Developer toolset
A second MCP server for coding agents that build or debug a Workwae integration, from sync health to the API reference.
https://api.workwae.com/mcp/developer is for coding agents building or debugging an integration, not working in a mailbox. It shows the integration from the API's side and searches the API reference. For agents that read and send mail, use the MCP server.
What it covers
- Accounts' sync health: status and its reason, the sync connection's last error, first syncs.
- Webhook endpoints, their delivery log and failed deliveries.
- Hosted connect links.
- The change feed.
- Usage against the plan.
- The audit log.
- This API's reference: operations, error reasons with their conditions, and schemas.
Connect
The toolset takes API keys only.
claude mcp add --transport http workwae-developer https://api.workwae.com/mcp/developer \
--header "Authorization: Bearer $WORKWAE_API_KEY"Other credentials are refused with 403:
| Credential | Reason |
|---|---|
| OAuth access token | api_key_required. OAuth grants are for /mcp and never carry admin, so no OAuth sign-in is offered. |
| Account token | account_token_forbidden |
| MCP key minted for an account | mcp_only_key |
Tool calls are recorded in the audit log under the surface MCP, like those of /mcp.
Tools
A key sees the tools whose API operations it may call. A key limited to specific accounts keeps only list_accounts, get_account, list_changes and the reference and time tools.
| Scope | Tools |
|---|---|
read | list_accounts, get_account, list_webhooks, list_webhook_attempts, count_failed_deliveries, get_connect_session, list_changes, get_usage, search_api_reference, get_api_operation, get_current_time |
write | send_test_event, replay_webhook_event, replay_failed_deliveries, create_connect_session |
admin | list_audit_log |
- To find why a call failed,
list_audit_logwith outcomefailurelists refused calls with their reason and request id. send_test_eventand the replays deliver to your live endpoints, andcreate_connect_sessionrespects the redirect allowlist (settings.redirectUris). Give the keyreadalone to keep an agent to looking.- Account names and addresses, provider errors, what endpoints answered and event data come back in the untrusted data block, as mail does on
/mcp.