generated: '2026-09-25'
method: probed
source: https://app.workato.com/airo_mcp
status: gated
server:
  name: workato
  transport: http
  url: https://app.workato.com/airo_mcp
deployment:
  mode: remote
  endpoint: https://app.workato.com/airo_mcp
  verified: probed
  probe: gated
  checked: '2026-09-25'
  source: 'docs-check 2026-09-25 (first-party, on the provider''s own domain: named in https://docs.workato.com/en/airo/mcp.md
    (linked from llms.txt); probed with JSON-RPC initialize; roadmap#590 #721)'
  probe_why: RFC 9728 challenge; metadata fetched (resource https://app.workato.com/airo_mcp)
  found_via: named in https://docs.workato.com/en/airo/mcp.md (linked from llms.txt)
  also_at:
  - https://app.eu.workato.com/airo_mcp
  - https://app.jp.workato.com/airo_mcp
  - https://app.sg.workato.com/airo_mcp
  - https://app.au.workato.com/airo_mcp
  - https://app.il.workato.com/airo_mcp
  - https://app.kr.workato.com/airo_mcp
  - https://app.uk.workato.com/airo_mcp
  - https://app.trial.workato.com/airo_mcp
tools_note: No tool list captured. This manifest records a PROBED, reachable endpoint only; anonymous
  tools/list was auth-gated or the server requires an initialize handshake this reachability probe does
  not perform. Run signals/audit_mcp_authorship.py --probe to enumerate tools and settle platform-vs-provider
  authorship. Do NOT derive a tool list from the OpenAPI and store it here -- that is a candidate manifest,
  and it belongs under an X-MCPServerCandidate pointer.
rfc9728:
  endpoint: https://app.workato.com/airo_mcp
  metadata_url: https://app.workato.com/.well-known/oauth-protected-resource/airo_mcp
  discovered_via: WWW-Authenticate resource_metadata on an anonymous POST initialize
  fetched: '2026-09-25'
  http_status: 200
  content_type: application/json
  document:
    resource: https://app.workato.com/airo_mcp
    authorization_servers:
    - https://app.workato.com
    scopes_supported:
    - mcp:workai
    bearer_methods_supported:
    - header