4](https://actionlake.com/connectors/halopsa)
- [Octopus Deploy 4](https://actionlake.com/connectors/octopus-deploy)
- [LaunchDarkly 4](https://actionlake.com/connectors/launchdarkly)
- [Unleash 4](https://actionlake.com/connectors/unleash)
- [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users)
- [Fortinet FortiGate 3](https://actionlake.com/connectors/fortinet-fortigate)

Browse

- [All Data & integration connectors](https://actionlake.com/connectors/category/data-and-integration)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Workato; the name is the vendor's own. Counts are from the Workato service file, version 1.0.0.

## Give your agent Workato today.

[Connect Workato free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/workato
More: https://actionlake.com/llms.txt