Workato

Genies act through skills, workflows the agent invokes to take action and respond to users, built on Workato's connector library. MCP server skills let a genie call custom and common provider MCP servers to reach external APIs and third party tools without building each integration. Here the genie consumes MCP as a client.

Sourcedocs.workato.com/en/agentic/skills/mcp-server-skills.mdread 2026-09-18

Deterministic recipes and autonomous genies are combined in one flow. The Assign task to genie action hands a task to a genie, the recipe job suspends while the genie works, and it resumes with the genie's response available to the next steps, for automated tasks with no user present. Workato documents chaining patterns for agent orchestration, and a Send business event action covers cases where a user must be reached.

Sourcedocs.workato.com/en/agentic/agent-studio/connectors/workato-genie-connector/actions/assign-task-to-genie.mdread 2026-09-18

Genies answer from knowledge bases the customer maintains. These hold persistent reference content such as policies, documentation and product information, returned with its metadata to ground the genie's behavior, and are fed from Workato GO data sources and from knowledge base recipes that sync content from connected apps. New material enters by syncing or adding it rather than by retraining.

Sourcedocs.workato.com/en/agentic/agent-studio/knowledge-bases/knowledge-bases.mdread 2026-09-18

A person can be put in front of a genie's actions. Business approvals let a builder attach an approval workflow to a skill, so a designated reviewer approves or rejects the action before the genie carries it out, and a Create approval request action raises approvals from recipes. Approvals sit at the skill, the point where the agent acts. Guardrails add per genie controls including prompt attack detection and harmful content filtering.

Sourcedocs.workato.com/en/agentic/agent-studio/business-approvals.mdread 2026-09-18

Workato documents ISO 27001, ISO 27701 and ISO 42001, SOC 1 Type II, SOC 2 Type II and SOC 3, PCI DSS v4.0.1 Level 1 as a service provider with an annual assessment, HIPAA with business associate agreements, IRAP, and NIST 800-171A r2 for controlled unclassified information.

On the agent layer, the customer facing controls are documented for the Headless API. An application authenticates either with an API key that asserts the end user's identity, or with OAuth 2.0 and PKCE so end users authenticate through Workato Identity delegated to the customer's own identity provider. That covers both compliance and access.

Sourcedocs.workato.com/en/security/security-compliance.mdread 2026-09-18

Every genie conversation is recorded and inspectable step by step. The Conversations page lists past threads with topic, participants, source and errors. Its Response details panel lists each action the genie took, including LLM calls, skills, knowledge base lookups, recipes and app calls, each expandable for detail to trace the root cause of errors. Conversation data is also available through the Developer API and real time audit log streaming to external systems. The behavior on the record is the agent's own.

Sourcedocs.workato.com/en/agentic/agent-studio/conversations.mdread 2026-09-18

Genies keep conversation history that grounds their responses within an interaction, and each test or chat session maintains its own conversation context. Workato calls knowledge bases the genie's memory, but that long term store is reference content the customer supplies, a knowledge store rather than a record of what the agent has learned or retained.

No agent memory layer that the genie writes and a user can review, edit, delete or scope by user, team or workspace is documented.

Sourcedocs.workato.com/en/agentic/agent-studio/knowledge-bases/knowledge-bases.mdread 2026-09-18

Enterprise customers choose the cloud region where Workato stores and processes their automation data, including recipes, connections, shared assets and job history, with data kept isolated to that region. Workato also documents a China data center and a Virtual Private Workato hosting edition. Self service tiers cannot choose a region, so the option belongs to enterprise editions.

Sourcedocs.workato.com/en/datacenter/datacenter-overview.mdread 2026-09-18

Workato ships Workato Genies, purpose built AI agents for specific business functions, each with ready made skills, knowledge bases and app integrations. They include License Genie for software license optimization, EDI Genie for EDI operations and IT Support Genie with a multi tier approval workflow. Each does its own job, so removing one leaves the others whole, and they serve as a starting point for custom genies built in Agent Studio.

Sourcedocs.workato.com/en/agentic/workato-genies.mdread 2026-09-18

Work reaches genies without a person asking. App Events let a genie act proactively by responding to triggers from external systems such as Salesforce or Zoom instead of waiting for a user to start a conversation, surfacing tasks to users at the right time. Event driven triggers are documented on the genie itself.

Sourcedocs.workato.com/en/agentic/agent-studio/app-events.mdread 2026-09-18

The builder chooses the model. Genies use Anthropic Claude by default and can be switched to OpenAI GPT, and Workato documents the supported model versions. It cautions that providers differ in how they call tools, so a switch should be retested. That is customer control of the model rather than vendor side routing.

Sourcedocs.workato.com/en/agentic/agent-studio/ai-model/ai-model.mdread 2026-09-18

Genies are callable from outside. The Headless API lets any application the customer builds talk to a genie directly over a REST API, with documented walkthroughs for chaining requests into a full conversation and for building a custom chat interface on top of it.

Sourcedocs.workato.com/en/agentic/agent-studio/chat-interface/headless-api.mdread 2026-09-18

Genies are tested before release in Test mode, a live, isolated environment where the builder chats with the genie and sets up frequently repeated scenarios, such as a set of authentication prompts, to test skill use and knowledge base retrieval against expected behavior. That lets a builder test with fixtures before production.

What it returns is the genie's responses to observe, not a score. No scored evaluation or pass rate that tracks output quality over time is documented.

Sourcedocs.workato.com/en/agentic/agent-studio/test-genie.mdread 2026-09-18

Workato's genies act through skills, recipes, connectors and MCP tools rather than by operating an interface. Workato does offer screen level robotic process automation as RPA by Workato, a solution built in partnership with Robotiq.ai. The bots and their processes are created and run in a Robotiq.ai account and documented on the partner's site, and Workato's connector starts jobs and reads their logs. That is a partner product sold beside the platform rather than a capability shipped with it, so Workato's own agent surface does not show how it copes when UI elements change.

Sourcedocs.workato.com/en/connectors/rpa-by-workato.mdread 2026-09-18