Workato MCP

What does a Workato MCP server do?

A Workato MCP server exposes tools to AI agents, and you choose where the tools come from: a prebuilt template, your recipes and API collections, or an outside MCP server. Workato lists more than 80 prebuilt servers, including HubSpot Marketing, Marketo Program Ops, Mailchimp Marketing Reports, Gong and ZoomInfo B2B Intelligence.

• Hosted servers: prebuilt or custom, built in AI Hub. Each has its own URL, and Workato recommends starting here.
• Developer API server: works on your workspace, such as folders, connections and tags, within your API client role.
• AIRO server: gives clients tools for recipes, skills, Genies, custom connectors, data tables and job history. AIRO is Workato's AI tool for building automations.
• Local server: @workato/mcp-server runs on your machine and connects your client to a Workato remote URL.
• Proxy: a Workato server can sit in front of an outside MCP server, and the MCP Registry lists servers across your organization.
• Workato recipes can also run with no assistant at all. MCP vs API vs Zapier covers when that fits better.

Is there an official Workato MCP server?

Yes. Workato hosts and documents its own servers, and Anthropic's directory lists a connector made by Workato. You create most servers yourself, inside a workspace. MCP is available in the US, EU, AU, JP, SG, IL, KR and UK data centers, and unavailable in CN.

• Workato's Enterprise MCP page names Claude Desktop, ChatGPT, Workato Genies and Cursor as supported agents.

What is the Workato MCP server URL, and how do you sign in?

Hosted servers each get a URL on their Details tab, in the form https://<server-id>.apim.mcp.workato.com. The Developer API server is https://app.workato.com/mcp, and the AIRO server is https://app.workato.com/airo_mcp in the US, with other hosts by data center. Hosted servers sign in by API token, Workato Identity or OIDC.

• Token access is the default, and the token can sit in the URL as wkt_token. Treat that URL like a password.
• Switching to Workato Identity or OIDC revokes the MCP token.
• With Workato Identity, owners and admins get no automatic access. Users need an end-user group.
• AIRO takes OAuth or an API token. Workato warns that API tokens have full workspace access, so use OAuth to limit a client.
• The Developer API server follows your API client role, so you can limit projects and endpoints in Workspace admin > API clients.

What can a Workato MCP server read and change?

That depends on the tools in each server. Mailchimp Marketing Reports only reads. HubSpot Marketing creates emails, forms, campaigns and lists. Marketo Program Ops can activate campaigns and enroll leads. Custom servers do what your recipes do, and tool annotations can mark a tool read-only or destructive.

What it can read

• Mailchimp Marketing Reports: list_campaigns, get_campaign_report and get_audience_health.
• HubSpot Marketing: get_marketing_email, get_campaign and search_lists.
• Marketo Program Ops: list_programs, get_program_performance and get_email_performance.
• Developer API server: folders, connections and recipe jobs, within your API client role.

What it can change

• HubSpot Marketing: create_marketing_email, create_campaign and manage_list_members.
• Marketo Program Ops: activate_trigger_campaign, schedule_batch_campaign and add_program_members.
• AIRO server: creates and edits recipes, Genies, data table schemas and MCP servers.
• Developer API server: moves folders and creates tags, among whatever else your role allows.

How do you set up a Workato MCP server in Claude, ChatGPT and Cursor?

Workato documents all three for servers you build. Create a server in AI Hub > Enterprise MCP > Custom servers, connect your apps and start the tools, then copy the Remote MCP URL and token into your client using Workato's steps. The AIRO server has its own steps, including Claude Code and Codex.

{
  "mcpServers": {
    "workato": {
      "url": "https://<server-id>.apim.mcp.workato.com?wkt_token=YOUR_API_TOKEN"
    }
  }
}

What can you ask a Workato MCP server?

These examples assume you've added the Mailchimp Marketing Reports, Marketo Program Ops and HubSpot Marketing prebuilt servers and started their tools. A client only reaches tools in your server. Keep first prompts on reporting tools. The HubSpot prompt creates a draft, so a person reviews it before anything goes out.

• Reads

  Show opens, clicks, bounces and unsubscribes for our last five sent Mailchimp campaigns.

  Copy

• Reads

  Show month-by-month growth for our main Mailchimp audience, plus recent signups and unsubscribes.

  Copy

• Reads

  List Marketo programs updated this month and show the performance metrics for each one.

  Copy

• Writes

  Create a draft HubSpot marketing email named November newsletter, using the subject line I give you. Don't send anything.

  Copy

• Writes

  Add these 10 leads to our Marketo webinar program. List them first and wait for my OK.

  Copy

What are the limits of a Workato MCP server?

Workato enforces no rate limits or usage quotas by default, and you can set your own per server under Settings > Limits. Fixed limits include 50 access tokens per server, a 30-second synchronous tool timeout and 300 seconds in total. Once a quota runs out, all requests are blocked until it resets.

• You must use the default Workato domain for MCP URLs. Custom API domains aren't supported.
• Logs record the user ID, request IP and tools called, under Tools > Logs in the Workato Logging Service.
• Verified user access, where each user acts with their own app login, needs Workato Identity and project assets as the tool source. API collections aren't supported.
• HubSpot Marketing depends on your HubSpot tier: forms, lists and events work on Free, while emails and campaigns need Marketing Hub Professional or above.

How much does a Workato MCP server cost?

Workato Free costs $0, includes Enterprise MCP and gives a one-time grant of 50,000 credits. Workato Pro runs from $75 to $1,275 a month for 2,500 to 50,000 credits. Enterprise pricing is custom, and Workato's pricing page shows no figures for it. Workato hasn't published how many credits an MCP call uses.

• Workato counts MCP use by the asset a call runs. Skills called over MCP bill as Tasks, and proxy calls count per successful request.
• Failed operations aren't counted, though those that finished before a job failed are.
• Unused Pro credits expire at the end of the billing month. Pro allows up to 3 users per workspace.
• Workato's usage page says some plans measure usage differently, so check your contract.

What are the alternatives to a Workato MCP server?

The main alternatives are another automation server, the app's own MCP server, or a fixed recipe with no assistant. Zapier MCP has a free plan and prices calls in tasks. n8n can run on your own server. MCP vs API vs Zapier explains when a fixed workflow fits better.

• Zapier MCP: Hosted, with actions in 9,000+ apps through one connection.
• n8n MCP: Workflows on an instance you can host yourself.
• HubSpot MCP: HubSpot's own server, if it's the only app you need.
• Snowflake MCP: Reporting, if your app data lands in a warehouse.

Which skill goes with a Workato MCP server?

Use the free Agent write safety skill before you add tools that write, because one server can create campaigns, enroll leads or change recipes. Use the Marketing context kit to write down your field names and definitions once, so every prompt starts from the same rules and the assistant has less to guess.

• Agent write safety: Sets approvals before an agent can change campaigns, leads or recipes.
• Marketing context kit: Holds your field names and definitions in one folder for every prompt.