# Agentic - FAQ
Get answers to frequently asked questions about Agentic features, including Agent Studio, Workato GO, and MCP.
# Getting started
How do Agent Studio, Workato GO, and MCP work together?
Agent Studio is where you build genies (AI agents) that can take actions across your business systems.
Workato GO provides a chat interface where users interact with genies, plus enterprise search across connected data sources.
MCP exposes your Workato integrations as tools that external AI applications, such as Claude, ChatGPT, and Cursor, can use.
Agent Studio, Workato GO, and MCP connect in several ways:
- Genies you build in Agent Studio can be deployed to Workato GO as their chat interface.
- Workato GO data sources (for example, Google Drive or Slack) can feed into genie knowledge bases.
- Skills you build for genies can be exposed as MCP tools for external AI clients.
- MCP servers let both genies and external AI clients use the same Workato integrations.
When should I use Workato genies vs. external AI clients with MCP?
Genies are AI agents hosted and managed by Workato. They handle conversation management, knowledge retrieval, and decision-making about which skills to use.
MCP servers expose your Workato capabilities as tools that external AI clients can use. The external AI client manages the conversation and decides when to call your Workato tools.
Use Workato genies when:
- You want Workato to host and manage the AI agent
- Your users interact through Slack, Microsoft Teams, or Workato GO
- You need built-in knowledge bases for company-specific context
- You need business approvals or app events that trigger proactive actions
Use external AI clients with MCP when:
- Your organization already uses Claude Desktop, ChatGPT, or Cursor
- You want these AI clients to access Workato capabilities as tools
- You're building custom AI applications that need Workato integrations
- You want AI coding assistants to use your business system integrations
You can use both approaches. Build skills once, then deploy them to genies or expose them through MCP to external AI clients. Genies can also consume MCP servers as additional tools. Learn more about MCP server skills.
# Agent Studio
# Overview
What is Agent Studio?
Agent Studio is where you build and configure AI agents (genies). These genies perform actions, call workflows, understand context, and execute pre-defined skills to achieve your defined goals.
What are genies?
Genies are AI-powered agents built in Agent Studio that pursue goals you define, adapt to context, and act across apps and data systems.
Genies operate through the following key components:
- AI model and job description combine to form the brain and instructions of the genie. These components use LLMs to interpret requests, analyze context, make decisions, generate responses, and define your genie's behavior, persona, and constraints. Genies use Anthropic Claude by default. You can switch your LLM to OpenAI GPT or your own LLM connection.
- Chat interface provides the user interface where users can converse with the genie. You can use Slack, Microsoft Teams, or Workato GO as your chat interface.
- Knowledge base stores company-specific information, conversation history, and metadata.
- Skills enable interaction with various applications and systems.
# Setup and access
Who can access Agent Studio and what are the prerequisites?
Genies are an Agentic feature available to customers on specific pricing plans. Genies are available in the US, EU, AU, SG, and JP data centers. Genie models are hosted in the US, EU, and APAC regions and respect data residency requirements where possible.
You must ensure that genies are enabled in your account before using this feature. Contact your Customer Success representative to enable genies if you don't see the genies option in your workspace or require additional information. Refer to your pricing plan and contract to learn more.
Can I enable Agent Studio for child workspaces independently?
No. Agent Studio becomes available to all child workspaces when it's enabled on an AHQ parent workspace. You can't enable Agent Studio for specific child workspaces without enabling the parent first.
You can use collaborator permissions to control which users can access Agent Studio in each workspace.
Where do I access and manage genies?
You can view and configure genies by going to AI Hub and clicking the Genies tab. Refer to Getting started with genies for more information.
What LLM models does Agent Studio support?
Agent Studio supports three LLM options for genies:
- Anthropic Claude (default)
- OpenAI GPT
- Use your own LLM connection (BYOLLM)
Note that the AI model can only be changed after you stop your genie.
What chat interfaces can be used with genies?
You can deploy genies to the following chat interfaces:
- Slack
- Microsoft Teams
- Workato GO
Note that you can't change the chat interface after a genie is created.
What file and image types can genies handle?
Genies support file and image uploads with the following limits:
Files:
- Maximum size: 25 MB per file
- Supported formats: PDF, DOC, CSV, TXT, MD
Images:
- Maximum size: 25 MB per file
- Supported formats: JPG, PNG
Users can upload files and images directly in the chat interface for genie analysis and processing.
How do I create a genie?
You can create a genie in two ways:
What are the required components to run a genie?
Configure the following components to get your genie working:
- Job description: Define your genie's role and goals.
- Chat interface: Choose where users interact with the genie. Options are Slack, Microsoft Teams, or Workato GO.
- AI model: Select the LLM that powers the genie. Options are Anthropic Claude, OpenAI GPT, or your own LLM connection.
- Knowledge base: Configure knowledge sources for your genie.
- Skills: Enable your genie to take actions.
Refer to Create a genie manually for a step-by-step walkthrough of creating all components together.
What metrics can I track for my genies?
The genie Overview page tracks:
- Total Conversations: Distinct conversations initiated each day
- Total End-User Messages: Message volume to gauge engagement
- Unique Users: Distinct users for measuring adoption
- Response Time: Average, median, and 90th percentile response times
- Conversation Volume: Conversations over time
- Skills Usage Heat Map: Skill execution frequency and success rates
You can filter metrics by time range.
Note: Genies using Workato GO can also track custom business KPIs. Refer to the Action Board section for more information.
# Knowledge bases
What is a knowledge base?
A knowledge base serves as the genie's memory and provides the following capabilities:
- Stores any data and information that is crucial as a contextual reference for the genie to perform its role.
- Can be updated in real-time to ensure the genie always has the most current information.
- Can access metadata to filter by attributes such as created date, source, or knowledge base ID.
How do I create a knowledge base?
Complete the following steps to create a knowledge base:
Go to AI Hub > Genies and create or edit a genie.
Add a knowledge base in the Knowledge bases section.
Choose your data source (Knowledge recipes or Workato GO data sources).
How do I add a knowledge base to a genie?
Complete the following steps to add a knowledge base to a genie:
Go to AI Hub > Genies and select your genie.
Locate the Knowledge bases section and click + Add.
Search for and select the knowledge base you plan to add.
The knowledge base must be in the same project as the genie.
Can a knowledge base be shared across multiple genies?
Yes. Knowledge bases can be shared across multiple genies within the same project. This allows you to reuse the same knowledge base across different genies without duplication.
What file formats are supported when ingesting documents through knowledge recipes?
The following file formats are supported when using the Store document in a knowledge base action in knowledge recipes:
- PDF (.pdf)
- Microsoft Word (.docx)
- Microsoft Excel (.xlsx)
- Microsoft PowerPoint (.pptx)
When should I use a knowledge base versus a database?
Use knowledge bases for semantic search over unstructured content, such as policies, guides, or descriptions. Use databases (accessed through skills) for exact lookups, counts, and filtered queries over structured data.
Refer to Knowledge bases and databases for more information.
Why isn't my genie finding information in structured data files?
Knowledge bases use semantic search, which struggles with structured formats like JSON or CSV. Raw structured data creates poor search results because semantic search can't effectively parse key-value pairs and repetitive field names.
Solution: Transform structured data into readable prose before adding it to knowledge bases. For example, convert:
- Raw:
{"ticket_id": "12345", "status": "open"} - Prose: "Support Ticket #12345 for Acme Corp - Login timeout issue (Status: Open)"
When to use knowledge bases vs. databases:
- Use knowledge bases for semantic search, such as finding similar issues or discovering patterns.
- Use databases accessed through skills for structured queries, such as counting, filtering, or exact lookups.
Refer to Prepare JSON and API application data for format examples.
Why does my genie return incomplete results for counting or listing questions?
Knowledge bases are designed for semantic search, not comprehensive queries. Each query returns only the 10 most relevant documents. This means that when you ask how many invoices are overdue?, your genie sees only 10 matches even if hundreds exist.
Solution: Use databases accessed through skills for counting, aggregations, or comprehensive lists. Databases query all matching records and return exact counts.
Refer to Knowledge bases versus databases for guidance on when to use each option.
Why isn't my genie finding information in my documents?
Knowledge bases split documents into 8,000-character chunks with no overlap. This means your genie may not find information if a chunk boundary splits mid-concept, or if key content is buried deep in a document.
Quick fixes:
- Structure documents with headings so chunks break at natural divisions rather than mid-paragraph.
- Front-load important information in the first 2,000 characters of documents.
- Keep related concepts together within 8,000-character sections.
Refer to Knowledge base document preparation for more information.
# Skills
What are skills?
Skills are tools that enable genies to take actions in your business systems. Skills can query data, create records, send messages, update tickets, or perform any action your Workato recipes can do.
Can skills be shared across multiple genies?
Yes. Skills can be shared across multiple genies within the same project. This allows you to reuse the same skills across different genies without duplication.
Can I publish skill recipes to the community library?
Yes. You can share skill recipes in the community library.
What's the maximum output size for genie skills?
Skills support a maximum 250 KB output. We recommend using a summary skill + detail skill pattern for queries returning large datasets:
- Summary skill: Returns key identifiers and essential fields only, such as IDs, titles, and status.
- Detail skill: Accepts a specific ID and retrieves full details for one record.
The genie presents the summary, then fetches full details only for records the user selects.
Refer to Design skills for databases for more information.
Why is my skill only returning one record instead of the full dataset?
You're likely using Text mode instead of Formula mode in the Return response to Genie action, or you're in Formula mode but selected individual fields instead of the Records datapill. Text mode returns only the last record from a collection.
Solution:
Open your skill recipe and locate the Return response to Genie action.
Switch to Formula mode.
Select the Records list datapill, not individual field datapills.
Test to verify all records return.
Refer to Text versus formula mode for more information.
Why does my genie make mistakes with simple math calculations?
LLMs generate text by predicting tokens, not by performing mathematical operations. LLMs can struggle with precise arithmetic, especially multi-step calculations or financial computations.
Solution: Give your genie access to a Python code execution skill that performs calculations accurately. The skill intercepts calculation requests and returns precise results.
When this is critical:
- Financial calculations (expense reports, budgets, invoices)
- Multi-step arithmetic (totals, aggregations, percentages)
- Any scenario requiring precise numerical results
Refer to Troubleshoot arithmetic errors for implementation steps and a pre-built skill template.
# Security and authentication
What security features are available in Agent Studio?
Agent Studio provides several security controls:
Access control:
- Use end-user groups to control who can use specific genies.
- Configure Verified User Access (VUA) so skills execute with individual user permissions.
Auditing:
- Genie logs track skill executions and user interactions.
- VUA-enabled skills show which user performed each action in audit trails.
Governance:
- Genies can only execute skills you explicitly add to them.
- Skills respect connected app permissions and access controls.
What is Verified User Access and when should I use it?
Verified User Access (VUA) allows genie skills to execute with each end user's own credentials, rather than the recipe builder's credentials. End users authenticate once when first using a VUA-enabled skill and can manage their connections using the !list_connections keyword in chat.
Connection types:
Skills support two approaches:
User's connection (individual credentials with VUA):
- Actions run with each end user's identity and permissions
- Provides user-level audit trails
- Respects individual access rights in connected apps
- Requires OAuth 2.0 connections only
Your connection (the builder's credentials):
- Actions run with the recipe builder's connection
- Works like standard Workato recipes
When to use VUA: Use individual credentials when you need user-level auditing, permission enforcement, or want to eliminate security risks of shared credentials. Use the builder's credentials when individual user permissions aren't required.
# Advanced features
What are app events and when should I use them?
App events enable genies to act proactively by responding to triggers from external systems (like Salesforce or Zoom) instead of waiting for users to start conversations.
For example, when a NetSuite access request is approved, an IT Genie can automatically process next steps without user input.
App events automate complex tasks, surface relevant work at the right time, and give genies context earlier in the process.
What is agent orchestration?
Agent orchestration enables genies to work autonomously within recipes. Recipes can assign tasks to genies without user input, and genies can delegate subtasks to other genies in the same project.
When a recipe uses the Assign task to genie action, the recipe job pauses while the genie processes the task autonomously, then resumes when the genie returns its response. This enables complex multi-agent workflows like compliance audits where one genie delegates evidence collection to another specialized genie.
What are the limitations of agent orchestration?
Agent orchestration has the following limitations:
- Genies using verified user access skills can't be used with the Assign task to genie action.
- Genies requiring Business approvals can't process autonomous tasks.
- Genies can only assign tasks to other genies within the same project.
# Troubleshooting
Why can't users access or interact with my genie?
Verify the following if users can't access your genie or the genie isn't responding:
- The genie is started: Check status in AI Hub > Genie.
- End user access is configured: Add user groups in AI Hub > Genie > End user access.
- Workato Identity accounts are activated: Users should receive an email invitation.
- The correct user group is assigned to the genie.
- Genie is properly connected to the chat interface.
This applies to genies in Slack, Microsoft Teams, and Workato GO.
Refer to Create a user group for step-by-step instructions.
# Workato GO
# Overview
What is Workato GO?
Workato GO is an end-user interface that unifies AI-driven workflows, knowledge searches, and transactional interactions within a single, cohesive interface. It eliminates the need to switch between disconnected tools, search systems, and workflows.
Key capabilities:
- Knowledge searches: Combines public resources and multiple third-party applications to find answers across internal data sources like Google Drive, Slack, Confluence, Salesforce, and more.
- Integrated chat: Users can interact with agents and Enterprise data through a single prompt-driven interface.
- Context-aware routing: Determines whether a query is best served by a genie, a search result, or both.
- Simplified task flow: Forms, approvals, and user confirmations are built into the interface to avoid switching between apps.
What types of knowledge can I search with Workato GO?
Workato GO provides two knowledge sources:
- World knowledge: Search across publicly available information
- Company knowledge: Search across your company's third-party apps and internal documentation
What data sources does Workato GO support?
Workato GO supports a broad range of data sources out-of-the-box, including Confluence, Salesforce, Slack, Google Drive, Jira, Gmail, Gong, and more. You can also add custom web crawler data sources to index internal documentation sites or public web pages.
# Setup and configuration
How do I configure a subdomain for Workato GO?
Complete the following steps to configure your subdomain:
Go to AI Hub > Workato GO > Subdomain.
Enter your subdomain. For example, acme-enhanced creates https://acme-enhanced.workato.ai.
Click Save.
Your subdomain must be 3-65 characters. A unique, randomly generated subdomain is provided by default if you don't customize it.
Can I customize the branding in Workato GO?
Yes, you can customize the company name and logo using organization properties:
Go to Admin > Advanced in Workato GO.
Click Add Organization Property.
Set the property:
- Company name: Use
ui.company_namewith your company name as the value - Logo: Use
ui.branding_logowith your logo URL as the value
Logo requirements: Public URL, transparent .png or .svg, 210x40px dimensions, under 200 KB.
How do I add administrators to Workato GO?
Complete the following steps to add administrators to Workato GO:
Go to AI Hub > Workato GO > Administrators.
Select users from the End users drop-down menu.
Click Save.
Administrators can manage data sources and view the activity log.
How do I change the theme in Workato GO?
Workato GO supports three themes: Light theme, Dark theme, and Sync with device, which matches your operating system settings.
You can change your theme by clicking your profile icon in the side navigation bar to open Preferences, then selecting your preferred theme.
Refer to Choose a theme for more information.
# Data sources
What are data sources?
Data sources enable Workato GO to connect to your business systems, such as Jira, Confluence, Salesforce, and Google Drive, for enterprise search and AI workflows. This ensures search results reflect your actual business context and genies can retrieve current data to complete tasks.
How do I add a data source to Workato GO?
Each data source has specific configuration requirements. You must have administrator privileges in Workato GO to add data sources.
Refer to the connector-specific documentation for setup instructions:
Custom web pages: You can also add custom web crawler data sources to index internal documentation sites or public web pages. Refer to Add a web crawler data source.
Can I limit which Google Drive files are indexed by Workato GO?
Yes, you can limit the Google Drive crawler scope to specific users' files:
Go to Admin > Advanced in Workato GO.
Click Add Organization Property.
Set google_drive.user_allowlist as the name and a comma-separated list of email addresses as the value.
This enables you to limit indexing to a pilot group, specific departments, or restrict access to sensitive content.
How does Workato GO handle permissions when ingesting data?
Workato GO respects native permissions from source systems:
- Documents private to specific users won't appear in searches for other users
- Folder-level security permissions are maintained (for example, Google Drive)
- You can restrict which users are crawled/indexed
- Permission-aware crawling ensures users only see content they have access to in the source system
# Action Board
What is Action Board?
Action Board displays customizable dashboards in Workato GO that visualize KPI metrics configured in Agent Studio. Action Board displays:
- Real-time KPI metrics for each genie using customizable thumbnails for charts, tables, or stacked metrics.
- Open action items in the right-side panel, including business events directed to you and approvals assigned to you.
- Genie widgets with defined roles and job descriptions that you can engage with conversationally.
Important: Action Board and the KPI tab are only available for genies that use Workato GO as the chat interface. Action Board doesn't support genies using Slack or Microsoft Teams.
What are the prerequisites for using Action Board?
To use Action Board, you must:
- Have a genie configured with Workato GO as the chat interface.
- Create at least one KPI for your genie.
- Configure at least one Action Board thumbnail to display metrics.
- Have the appropriate user group permissions to view Action Board thumbnails.
Learn more about Action Board.
How do KPIs work with Action Board?
KPIs (Key Performance Indicators) are quantifiable measurements of progress toward company goals. KPIs use data tables to store frequently used data that KPI skill recipes reference.
The workflow is:
- End user triggers a KPI skill recipe, for example,
New lead. - The genie skill recipe writes to the configured data table.
- Workato loads this information and combines it with configured tasks.
- KPI reports are generated and displayed in Action Board thumbnails.
Action Board supports four thumbnail types:
- Card format (default)
- Metric & chart
- Stacked metrics
- Detailed table
Each action board is limited to five thumbnails.
Learn more about creating KPIs.
# Troubleshooting
What should I do if real-time search or chat stops working?
This is typically caused by blocked or terminated Server-Sent Events (SSE) connections. SSE is a network-level issue, not a browser-specific problem.
Symptoms:
- Chat messages aren't updating in real-time
- Connection appears to close immediately
- No continuous event stream received
Diagnosis: You need to test the connection directly from the affected machine using browser Developer Tools and a curl command to determine whether the network blocks the SSE connection.
Resolution: If the connection closes immediately or doesn't stream events, contact your IT department. They should:
- Add your data center-specific domain to the allowlist (for example,
api-prod.matrix.workato.com) - Allow SSE/streaming connections to this endpoint
- Ensure proxy settings permit long-lived HTTP connections
- Verify firewall rules don't terminate persistent connections
Refer to Troubleshoot search and real-time chat issues for more information.
Why aren't my genies appearing in Workato GO?
Verify the following if genies aren't appearing in Workato GO after configuration:
- The genie is started (not just configured).
- Workato GO is selected as the chat interface when creating the genie.
- End user access is configured with the correct user groups in AI Hub > Genie > End user access.
- You've activated your Workato Identity account. Check your email for the invitation and activate your end user access.
- The genie is assigned to your user group.
If genies still don't appear after completing setup, verify you're accessing the correct Workato GO URL for your account, not a demo or dev environment.
# MCP
# Overview
What is MCP?
Model Context Protocol (MCP) is an open protocol that standardizes how AI models connect to external systems and data sources. MCP enables you to expose your Workato capabilities (API collections, API recipes, recipe functions, and skills) as tools that AI clients can use.
Key benefits of MCP include:
- Connects AI to external resources: Enables AI models to access external data and tools to improve versatility and capabilities
- Standardizes interactions: Provides a consistent way for AI models to communicate with different systems like Slack, Jira, or Google Drive
- Reduces development: MCP's standardization reduces the need for custom integrations for each new data source
What MCP capabilities does Workato provide?
Workato provides the following MCP capabilities:
- MCP servers: Enable you to provide Workato capabilities (API collections, recipe functions, API recipes, and skills) as tools to AI agents through remote, cloud-based MCP servers with unique, authenticated URLs.
- Verified User Access: Enables your MCP servers to use authenticated end-user credentials for external API calls instead of static tokens.
- Workato Developer API MCP: Enables AI-powered developer environments like Claude Desktop and Cursor to programmatically access your Workato workspace.
Which AI clients/LLMs are compatible with Workato MCP?
Workato MCP is compatible with:
- Claude (Anthropic)
- Cursor
- Windsurf
- ChatGPT
- Any MCP client that supports the Model Context Protocol standard
# Setup and access
Is MCP available in my region?
MCP is available in the US, EU, AU, SG, and JP data centers.
Contact your Customer Success representative if you're interested in using MCP or require additional information. Refer to your pricing plan and contract to learn more.
How do I create an MCP server in Workato?
You can create an MCP server through the MCP server wizard in AI Hub. The wizard walks you through:
- Choosing between API recipe collections or project assets, such as recipe functions, API recipes, and skills.
- Naming your server and optionally adding a logo and description.
- Reviewing selected tools before finalizing.
Refer to Create an MCP server for step-by-step instructions.
What types of assets can I add as tools to an MCP server?
You can select one of two tool source types when creating an MCP server:
API collection
Expose an entire API collection as MCP tools. This includes standard API recipe collections and AI gateway collections (API proxy collections). API collections don't support Verified User Access.
Project assets
Select individual assets from a project folder to expose as MCP tools:
- Recipe functions
- API recipes
- Skills
With project assets, you can mix multiple asset types in the same MCP server. All assets must be in the same project folder.
Learn more about MCP servers and Verified User Access.
How do I configure an AI client to use my MCP server?
Configuration steps vary by AI client:
What are the best practices for designing MCP tools?
Follow these key principles when designing MCP tools:
Tool design principles:
- Simple: Each tool performs exactly one specific action or retrieval
- Composable: Tools act as building blocks that work together seamlessly
- Predictable: Tools behave consistently and return standard errors
Data strategy:
- Return only necessary fields to preserve context windows
- Use AI preprocessing to summarize large datasets before returning to the agent
Developer experience:
- Write clear tool names and detailed descriptions
- Include sample requests and responses in tool documentation
- Use consistent naming conventions across all tools
- Implement standard HTTP status codes (200, 400, 404, 500)
Monitoring and refinement:
- Test tools with real AI workflows
- Monitor usage patterns and refine based on which tools are used most frequently
# Authentication and access control
What authentication methods does MCP support?
MCP supports two authentication methods:
Token-based authentication (default):
- Simple authentication with minimal configuration
- Tokens generated automatically and managed in MCP server settings
- Assigned by default to new MCP servers
OAuth 2.0 integration with Workato Identity:
- Required for Verified User Access (VUA)
- Provides centralized user access management
- Enables user-level audit trails and identity-aware authorization
Important: Switching from token-based authentication to Workato Identity revokes the MCP token, requiring all clients to be reconfigured for OAuth 2.0 authentication.
What is Verified User Access and when should I use it?
Verified User Access (VUA) enables end users to authenticate with their own credentials when interacting with MCP tools, bringing enterprise-grade governance and user-level security to AI workflows.
How it works:
- End users authenticate once when first accessing the MCP server
- Credentials are securely stored and reused across tools
- All tool calls respect individual user permissions
- Each action executes with the user's own identity and access rights
When to use VUA:
- You need user-level audit trails for compliance
- Tools access sensitive data requiring individual permissions
- You want to eliminate shared credentials for security
- Your organization requires identity-aware authorization
Requirements:
- MCP server must use Workato Identity (OAuth 2.0) authentication
- MCP server must use project assets as the tool source. API collections aren't supported.
- Selected tools must be recipe functions or skills
- Connected applications must support OAuth 2.0. API keys and basic auth don't work with VUA.
How do I enable Verified User Access for my MCP server?
Complete the following steps to use Verified User Access (VUA) with your MCP server:
Configure your MCP server to use Workato Identity authentication.
Create recipe functions or skills as your MCP tools.
Configure connections to use end-user connections.
This allows each user to interact with your MCP tools using their own credentials, ensuring actions are performed as the authenticated user rather than the builder's credentials.
# Limitations
Can I limit MCP server usage?
Yes. You can configure MCP server limits by going to your MCP server's Settings > Limits page:
- Rate limits (throttling): Control request speed to prevent traffic bursts with customizable time intervals. No rate limits are enforced by default. Requests are unlimited if left blank.
- Usage quotas (cumulative): Limit total consumption over time with aggregate request limits. No usage quotas are enforced by default. Consumption is unlimited if left blank.
- IP restrictions: Configure IP allowlists and blocklists to control which IP addresses can access your server. Blocked IPs take precedence over allowed IPs.
When rate limits or usage quotas are exceeded, all requests are blocked until the limit interval passes or the quota resets.
# Troubleshooting
Why can't I access my MCP server with Workato Identity?
MCP servers using Workato Identity (OAuth 2.0) authentication don't grant automatic access to any users. All users must be added to an end-user group to access MCP servers, including administrators.
Complete the following steps to grant access:
Create or select an end-user group in Workato Identity.
Add users to the group.
Add the group to your MCP server's User access tab.
You must have admin privileges to manage user groups. If using token-based authentication instead, you only need the MCP URL and token.
Refer to MCP authentication user groups for step-by-step instructions.
How can I track who is accessing my MCP server?
MCP server logs provide a unified usage and access overview for governance and tracking. Logs include:
- User ID: Who accessed the server
- Request IP address: Where the request came from
- Creation timestamp: When the access occurred
- Which tools/APIs were called: What actions were performed
You can access logs in AI Hub > MCP Servers. Select your server, go to Logs, and click View log.
Last updated: 2/2/2026, 10:18:15 PM