Workday Connector

SKILL.md

---
name: workday-connector
description: "Access Workday HR and enterprise data with managed OAuth. Query workers, organizations, and HR data via the Workday REST API. Use when the user wants to look up employee information, query organization data, search workers, or access Workday HR records."
metadata:
  polly:
    polly_managed_connector: true
    auth:
      - env: WORKDAY_ACCESS_TOKEN
        type: oauth2
        integration_id: workday
        description: Workday OAuth access
    primaryEnv: WORKDAY_ACCESS_TOKEN
---

# Workday Connector

Access Workday HR and enterprise data through the Workday REST API using managed OAuth.

## First-Time Setup

If Workday is not connected yet, run:

`manage_auth(action="connect", integration_id="workday", auth_env="WORKDAY_ACCESS_TOKEN")`

## Auth & Security

- Authentication is managed by Polly + Nango from `metadata.polly.auth`
- Never ask users to paste tokens in chat
- Never print or log token values
- If auth fails, reconnect with:
  `manage_auth(action="connect", integration_id="workday", auth_env="WORKDAY_ACCESS_TOKEN")`

## Base URL

Workday endpoints are tenant-specific:

`https://{tenant}.workday.com/api`

Replace `{tenant}` with the organization's Workday tenant name.

All requests include:

`Authorization: Bearer $WORKDAY_ACCESS_TOKEN`

## Quick Usage

Get workers:

```bash
curl -sS \
  -H "Authorization: Bearer $WORKDAY_ACCESS_TOKEN" \
  "https://{tenant}.workday.com/api/staffing/v6/workers"
```

Get a worker by ID:

```bash
curl -sS \
  -H "Authorization: Bearer $WORKDAY_ACCESS_TOKEN" \
  "https://{tenant}.workday.com/api/staffing/v6/workers/<workerId>"
```

Search workers:

```bash
curl -sS \
  -H "Authorization: Bearer $WORKDAY_ACCESS_TOKEN" \
  "https://{tenant}.workday.com/api/staffing/v6/workers?search=Jane"
```

Get organizations:

```bash
curl -sS \
  -H "Authorization: Bearer $WORKDAY_ACCESS_TOKEN" \
  "https://{tenant}.workday.com/api/humanResources/v4/organizations"
```

## Rules

- Always replace `{tenant}` with the actual Workday tenant name before making requests
- Workday API versions are resource-specific (e.g., staffing/v6, humanResources/v4)
- For pagination, use `limit` and `offset` query parameters
- On API errors, surface status + response body clearly
- On 401/403, reconnect with:
  `manage_auth(action="connect", integration_id="workday", auth_env="WORKDAY_ACCESS_TOKEN")`
- Never log, echo, or expose credential values in any output