Mcp servers just got an access list. workato's tool-level rbac, out september 5, lets you share one…
mcp servers just got an access list. workato's tool-level rbac, out september 5, lets you share one mcp server across the org and grant each user group only the tools they may call.
the agent tool economy now has a permissions layer.
Context
Workato's changelog entry, titled tool-level RBAC for MCP servers now generally available, indexed at September 5, 2026 with the page text showing only Sep 2026, says you can share one MCP server across the org and control which tools each user group can call, with reads for everyone and writes and destructive actions only for the roles that need them. The docs, read as current documentation, describe three layers: server-level authorization with end-user groups, tool-level authorization with subgroups, and per-user backend authorization with Verified User Access over OAuth 2.0. A group cannot be assigned to a tool unless it is already assigned to the server, and all users, including admins, must be in a user group to reach a server.
The permissions are group-based and apply to Workato's MCP server gateway, and they do not cover MCP servers outside Workato, so an access list for MCP servers generalizes beyond the source. September 5 is the index date and the page shows no day. The contained blast radius claim is the vendor's and was not tested. The docs are a current window and do not prove the historical mechanics, the pre-GA phase was not read, and plan availability was not read. MCP servers just got an access list is the author's framing.
Watch next
- Plan availability and the pre-GA history.
Sources
- Workato changelog: tool-level RBAC for MCP servers, now generally availableworkato.com
- Workato docs: MCP gatewaydocs.workato.com
Provenance
The note above is reproduced unedited from the original post, first published on Threads on 22 September 2026 at 09:22 IST. Sources are the papers and datasets the note draws on.
View the original post ↗Embed this note
More notes
The air is now being asked to keep its own ledger
the air is now being asked to keep its own ledger: ecmwf’s aifs compo becomes the first ai model to forecast atmospheric composition globally every three hours, cleanair simulates 365 days of pm2.5 over china in ten seconds, and a unified framework maps six pollutants at one kilometer across the whole country. the air now files its own composition report.
read the note →The current is now being asked to draw its own map
the current is now being asked to draw its own map: china’s langya 2.0 predicts six ocean phenomena including internal waves and mesoscale eddies, a deep net called wenhai resolves eddies globally with air sea flux formulas built in, and scripps infers surface currents from the way temperature patterns deform in satellite images. the ocean now files its own circulation report.
read the note →The soil is now being asked to report its own carbon
the soil is now being asked to report its own carbon: a nix color sensor paired with generative data augmentation predicts soil organic carbon without a lab, random forest drives 74 percent of soil health mapping studies, and sentinel 2 tracks five year carbon change across france and italy from 922 samples. the dirt now files its own carbon account.
read the note →