LoginSign Up
← Back to all sparks
W

Workato

DEVOPS
Velocity7.5

Workato just made itself the control plane for every MCP server in the building.

mcp-governanceagent-platformaccess-controlformula-layerdocument-processing
◆Current state
Three MCP capabilities reached general availability on the same day: a registry of every MCP server in an environment with owners and access, named per-user tokens replacing shared credentials, and tool annotations that let AI clients tell a read-only lookup from a destructive write. Around that launch, the formula layer gained data_table_query — multi-record returns, real comparison operators, explicit errors when match-count assumptions break — and document processing raised its ceilings to 50-page PDFs and 100-line tables.
◆Where it's heading
The agent story that ran through AIRO, the Genies, and IT Support Genie has reached its governance phase. Having agents act is settled; the open question was who may run which server, as whom, and with what approval — and this release answers all three at once. The token and annotation work in particular reads as a response to the approval-fatigue failure mode, where users click through every prompt because nothing distinguishes a lookup from a deletion.
◆Prediction
Expect the registry to become the enforcement point rather than just a catalog — policy on who can call which annotated tool, with the per-token audit trail as the evidence.

◆Recent moves

  1. 1d ago

    MCP Registry — Now Generally Available

    ⚡ SPARK

    The anchor of the three-part MCP launch: a governed repository of every MCP server in the environment, with owner and access visibility for humans and runtime authorization checks for agents. It moves Workato from building agent connectivity to administering it.

  2. 1d ago

    MCP Tool Annotation Support — Now Generally Available

    Tool annotations let builders mark destructive, read-only, idempotent, and open-world behavior so AI clients can auto-allow routine lookups and reserve prompts for writes and deletes. Editable display titles also decouple what a tool is called from the programmatic name clients already invoke.

  3. 1d ago

    New Formula Function: data_table_query

    data_table_query replaces equality-only lookups with real filter operators, multi-record returns, sorting, and record identity that flows into downstream update and delete steps. The most useful part is the least advertised: six modes that throw an explicit error when a match-count assumption is wrong instead of silently returning the first row.

  4. 1d ago

    Multi-Token Auth — Now Generally Available

    MCP servers gain multiple named tokens, each independently revocable, rotatable, and logged, so many users can act through one server without sharing a credential. It is the audit half of the same launch as the MCP Registry — attribution is what makes a shared agent surface defensible.

  5. 5d ago

    Platform Connectors – July 2026

    A monthly connector round-up that names categories — recruiting, finance, document management, collaboration — without naming a single connector or change. No signal beyond the cadence itself.

  6. 8d ago

    IDP Upgrade: Bigger Documents, Longer Tables, Sharper Extraction

    Document processing raises its limits substantially: 50-page PDFs instead of 15, 50MB files instead of 20MB, and 100-line tables extracted in one pass instead of 15. Existing recipes stay pinned to the version they were built on, so the accuracy gains require a manual migration.