
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@mindstone-engineering/mcp-server-workday
Advanced tools
Workday HCM MCP server for Model Context Protocol hosts — workers, profiles, organizations
Workday HCM MCP server for Model Context Protocol hosts. Query workers, profiles, and organizations in Workday through a standardised MCP interface using OAuth 2.0 authentication.
cd <path-to-repo>/connectors/workday
npm install
npm run build
npx -y @mindstone-engineering/mcp-server-workday
node dist/index.js
WORKDAY_HOST — Workday API host (e.g. wd5-impl-services1.workday.com)WORKDAY_TENANT — Workday tenant IDWORKDAY_CLIENT_ID — OAuth 2.0 client IDWORKDAY_CLIENT_SECRET — OAuth 2.0 client secretWORKDAY_REFRESH_TOKEN — OAuth 2.0 refresh tokenMCP_HOST_BRIDGE_STATE — optional path to a host bridge state file used for credential managementMINDSTONE_REBEL_BRIDGE_STATE — backwards-compatible alias for MCP_HOST_BRIDGE_STATE{
"mcpServers": {
"Workday": {
"command": "npx",
"args": ["-y", "@mindstone-engineering/mcp-server-workday"],
"env": {
"WORKDAY_HOST": "wd5-impl-services1.workday.com",
"WORKDAY_TENANT": "your-tenant",
"WORKDAY_CLIENT_ID": "your-client-id",
"WORKDAY_CLIENT_SECRET": "your-client-secret",
"WORKDAY_REFRESH_TOKEN": "your-refresh-token"
}
}
}
}
{
"mcpServers": {
"Workday": {
"command": "node",
"args": ["<path-to-repo>/connectors/workday/dist/index.js"],
"env": {
"WORKDAY_HOST": "wd5-impl-services1.workday.com",
"WORKDAY_TENANT": "your-tenant",
"WORKDAY_CLIENT_ID": "your-client-id",
"WORKDAY_CLIENT_SECRET": "your-client-secret",
"WORKDAY_REFRESH_TOKEN": "your-refresh-token"
}
}
}
}
configure_workday_credentials — Configure Workday OAuth API credentialslist_workday_workers — List or search workers (employees and contingent workers)get_workday_worker — Get a worker's full profile by IDlist_workday_organizations — List organizations (departments, supervisory orgs, cost centers)FSL-1.1-MIT — Functional Source License, Version 1.1, with MIT future licence. The software converts to MIT licence on 2030-04-08.
FAQs
Workday HCM MCP server for Model Context Protocol hosts — workers, profiles, organizations
We found that @mindstone-engineering/mcp-server-workday demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.