Workiva MCP EAP#

Early Access Program (EAP)

Workiva MCP is in our Early Access Program (EAP). You can connect and build with it today, but the available tools, scopes, and configuration may change while it’s in EAP. Access and usage policies are subject to change when it moves out of EAP, and it isn’t yet covered by standard production support. We’re actively expanding it, and your feedback shapes what ships.

Workiva MCP connects your AI assistant or agent to content in your Workiva account through the Model Context Protocol. It reads documents, spreadsheets, Wdata, and GRC content as the signed-in user, under that user’s existing permissions.

Only need the API docs in your coding agent?

Use the API Documentation MCP. It needs no sign in and no admin setup.

Before you connect#

An Organization Security Admin enables Workiva MCP in the Admin console. Go to Organizations, select your organization, then Overview > Configuration > Model Context Protocol (MCP):

  1. Enable MCP for this organization. The organization switch is off by default.

  2. Choose user access. Allow all users, or only users with the Workiva MCP User role.

  3. Pick workspaces. Select the workspaces Workiva MCP can access.

For step-by-step admin and user setup, see Connecting the Workiva MCP to Claude. To join the program, see Welcome to the Workiva MCP Early Access Program.

Connecting to Workiva MCP#

Pick your MCP client and the region that hosts your Workiva account. You can connect to the full server or to an individual toolset. Authentication uses OAuth 2.0: when your client connects for the first time, a browser window opens so you can sign in to Workiva.

Run the following command to add the Workiva MCP server with all toolsets:

claude mcp add --transport http workiva https://mcp.app.wdesk.com/mcp

Or add a single toolset:

claude mcp add --transport http workiva-documents https://mcp.app.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.app.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.app.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.app.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.app.wdesk.com/x/wdata

Then start Claude Code and run /mcp to authenticate with your Workiva account.

Run the following command to add the Workiva MCP server with all toolsets:

claude mcp add --transport http workiva https://mcp.eu.wdesk.com/mcp

Or add a single toolset:

claude mcp add --transport http workiva-documents https://mcp.eu.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.eu.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.eu.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.eu.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.eu.wdesk.com/x/wdata

Then start Claude Code and run /mcp to authenticate with your Workiva account.

Run the following command to add the Workiva MCP server with all toolsets:

claude mcp add --transport http workiva https://mcp.apac.wdesk.com/mcp

Or add a single toolset:

claude mcp add --transport http workiva-documents https://mcp.apac.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.apac.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.apac.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.apac.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.apac.wdesk.com/x/wdata

Then start Claude Code and run /mcp to authenticate with your Workiva account.

Run the following command to add the Workiva MCP server with all toolsets:

claude mcp add --transport http workiva https://mcp.ca.wdesk.com/mcp

Or add a single toolset:

claude mcp add --transport http workiva-documents https://mcp.ca.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.ca.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.ca.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.ca.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.ca.wdesk.com/x/wdata

Then start Claude Code and run /mcp to authenticate with your Workiva account.

Run the following commands to add the Workiva MCP server with all toolsets and sign in:

codex mcp add workiva --url https://mcp.app.wdesk.com/mcp
codex mcp login workiva

Or add a single toolset:

codex mcp add workiva-documents --url https://mcp.app.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.app.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.app.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.app.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.app.wdesk.com/x/wdata

Alternatively, add the following to your ~/.codex/config.toml file:

[mcp_servers.workiva]
url = "https://mcp.app.wdesk.com/mcp"

Run the following commands to add the Workiva MCP server with all toolsets and sign in:

codex mcp add workiva --url https://mcp.eu.wdesk.com/mcp
codex mcp login workiva

Or add a single toolset:

codex mcp add workiva-documents --url https://mcp.eu.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.eu.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.eu.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.eu.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.eu.wdesk.com/x/wdata

Alternatively, add the following to your ~/.codex/config.toml file:

[mcp_servers.workiva]
url = "https://mcp.eu.wdesk.com/mcp"

Run the following commands to add the Workiva MCP server with all toolsets and sign in:

codex mcp add workiva --url https://mcp.apac.wdesk.com/mcp
codex mcp login workiva

Or add a single toolset:

codex mcp add workiva-documents --url https://mcp.apac.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.apac.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.apac.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.apac.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.apac.wdesk.com/x/wdata

Alternatively, add the following to your ~/.codex/config.toml file:

[mcp_servers.workiva]
url = "https://mcp.apac.wdesk.com/mcp"

Run the following commands to add the Workiva MCP server with all toolsets and sign in:

codex mcp add workiva --url https://mcp.ca.wdesk.com/mcp
codex mcp login workiva

Or add a single toolset:

codex mcp add workiva-documents --url https://mcp.ca.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.ca.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.ca.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.ca.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.ca.wdesk.com/x/wdata

Alternatively, add the following to your ~/.codex/config.toml file:

[mcp_servers.workiva]
url = "https://mcp.ca.wdesk.com/mcp"

MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.

Target

Server URL

All Workiva Tools

https://mcp.app.wdesk.com/mcp

Documents

https://mcp.app.wdesk.com/x/documents

Grc Graph Tools

https://mcp.app.wdesk.com/x/grc_graph_tools

Grc Tools

https://mcp.app.wdesk.com/x/grc_tools

Spreadsheets

https://mcp.app.wdesk.com/x/spreadsheets

Wdata

https://mcp.app.wdesk.com/x/wdata

MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.

Target

Server URL

All Workiva Tools

https://mcp.eu.wdesk.com/mcp

Documents

https://mcp.eu.wdesk.com/x/documents

Grc Graph Tools

https://mcp.eu.wdesk.com/x/grc_graph_tools

Grc Tools

https://mcp.eu.wdesk.com/x/grc_tools

Spreadsheets

https://mcp.eu.wdesk.com/x/spreadsheets

Wdata

https://mcp.eu.wdesk.com/x/wdata

MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.

Target

Server URL

All Workiva Tools

https://mcp.apac.wdesk.com/mcp

Documents

https://mcp.apac.wdesk.com/x/documents

Grc Graph Tools

https://mcp.apac.wdesk.com/x/grc_graph_tools

Grc Tools

https://mcp.apac.wdesk.com/x/grc_tools

Spreadsheets

https://mcp.apac.wdesk.com/x/spreadsheets

Wdata

https://mcp.apac.wdesk.com/x/wdata

MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.

Target

Server URL

All Workiva Tools

https://mcp.ca.wdesk.com/mcp

Documents

https://mcp.ca.wdesk.com/x/documents

Grc Graph Tools

https://mcp.ca.wdesk.com/x/grc_graph_tools

Grc Tools

https://mcp.ca.wdesk.com/x/grc_tools

Spreadsheets

https://mcp.ca.wdesk.com/x/spreadsheets

Wdata

https://mcp.ca.wdesk.com/x/wdata

Security and access#

The Workiva MCP server connects your AI agent to live Workiva data, so access is governed the same way the rest of the platform is.

  • Authenticated with OAuth 2.0. Your agent acts as you, never with broader access than your own account.

  • Scoped to your permissions. The server respects your existing Workiva permissions. An agent can only read what you can already read. It cannot see organizations, workspaces, or records you lack access to.

  • Workspace and organization bound. Access is limited to the organizations and workspaces available to your account and enabled for Workiva MCP.

  • Read and analyze. Tools do not edit, delete, publish, or file your content, or change permissions. Wdata can run saved or ad hoc SELECT queries to produce query results. Ad hoc execution also creates a temporary query.

  • Activity records. MCP records in your activity log identify the user and AI client. Resource details depend on the tool and event. Admins can export activities as CSV or retrieve them through the Activities API.

  • Regional residency. Connect to the base URL for your region. Your requests stay within that region.

For a full security review, ask your Workiva account team for the Workiva MCP Security Brief.

Available tools#

Documents

Tool

Description

get_cell_range

Read sparse cells for an A1 range from a direct document table reference.

get_chart

Get a chart’s type, formatting, and configuration (title, legend, axes, series styling).

get_floating_content

Get floating content (shapes, text boxes, images, charts, tables, lines) for a section.

get_footnotes

Get one or more footnotes from a document as an ordered page of rich-text paragraphs.

get_image

Get an image from a document so you can view it.

get_section

Get a section from a document’s outline.

list_document

List documents in a workspace, optionally filtered by name.

list_link

List links for a table (range links, destination and source links held in table cells), or rich text (destination links).

list_section

List the sections in a document’s outline.

resolve_destination_links

Resolves the corresponding source links for a batch of up to 100 destination links.

search_fulltext_document

Search the full text content of documents.

Grc Graph Tools

Tool

Description

grc_graph_data_types

List every vertex type known to this workspace’s graph structure.

grc_graph_get_form

Retrieve a hydrated form for a graph vertex, with current property values and edge data filled in.

grc_graph_get_form_definition

Retrieve the form definition (template/schema) for a vertex type.

grc_graph_get_form_list

List all form instances for a vertex type.

grc_graph_get_phase_type_statuses

Retrieve the set of possible statuses for test phases (e.g., not started, in testing, in review, complete).

grc_graph_get_prior_toc_metadata

Retrieve metadata from the prior testing period for a test of control.

grc_graph_get_report

Execute a report and return its row data.

grc_graph_get_reports

List all reports in the workspace as a folder tree.

grc_graph_get_reviews_and_logs

Retrieve reviews (approvals, rejections, assignments with reviewer and status) and a chronological activity log for a form.

grc_graph_get_sox_programs

List SOX audit programs for the current workspace.

grc_graph_get_test_form

Look up a single test of control by ID and retrieve its detailed form data, including the list of its test phases (with vertex IDs), attribute matrices, timing, form section IDs, and control information.

grc_graph_get_test_form_list

Retrieve a tabular summary of test forms, queryable by program_id or specific toc_ids.

grc_graph_get_test_forms_by_program_id

Retrieve all tests of control for an audit program and the program’s test form groups (vertexId, name, accessibility).

grc_graph_get_test_phase_form

Retrieve detailed form data for a single test phase (phase vertex IDs come from grc_graph_get_test_form), including attribute matrices, timing window, testing status (not started / in testing / returned / in review / review complete), supplemental files, and section form IDs.

grc_graph_get_test_phase_review_plan_items

Retrieve the review plan for a test phase: who reviews, in what role, their status, due date, and which review is currently active.

grc_graph_get_test_phase_review_plan_types

List all review plan type definitions (e.g., preparer, reviewer, approver).

grc_graph_get_test_phase_types

Retrieve test phase type definitions (e.g., design effectiveness, operating effectiveness) for an audit program or test of control.

grc_graph_get_test_steps

Get test steps and their attributes for a test phase.

Grc Tools

Tool

Description

grc_aggregate_controls

Aggregates controls in the current workspace by various dimensions — process, owner, significance, location, system, dimensionality type, and test/assessment aging.

grc_aggregate_process_risks

Aggregates process risks in the current workspace by dimension — process, sub-process, owner, and mitigating-control coverage.

grc_get_audit_area

Loads a single audit area by its ID with full details including area type, inherent and residual risk scores (a residual that is missing or has no score has not been calculated or set, or the methodology defines none; an unscored area returns no scores), owner, related process risks, last audited project, and current user permissions.

grc_get_business_response

Returns the business (management) response recorded on a remediation issue, including its survey answers, for one issue by ID.

grc_get_control

Loads a single control by its ID.

grc_get_flowchart_data

Retrieves a single flowchart by ID with its full contents: all diagram cells (types, positions, connections, styling) plus the associated processes, sub-processes, and embedded controls and process risks.

grc_get_governance_workspace_settings

Loads the governance workspace settings: whether multi-instance controls (MIC) are enabled, and who is emailed when a control suggestion is submitted.

grc_get_issue

Loads a single remediation issue by its ID with full details including findings, sources (workpaper, audit project, assessment, or CPM task), associated controls/processes, custom fields, and resolution metadata.

grc_get_policy

Loads a single policy by its ID, including its latest document and sections.

grc_get_process

Loads a single process by its ID with full details including associated sub-processes, controls, risks, flowchart, and narrative.

grc_get_process_risks_by_ids

Loads multiple process risks by their IDs in a single call.

grc_get_sub_process

Loads a single sub-process by its ID with full details including parent process, controls, risks, flowchart, and narrative.

grc_list_analytics_views

Get the available GRC analytics views.

grc_list_audit_area_types

Lists all audit area types defined in the current workspace.

grc_list_audit_areas

Lists audit areas in the current workspace with filtering, search, and pagination.

grc_list_controls

Lists controls in the current workspace with filtering, search, and pagination.

grc_list_issue_actions

Lists the remediation actions (tasks) on an issue by ID, with pagination, including each action’s schedule and status.

grc_list_issues

Lists remediation issues in the current workspace with filtering and pagination.

grc_list_locations

Lists all locations defined in the current workspace with optional filtering and pagination.

grc_list_policies

Lists policies in the current workspace with filtering and pagination.

grc_list_process_risks

Lists process risks in the current workspace with filtering, search, and pagination.

grc_list_processes

Lists processes in the current workspace with filtering and pagination.

grc_list_sub_processes

Lists sub-processes in the current workspace with filtering and pagination.

grc_list_systems

Lists all systems defined in the current workspace with optional filtering and pagination.

grc_run_analytics_query

Execute an analytics query against a view discovered via grc_list_analytics_views and return rows of data.

grc_search_policy_sections

Searches policy document sections by semantic similarity to a natural-language query.

Spreadsheets

Tool

Description

get_cell_range

Read sparse cells for a sheet-local A1 range through the sheet’s backing table.

list_sheet

List the sheets (tabs) in a spreadsheet.

list_spreadsheet

List spreadsheets in a workspace, optionally filtered by name.

resolve_destination_links

Resolves the corresponding source links for a batch of up to 100 destination links.

Wdata

Tool

Description

download_query_result

Downloads a completed query result as CSV text.

get_query

Returns a saved query’s SQL text, parameters — including valid choices for select-mode parameters — and table dependencies.

get_query_result

Retrieves metadata for a query result.

get_table

Returns detailed schema for a single wdata table by ID, including all columns with their types and modes, plus description, table type, status, and timestamps.

list_table

Lists available wdata tables in a workspace.

run_query

Executes a query and returns immediately with a queryResultId and RUNNING status.

search_query

Searches saved queries in a workspace by matching a search term against query names.