Back to Browse

Workday MCP Server

Business ToolsLow Risk10.0Local
Free

Read-only Workday for Claude — fetch tasks, pay, benefits via your signed-in session

About

Read-only Workday for Claude — fetch tasks, pay, benefits via your signed-in session

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (63/64 approved).

9 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Workday tenant slug, e.g. `acme` for https://wd5.myworkday.com/acme.Optional

Environment variable: WORKDAY_TENANT

Workday data-center host (default wd5.myworkday.com).Optional

Environment variable: WORKDAY_HOST

Override the fetchproxy WebSocket port (default 37149).Optional

Environment variable: WORKDAY_WS_PORT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-chrischall-workday-mcp": {
      "env": {
        "WORKDAY_HOST": "your-workday-host-here",
        "WORKDAY_TENANT": "your-workday-tenant-here",
        "WORKDAY_WS_PORT": "your-workday-ws-port-here"
      },
      "args": [
        "-y",
        "workday-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

workday-mcp

Read-only MCP server for Workday. Fetches your Workday tasks and data cards — pay, benefits, compensation — and returns them as structured JSON. Every request routes through your own signed-in *.myworkday.com tab via the fetchproxy browser extension, reusing your existing SSO-authenticated session.

⚠️ Workday gives employees no personal API. This server reads the same internal *.htmld endpoints the Workday web app calls, dispatched through your own signed-in browser tab. It is read-only and touches only your own data. Check your employer's acceptable-use policy. Use at your own discretion.

🤖 This project was developed and is maintained by AI (Claude Code).

Why a bridge instead of the official API?

The official Workday REST/SOAP API requires a tenant administrator to register an OAuth API client + Integration System User — an employee can't self-provision it. Tenants also sit behind corporate SSO (Ping/Okta/Entra) with MFA, so there's no server-side login. The only surface an employee can reach for their own data is their live browser session, which is what this server relays.

Install

See SKILL.md for full setup. In brief:

{
  "mcpServers": {
    "workday": {
      "command": "npx",
      "args": ["-y", "workday-mcp"],
      "env": { "WORKDAY_TENANT": "your-tenant-slug" }
    }
  }
}

Then install the fetchproxy extension and sign into Workday in your browser.

Tools

ToolWhat it does
workday_get_appsList your Workday apps with launchable task ids — the discovery entry point
workday_get_taskRead a Workday task/data card by task id or path → title, fields, references, related tasks, export links
workday_healthcheckVerify the bridge + session end-to-end with an actionable hint

Development

npm install
npm test          # vitest
npm run build     # tsc --noEmit + esbuild bundle → dist/bundle.js

The widget-tree parser (src/parse.ts) is the durable core; see docs/WORKDAY-API.md for the captured endpoint shapes and schema. License: MIT.

Reviews

No reviews yet

Be the first to review this server!