Workiva MCP EAP#
Early Access Program (EAP)
Workiva MCP is in our Early Access Program (EAP). You can connect and build with it today, but the available tools, scopes, and configuration may change while it’s in EAP. Access and usage policies are subject to change when it moves out of EAP, and it isn’t yet covered by standard production support. We’re actively expanding it, and your feedback shapes what ships.
Workiva MCP connects your AI assistant or agent to content in your Workiva account through the Model Context Protocol. It reads documents, spreadsheets, Wdata, and GRC content as the signed-in user, under that user’s existing permissions.
Only need the API docs in your coding agent?
Use the API Documentation MCP. It needs no sign in and no admin setup.
Before you connect#
An Organization Security Admin enables Workiva MCP in the Admin console. Go to Organizations, select your organization, then Overview > Configuration > Model Context Protocol (MCP):
Enable MCP for this organization. The organization switch is off by default.
Choose user access. Allow all users, or only users with the Workiva MCP User role.
Pick workspaces. Select the workspaces Workiva MCP can access.
For step-by-step admin and user setup, see Connecting the Workiva MCP to Claude. To join the program, see Welcome to the Workiva MCP Early Access Program.
Connecting to Workiva MCP#
Pick your MCP client and the region that hosts your Workiva account. You can connect to the full server or to an individual toolset. Authentication uses OAuth 2.0: when your client connects for the first time, a browser window opens so you can sign in to Workiva.
Run the following command to add the Workiva MCP server with all toolsets:
claude mcp add --transport http workiva https://mcp.app.wdesk.com/mcp
Or add a single toolset:
claude mcp add --transport http workiva-documents https://mcp.app.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.app.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.app.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.app.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.app.wdesk.com/x/wdata
Then start Claude Code and run /mcp to authenticate with your Workiva account.
Run the following command to add the Workiva MCP server with all toolsets:
claude mcp add --transport http workiva https://mcp.eu.wdesk.com/mcp
Or add a single toolset:
claude mcp add --transport http workiva-documents https://mcp.eu.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.eu.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.eu.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.eu.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.eu.wdesk.com/x/wdata
Then start Claude Code and run /mcp to authenticate with your Workiva account.
Run the following command to add the Workiva MCP server with all toolsets:
claude mcp add --transport http workiva https://mcp.apac.wdesk.com/mcp
Or add a single toolset:
claude mcp add --transport http workiva-documents https://mcp.apac.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.apac.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.apac.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.apac.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.apac.wdesk.com/x/wdata
Then start Claude Code and run /mcp to authenticate with your Workiva account.
Run the following command to add the Workiva MCP server with all toolsets:
claude mcp add --transport http workiva https://mcp.ca.wdesk.com/mcp
Or add a single toolset:
claude mcp add --transport http workiva-documents https://mcp.ca.wdesk.com/x/documents
claude mcp add --transport http workiva-grc-graph-tools https://mcp.ca.wdesk.com/x/grc_graph_tools
claude mcp add --transport http workiva-grc-tools https://mcp.ca.wdesk.com/x/grc_tools
claude mcp add --transport http workiva-spreadsheets https://mcp.ca.wdesk.com/x/spreadsheets
claude mcp add --transport http workiva-wdata https://mcp.ca.wdesk.com/x/wdata
Then start Claude Code and run /mcp to authenticate with your Workiva account.
Run the following commands to add the Workiva MCP server with all toolsets and sign in:
codex mcp add workiva --url https://mcp.app.wdesk.com/mcp
codex mcp login workiva
Or add a single toolset:
codex mcp add workiva-documents --url https://mcp.app.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.app.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.app.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.app.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.app.wdesk.com/x/wdata
Alternatively, add the following to your ~/.codex/config.toml file:
[mcp_servers.workiva]
url = "https://mcp.app.wdesk.com/mcp"
Run the following commands to add the Workiva MCP server with all toolsets and sign in:
codex mcp add workiva --url https://mcp.eu.wdesk.com/mcp
codex mcp login workiva
Or add a single toolset:
codex mcp add workiva-documents --url https://mcp.eu.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.eu.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.eu.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.eu.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.eu.wdesk.com/x/wdata
Alternatively, add the following to your ~/.codex/config.toml file:
[mcp_servers.workiva]
url = "https://mcp.eu.wdesk.com/mcp"
Run the following commands to add the Workiva MCP server with all toolsets and sign in:
codex mcp add workiva --url https://mcp.apac.wdesk.com/mcp
codex mcp login workiva
Or add a single toolset:
codex mcp add workiva-documents --url https://mcp.apac.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.apac.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.apac.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.apac.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.apac.wdesk.com/x/wdata
Alternatively, add the following to your ~/.codex/config.toml file:
[mcp_servers.workiva]
url = "https://mcp.apac.wdesk.com/mcp"
Run the following commands to add the Workiva MCP server with all toolsets and sign in:
codex mcp add workiva --url https://mcp.ca.wdesk.com/mcp
codex mcp login workiva
Or add a single toolset:
codex mcp add workiva-documents --url https://mcp.ca.wdesk.com/x/documents
codex mcp add workiva-grc-graph-tools --url https://mcp.ca.wdesk.com/x/grc_graph_tools
codex mcp add workiva-grc-tools --url https://mcp.ca.wdesk.com/x/grc_tools
codex mcp add workiva-spreadsheets --url https://mcp.ca.wdesk.com/x/spreadsheets
codex mcp add workiva-wdata --url https://mcp.ca.wdesk.com/x/wdata
Alternatively, add the following to your ~/.codex/config.toml file:
[mcp_servers.workiva]
url = "https://mcp.ca.wdesk.com/mcp"
MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.
Target |
Server URL |
|---|---|
All Workiva Tools |
|
Documents |
|
Grc Graph Tools |
|
Grc Tools |
|
Spreadsheets |
|
Wdata |
|
MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.
Target |
Server URL |
|---|---|
All Workiva Tools |
|
Documents |
|
Grc Graph Tools |
|
Grc Tools |
|
Spreadsheets |
|
Wdata |
|
MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.
Target |
Server URL |
|---|---|
All Workiva Tools |
|
Documents |
|
Grc Graph Tools |
|
Grc Tools |
|
Spreadsheets |
|
Wdata |
|
MCP is an open protocol supported by many clients. Configure your client with the server URL below and choose OAuth 2.0 as the authentication method. A browser window opens so you can sign in to Workiva.
Target |
Server URL |
|---|---|
All Workiva Tools |
|
Documents |
|
Grc Graph Tools |
|
Grc Tools |
|
Spreadsheets |
|
Wdata |
|
Security and access#
The Workiva MCP server connects your AI agent to live Workiva data, so access is governed the same way the rest of the platform is.
Authenticated with OAuth 2.0. Your agent acts as you, never with broader access than your own account.
Scoped to your permissions. The server respects your existing Workiva permissions. An agent can only read what you can already read. It cannot see organizations, workspaces, or records you lack access to.
Workspace and organization bound. Access is limited to the organizations and workspaces available to your account and enabled for Workiva MCP.
Read and analyze. Tools do not edit, delete, publish, or file your content, or change permissions. Wdata can run saved or ad hoc SELECT queries to produce query results. Ad hoc execution also creates a temporary query.
Activity records. MCP records in your activity log identify the user and AI client. Resource details depend on the tool and event. Admins can export activities as CSV or retrieve them through the Activities API.
Regional residency. Connect to the base URL for your region. Your requests stay within that region.
For a full security review, ask your Workiva account team for the Workiva MCP Security Brief.
Available tools#
Documents
Tool |
Description |
|---|---|
|
Read sparse cells for an A1 range from a direct document table reference. |
|
Get a chart’s type, formatting, and configuration (title, legend, axes, series styling). |
|
Get floating content (shapes, text boxes, images, charts, tables, lines) for a section. |
|
Get one or more footnotes from a document as an ordered page of rich-text paragraphs. |
|
Get an image from a document so you can view it. |
|
Get a section from a document’s outline. |
|
List documents in a workspace, optionally filtered by name. |
|
List links for a table (range links, destination and source links held in table cells), or rich text (destination links). |
|
List the sections in a document’s outline. |
|
Resolves the corresponding source links for a batch of up to 100 destination links. |
|
Search the full text content of documents. |
Grc Graph Tools
Tool |
Description |
|---|---|
|
List every vertex type known to this workspace’s graph structure. |
|
Retrieve a hydrated form for a graph vertex, with current property values and edge data filled in. |
|
Retrieve the form definition (template/schema) for a vertex type. |
|
List all form instances for a vertex type. |
|
Retrieve the set of possible statuses for test phases (e.g., not started, in testing, in review, complete). |
|
Retrieve metadata from the prior testing period for a test of control. |
|
Execute a report and return its row data. |
|
List all reports in the workspace as a folder tree. |
|
Retrieve reviews (approvals, rejections, assignments with reviewer and status) and a chronological activity log for a form. |
|
List SOX audit programs for the current workspace. |
|
Look up a single test of control by ID and retrieve its detailed form data, including the list of its test phases (with vertex IDs), attribute matrices, timing, form section IDs, and control information. |
|
Retrieve a tabular summary of test forms, queryable by program_id or specific toc_ids. |
|
Retrieve all tests of control for an audit program and the program’s test form groups (vertexId, name, accessibility). |
|
Retrieve detailed form data for a single test phase (phase vertex IDs come from grc_graph_get_test_form), including attribute matrices, timing window, testing status (not started / in testing / returned / in review / review complete), supplemental files, and section form IDs. |
|
Retrieve the review plan for a test phase: who reviews, in what role, their status, due date, and which review is currently active. |
|
List all review plan type definitions (e.g., preparer, reviewer, approver). |
|
Retrieve test phase type definitions (e.g., design effectiveness, operating effectiveness) for an audit program or test of control. |
|
Get test steps and their attributes for a test phase. |
Grc Tools
Tool |
Description |
|---|---|
|
Aggregates controls in the current workspace by various dimensions — process, owner, significance, location, system, dimensionality type, and test/assessment aging. |
|
Aggregates process risks in the current workspace by dimension — process, sub-process, owner, and mitigating-control coverage. |
|
Loads a single audit area by its ID with full details including area type, inherent and residual risk scores (a residual that is missing or has no score has not been calculated or set, or the methodology defines none; an unscored area returns no scores), owner, related process risks, last audited project, and current user permissions. |
|
Returns the business (management) response recorded on a remediation issue, including its survey answers, for one issue by ID. |
|
Loads a single control by its ID. |
|
Retrieves a single flowchart by ID with its full contents: all diagram cells (types, positions, connections, styling) plus the associated processes, sub-processes, and embedded controls and process risks. |
|
Loads the governance workspace settings: whether multi-instance controls (MIC) are enabled, and who is emailed when a control suggestion is submitted. |
|
Loads a single remediation issue by its ID with full details including findings, sources (workpaper, audit project, assessment, or CPM task), associated controls/processes, custom fields, and resolution metadata. |
|
Loads a single policy by its ID, including its latest document and sections. |
|
Loads a single process by its ID with full details including associated sub-processes, controls, risks, flowchart, and narrative. |
|
Loads multiple process risks by their IDs in a single call. |
|
Loads a single sub-process by its ID with full details including parent process, controls, risks, flowchart, and narrative. |
|
Get the available GRC analytics views. |
|
Lists all audit area types defined in the current workspace. |
|
Lists audit areas in the current workspace with filtering, search, and pagination. |
|
Lists controls in the current workspace with filtering, search, and pagination. |
|
Lists the remediation actions (tasks) on an issue by ID, with pagination, including each action’s schedule and status. |
|
Lists remediation issues in the current workspace with filtering and pagination. |
|
Lists all locations defined in the current workspace with optional filtering and pagination. |
|
Lists policies in the current workspace with filtering and pagination. |
|
Lists process risks in the current workspace with filtering, search, and pagination. |
|
Lists processes in the current workspace with filtering and pagination. |
|
Lists sub-processes in the current workspace with filtering and pagination. |
|
Lists all systems defined in the current workspace with optional filtering and pagination. |
|
Execute an analytics query against a view discovered via grc_list_analytics_views and return rows of data. |
|
Searches policy document sections by semantic similarity to a natural-language query. |
Spreadsheets
Tool |
Description |
|---|---|
|
Read sparse cells for a sheet-local A1 range through the sheet’s backing table. |
|
List the sheets (tabs) in a spreadsheet. |
|
List spreadsheets in a workspace, optionally filtered by name. |
|
Resolves the corresponding source links for a batch of up to 100 destination links. |
Wdata
Tool |
Description |
|---|---|
|
Downloads a completed query result as CSV text. |
|
Returns a saved query’s SQL text, parameters — including valid choices for select-mode parameters — and table dependencies. |
|
Retrieves metadata for a query result. |
|
Returns detailed schema for a single wdata table by ID, including all columns with their types and modes, plus description, table type, status, and timestamps. |
|
Lists available wdata tables in a workspace. |
|
Executes a query and returns immediately with a queryResultId and RUNNING status. |
|
Searches saved queries in a workspace by matching a search term against query names. |