LoginSign Up
← Back to all sparks
W

Workato

DEVOPS
Velocity8.8

Workato adds per-tool RBAC to MCP servers, tightening agent blast radius for enterprise deployments

agent-platformenterprise-rbacmcpconnectorsagentic-automation
◆Current state
Workato has built a complete agentic automation platform — Genies (AI agents), Agent Studio (the dev environment), AIRO (the in-product AI assistant), and MCP server hosting — all integrated within its existing enterprise automation fabric. The last several weeks show the platform maturing past early access: Genies now run up to 30 minutes, connect to multiple chat interfaces simultaneously, and deploy to any surface via a headless API.
◆Where it's heading
Workato is moving from automation-as-workflow to automation-as-agent-runtime. Each release adds enterprise governance to the agent layer: feedback loops, evaluation frameworks, tool-level access controls. The bet is that enterprises will want one governed, auditable system for both traditional recipe automation and LLM-driven agents — and Workato is building the security and observability layer that makes that bet credible.
◆Prediction
The headless API and MCP RBAC move together suggest a partner and ISV distribution play: external products embedding Genie-powered automations with scoped, governed access. Expect the RBAC model to extend to recipes and connections next, creating a unified authorization surface across the full platform.

◆Recent moves

  1. 7d ago

    Undo/Redo — Now Available in the Recipe Editor

  2. 7d ago

    Event Streams — Large Payload Support

  3. 8d ago

    Native SOAP Services, Workato Resources & XML Streaming

  4. 11d ago

    Tool-Level RBAC for MCP Servers — Now Generally Available

    ⚡ SPARK

    Tool-level RBAC for MCP servers closes the biggest governance gap blocking enterprise deployments: multiple groups sharing one MCP server with different tool visibility. This is the enterprise security layer the agentic platform arc has been pointing toward.

  5. 12d ago

    Community Connectors: What’s new in August 2026

    August's connector class adds voice (Vapi), transcription (AssemblyAI), cloud browser automation (Airtop), and a half-dozen enterprise data sources — broadening the integration surface that Genies can operate over. Voice and browser control in particular extend Genies into the agentic web-and-phone stack.

  6. 14d ago

    Genies — Scale to Longer, More Ambitious Work

    Extending Genie run time to 30 minutes moves Genies from quick-response bots to agents capable of multi-step research and document generation — a necessary capability for the longer autonomous workflows the platform is being positioned to handle.