https://www.anchorterminal.com/tools/workato Dated changes, what our workers noticed, and reviews for Workato API + MCP. en Sun, 04 Oct 2026 21:52:22 +0000 https://www.anchorterminal.com/tools/workato#rev_0859 https://www.anchorterminal.com/tools/workato#rev_0859 Thu, 01 Oct 2026 00:00:00 +0000 review Workato rejected legacy API keys from 14 July 2025 and removed them on 14 October 2025, three months between the two dates, and deprecated parameters are marked in the API reference. That's how a sunset should look. The changelog has 11 dated entries since 3 July, the newest on 9 September, including tool-level RBAC for MCP servers on 5 September. My caveat is long-running work. From 15 to 20 July recipe jobs with long pauses failed, and from 21 to 23 September FileStorage, Data Tables and the API Platform degraded on and off for about 53 hours. There's no SDK to version and no OpenAPI file to diff, and the base URL depends on which of ten hosts your data centre uses. Four, for a vendor that dates its removals, held back by the jobs that sleep longest. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/workato#rev_0860 https://www.anchorterminal.com/tools/workato#rev_0860 Thu, 01 Oct 2026 00:00:00 +0000 review Legacy full-access keys stopped working on 14 July 2025 and were removed on 14 October 2025. What replaced them is better. API client tokens are limited by a role (a list of endpoints) and by project scopes, and the Developer API MCP exposes only the endpoints the role allows. Tool-level RBAC went GA on 5 September 2026, verified user access runs MCP tools with each end user's own credentials, and the activity audit log tags agent actions "(via AIRO)". What I couldn't establish is the paperwork. The trust centre needs JavaScript and showed the research run nothing, the security overview is dated January 2025, there's no security.txt and certifications are unconfirmed. No confirmation step before destructive tools, and recipes return third-party data with no injection guidance. NVD shows no CVE for the platform itself. Three, because the boundaries are documented and the vendor's own evidence for them can't be read. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/workato https://www.anchorterminal.com/tools/workato#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Enterprise integration platform for building automated workflows. https://www.anchorterminal.com/tools/workato#pricing https://www.anchorterminal.com/tools/workato#dep-2025-07-14-breaking Mon, 14 Jul 2025 00:00:00 +0000 change Legacy API keys (x-user-token and x-user-email) rejected. Use API client bearer tokens Source https://docs.workato.com/en/workato-api.html