September updates center on both extending and governing agent access to enterprise systems. MCP Proxy with OAuth and tool-level RBAC give administrators per-tool, per-user control over MCP servers, while new pre-built servers extend that reach into finance, HR, IT, sales, and marketing operations.
Beyond MCP servers, the UK Data Center reaches general availability, Workato Resources allows you to store file types as versioned, governed assets in your projects – including WSDL, XSD, and more – and MFT offers expanded transfer orchestration capabilities.
MCP Gateway
MCP Proxy with OAuth
MCP Proxy now supports OAuth, so both Workato-native as well as third-party MCP servers can be connected through Workato with per-user authorization, while Workato’s access controls and observability still apply.
Why this matters: Connecting vendor-hosted MCP servers often relies on OAuth, and upstream systems need to see the actual person behind each agent action – rather than a shared builder credential. Governance extends beyond Workato-hosted MCPs to cover third-partys, allowing observability no matter where your MCPs originate.
What you can do:
- Register a third-party MCP server once, with OAuth credentials configured at registration
- Apply Workato access controls and observability to proxied tool calls
- Keep existing token-based proxy servers running unchanged, since OAuth is additive
Tool-Level RBAC for MCP Servers
MCP Servers now support access control at the tool level. Admins grant access by end-user group, then scope exactly which tools each group can call on that server.
Why this matters: Most organizations have users that are only given a read-only set of permissions, while write or destructive actions are limited to the few roles that require them. Workato now allows you to customize MCP tool calls per role, without having to stand up duplicate servers for different audiences.
What you can do:
- Grant a group access to a server, then narrow that access to specific tool calls
- Expose a read-only toolset to one group, and the full toolset to another – all from the same server
- Limit what any agent can reach, since each agent only sees the tools its user group is allowed to call
New Pre-Built MCP Servers – Finance, HR, IT, Sales, and Operations
New pre-built MCP servers extend agent reach across procurement, HR, IT, sales, marketing, and productivity workflows. The servers are available from the AI Hub in your Workato workspace under MCP Servers.
Why this matters: Agents are only as useful as the systems they can act in. Pre-built servers package common workflows with access controls and audit trails already in place, so connecting an agent to a business system takes minutes, instead of a custom build.
Finance and Commerce
- Coupa: Check budget availability, create and submit requisitions, search catalog items, suppliers, and accounts, look up purchase orders and request changes or close them, and record receipts.
- Coupa Approval Operations: Find approvals waiting on you, pull their details, request more information, and approve, reject, or place an approval on hold.
Sales and Revenue Ops
- HubSpot CRM: Find, create, update, and archive contacts, companies, deals, and tickets, manage associations between records, log and review notes, calls, emails, meetings, and tasks, and look up owners, pipelines, and properties for accurate writes.
- Post-Meeting Actions: Find the right record after a call, pull the Gong or Zoom transcript, generate a meeting summary, write it to Salesforce, and draft or send the follow-up email through Gmail or Outlook.
Productivity and Collaboration
- Asana Work Management: Create, update, and search tasks, review your own task list and comment history, post comments and project status updates, and create and inspect projects, including sections and custom fields.
Product and Engineering
- Google BigQuery: Explore projects, datasets, and tables, inspect schemas, create or delete datasets and tables, insert rows, and run SQL queries in natural language.
IT and Operations
- IT Support Ticket Lifecycle: Search Confluence for answers, create IT tickets with the right metadata resolved for you, add comments, list and review your own tickets, and close them.
HR and Workforce Ops
- BambooHR Self-Service: Look up coworkers in the company directory, retrieve and update your own profile, check time-off balances, and submit and review time-off requests. Assigned approvers can respond to requests waiting on them.
- Employee Offboarding: Find an employee, run their offboarding from one request, check its status, retry failed steps, cancel it, and list offboardings by state.
Process MCP Servers
- Marketing Event Program Orchestration: Provision new event programs, including webinars, field events, live events, and trade shows, and import registrant and lead lists into Marketo.
- Vendor Onboarding: Turn one request to onboard a new supplier into a complete workflow: duplicate check, tax and insurance documents through DocuSign, banking collection through the Coupa Supplier Portal, Coupa approval routing, and vendor master creation in Coupa and NetSuite. Every write and outbound vendor communication requires explicit confirmation, and in-progress onboardings resume where they left off.
Data Orchestration
Event Streams – Large Payload Support
Event Streams now accepts messages up to 10MB, up from 512KB for recipes and 1MB for the API. The same limit applies to connector actions and triggers and to the public APIs.
Why this matters: Enterprise events often carry full ERP records and complete customer, employee, and order details, producing large payloads. Now larger payloads can move through Workato’s Event Streams directly, without the need to be split into chunks outside the platform.
What you can do:
- Publish messages up to 10MB from recipes, connector actions, and public APIs
- Consume messages in recipes in batches of up to 50MB total payload, where any remaining messages are returned in later batches so none are lost
- Remove the splitting and trimming steps that large records previously required
Managed File Transfer – Transfer Orchestration
Managed File Transfer introduces Transfer Orchestration, now in beta. It’s a purpose-built asset for moving files from a source to a destination reliably, visibly, and with scale.
Why this matters: Every enterprise moves files, including purchase orders from distributors, invoices to partners, and batch exports to legacy systems. That traffic no longer needs a separate MFT tool — it runs natively in Workato, with the same level of visibility as the rest of your business processes.
What you can do:
- Define a source and destination once, and let Workato handle the file exchanges reliably
- Set automatic retries with exponential backoff, and auto-stop after consecutive failures
- Run transfers on an interval or on cron schedules
- Processing actions integrated: Filter files by pattern, apply PGP encryption/decryption, and rename files without custom recipe logic
- Monitor each file transfer with file-level audit logs, plus configurable alerts for failures and successes
Platform
Workato Resources
Workato Resources lets you store WSDL, XSD, XSLT, and Code snippets (WEL, Py, Rb, JS) files as versioned, governed assets in your project folder.
Why this matters: Schemas, transformations, and scripts tend to get copied into recipes and connectors, then drift across environments. Resources give you one governed source of truth. For XML-heavy enterprises (SAP IDocs, EDI batches, legacy middleware), it also means no more pasting thousands of lines of XML into the UI.
What you can do:
- Keep one governed, versioned copy of each contract, transformation, or script
- Use multi-file schemas that resolve by relative path and promote across environments
- Reference resources from the XML connector for Transform (XSLT), Validate (XSD), and Generate from sample XML, which promotes reusability and governance and keeps the UI uncluttered
- XML Connector enhancement: Stream XML payloads up to 200MB
- XML Connector enhancement: Generate a working XML shape from a sample instead of XSDs only to build mappings when the schema is non-deterministic (e.g. anyType)
Native SOAP Services
Soap APIs can now be hosted natively on Workato from a WSDL Resource.
Why this matters: Many enterprises still run on SOAP and other XML-based services. Exposing them should not mean maintaining untouchable legacy endpoints.
What you can do:
- Host SOAP API endpoints from a WSDL the same way REST APIs are hosted today
- Manage your SOAP services alongside your REST APIs on one platform, instead of running separate legacy endpoints
Undo and Redo in the Recipe Editor
The recipe editor now supports Ctrl+Z to undo and Ctrl+Shift+Z to redo. Step additions and deletions, connection swaps, field-level changes, and changes made by AIRO can all go through one undo and redo stack.
Why this matters: Recipe building is exploratory. It’s common to try an approach, have a new idea, and backtrack. With undo now in the recipe editor, a mistake or revision just means a quick reversal, rather than manually rebuilding or restoring from an earlier version.
What you can do:
- Reverse a change instantly, with no reload or manual reversion
- Experiment confidently, knowing one keystroke restores the previous state
- Undo steps, connections, field values, and AIRO-made changes through the same shortcuts
Security & Operations
UK Data Center – Generally Available
Workato’s UK data center is now generally available, with in-country data residency and the full spectrum of Workato ONE capabilities from day one. The launch of our UK data center caters to the growing demand for AI transformation for our customers in regulated industries with strict data and compliance regulations.
Why this matters: Data residency is table stakes for UK enterprises seeking to securely host and govern their data orchestration and agentic efforts. With the new UK data center, we are expanding our EMEA presence, alongside our existing Frankfurt and Israel data centers.
What you can do:
- Process and store all customer data in the UK
- Run Workato GO, Agent Studio, Copilots, AIRO, and IDP by Workato in-region
- Use Enterprise MCP, Data Pipelines, and Decision Models in region
- Apply RLCM, On-prem Agent, RBAC, SAML SSO, EKM, External Secret Sources, and Data Masking from launch
Documentation
Ask AI on docs.workato.com
docs.workato.com now includes Ask AI, a semantic search layer powered by Algolia that answers questions asked in natural language. Results are language-correct for English and Japanese documentation.
Why this matters: Finding an answer in product documentation should not depend on knowing the exact keyword. When your wording differs from the help docs, you don’t have to worry about a dead end search stopping you from understanding the platform’s possibilities.
What you can do:
- Ask a question in plain language and get a relevant answer with supporting documentation
- Search in English or Japanese
Connectivity
For the full list of new connectors and enhancements this month, check out the community connector and platform connector posts in the Product Hub.