Changelog

The data_table_query is a powerful upgrade to data_table_lookup — bringing multi-record returns, advanced filter operators, record identity, and built-in correctness guards, all directly in formula mode.

• Record Identity — Every match includes record_id, created_at, and updated_at, so query results flow straight into downstream Update, Delete, or relation steps.
• Real Filter Operators — $gt, $gte, $lt, $lte, $ne, $in, $starts_with, and $and combinations replace equality-only matching.
• Multiple Records — mode: 'all' or mode: 'some' returns every match as an array up to a configurable limit, instead of silently returning just the first row.
• Built-In Correctness Guards — Six mode options make the formula throw an explicit error when match-count assumptions are wrong, instead of quietly returning the wrong row.
• Sorting — order ranks results by any field so you can grab the most recent or highest-value match with one_first_optional.

Learn more about data_table_query formula.

MCP Registry is a governed repository of every MCP server in your environment — what exists, who owns it, and who can use it. Builders, admins, and AI agents all work from the same single source of truth.

• Governed Discovery — A searchable UI gives builders and admins full visibility into every MCP server, its owner, and who has access — eliminating word-of-mouth sprawl and duplicate server creation.
• Programmatic Access — AI agents can discover available tools and verify authorization at runtime by calling the registry directly.

Learn more about MCP Registry.

MCP servers support multiple named, individually-auditable tokens — so many users can act through one server without sharing credentials. Each token is independently revocable, rotatable, and logged.

• Per-User Attribution — Named tokens make it clear which user performed which actions, replacing the ambiguity of a single shared credential.
• Independent Rotation — Individual tokens can be rotated without disrupting any other users or applications on the same server.

Learn more in MCP Access Methods.

Builders can label and annotate MCP tools so AI clients can distinguish routine actions from sensitive ones — keeping approval prompts meaningful and reducing the "approve everything" reflex.

• Editable Tool Titles — Relabel a tool's display name without breaking clients already invoking it by its programmatic name.
• Behavior Hints — Set destructiveHint, readonlyHint, idempotentHint, and openWorldHint on each tool so AI clients know how a tool behaves, not just what it's called.
• Automated Control — Read-only tools can be set to always allow; write and delete actions still require explicit approval.
• Reduced Approval Fatigue — Routine lookups execute without interruption, so approval prompts surface only when they actually matter.

Learn more about Tool Annotations.

This month brings a wide set of enhancements and improvements across Platform Connectors, expanding capabilities and accelerating workflows across recruiting, finance, document management, and collaboration tools alike. Learn more here.

IDP handles larger, more complex documents — long contracts, financial reports, and purchase orders with extensive line items — with sharper extraction accuracy across the board.

• Larger Document Support — PDFs up to 50 pages (previously 15) and files up to 50MB (previously 20MB) are now supported, eliminating the need to split and reconcile documents in pieces.
• Longer Tables — Tables up to 100 line items (previously 15) are extracted in a single pass, with more complete line item capture and more accurate values.
• Backwards Compatible — Existing recipes stay on the version they were built with; new recipes get the latest model by default. Upgrades are manual for existing recipes.

Learn how to migrate your existing recipe to a new version in Workato Docs.

OPA 32.2 is a focused release with SAP fixes, database improvements, and security updates.

• SAP — quality_of_protection config property now accepts both integer and string values; fixed an IDoc parser issue introduced in v32.1 where IDocs with multiple top-level segments failed to parse.
• Database — NULL and empty strings are now distinct in CSV export and import; TIMESTAMP and DATETIME columns now conform to ISO 8601 formatting.
• Security — Updated libraries per OWASP scanner recommendations.

Learn more in OPA 32.2 release notes.

Two significant enhancements enhance Workato API Gateway's alignment with OIDC standards.

• Public API Endpoints — API collections can expose unauthenticated endpoints with no access profile or credentials required, enabling standards-compliant discovery documents like /.well-known/openid-configuration (OIDC) and /.well-known/smart-configuration (SMART on FHIR). A clear warning is shown when configuring public endpoints to prevent accidental exposure.
• Custom Claims and Scopes Validation — Access Profiles can be resolved through OIDC token claims with no IdP modification required, enabling enterprise customers with locked-down shared IdPs — PingFederate, Okta, Azure AD, ADFS — to integrate end-to-end without involving their IdP admin teams.
• Clients Tab Renamed to Applications — The API Keys tab under Clients is now called Applications, reflecting support for multiple credential types beyond API keys alone.

Learn more in API Platform.

AIRO is the multi-agent system for the entire solution lifecycle. Describe what you want and AIRO plans, builds, fixes, and answers your questions — all from a single conversation, inside the Workato UI or via the AIRO MCP from Claude, Cursor, and other AI clients.

• Architect & Build from Intent — Plans and builds across recipes, Genies, Skills, APIs, Recipe Functions, and MCP servers from a single description.
  
• Ask Anything — Q&A grounded in Workato docs and best practices: how-to guidance, explanations of existing recipes, and the latest releases.
• Troubleshoot — Reads job logs, diagnoses failures, explains what went wrong, and fixes it — without leaving the conversation.
• Knows Your World — Grounded in your workspace assets and company knowledge so it applies best practices and reuses what you already have.
• Enterprise Guardrails — Respects RBAC controls out of the box, with no additional configuration required.

Learn more about AIRO.

CSV Import for Data Tables is now available via the Dev API and Embed/OEM, extending the UI wizard shipped in May to programmatic, bulk loading.

• Bulk Import over the Dev API — Create a file upload link, push a CSV to file storage, and trigger a server-side import of thousands of records in a single async job.
• Append, Refresh, and Fresh-Load Modes — append adds rows to an existing table, truncate_table clears then loads, and assert_table_empty guards clean first-time loads.
• Configurable Parsing — Specify delimiter, quote character, encoding, and header handling when creating the upload link so the parser reads the file exactly as intended.
• Validated Column Mapping — Map CSV columns to table fields by index or label, with required-field coverage and type compatibility checked before the import runs.
• Embed/OEM Parity — Every import endpoint has a managed_users counterpart so Embed partners can run imports on behalf of their end customers.

Learn more about Data Tables.