Workday · OAuth Scopes

Workday OAuth Scopes

OAuth 2.0 derived

Workday publishes 29 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Workday API on a user’s behalf.

Tokens are issued from https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Cloud ComputingEnterprise SoftwareFinancial ManagementHCMSoftware-as-a-Service

Scopes: 29 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize

Token URL
https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token

Flows
authorizationCode

Scopes (29)

Scope	Description	Flows
r_absence	Read absence data	authorizationCode
r_benefits	Read benefits data	authorizationCode
r_common	Read common reference data	authorizationCode
r_compensation	Read compensation data	authorizationCode
r_financials	Read financial data	authorizationCode
r_payroll	Read payroll data	authorizationCode
r_performance	Read performance data	authorizationCode
r_person	Read person data	authorizationCode
r_prism	Read Prism Analytics data	authorizationCode
r_recruiting	Read recruiting data	authorizationCode
r_reports	Read report data	authorizationCode
r_staffing	Read staffing data	authorizationCode
r_talent	Read talent data	authorizationCode
r_timeTracking	Read time tracking data	authorizationCode
r_worker	Read worker data	authorizationCode
r_wql	Execute WQL queries	authorizationCode
w_absence	Write absence data	authorizationCode
w_benefits	Write benefits data	authorizationCode
w_compensation	Write compensation data	authorizationCode
w_financials	Write financial data	authorizationCode
w_payroll	Write payroll data	authorizationCode
w_performance	Write performance data	authorizationCode
w_person	Write person data	authorizationCode
w_prism	Write Prism Analytics data	authorizationCode
w_recruiting	Write recruiting data	authorizationCode
w_staffing	Write staffing data	authorizationCode
w_talent	Write talent data	authorizationCode
w_timeTracking	Write time tracking data	authorizationCode
w_worker	Write worker data	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/absenceManagement.yml, openapi/benefits.yml, openapi/common.yml, openapi/compensation.yml,
  openapi/financialManagement.yml, openapi/hcm.yml, openapi/payroll.yml, openapi/performanceManagement.yml,
  openapi/person.yml, openapi/prismAnalytics.yml, openapi/raas.yml, openapi/recruiting.yml,
  openapi/staffing.yml, openapi/talent.yml, openapi/timeTracking.yml, openapi/wql.yml
schemes:
- name: OAuth2
  source: openapi/absenceManagement.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/benefits.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/common.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/compensation.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/financialManagement.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/hcm.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/payroll.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/performanceManagement.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/person.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/prismAnalytics.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/raas.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/recruiting.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/staffing.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/talent.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/timeTracking.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
- name: OAuth2
  source: openapi/wql.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/authorize
    tokenUrl: https://wd2-impl-services1.workday.com/ccx/oauth2/{tenant}/token
scopes:
- scope: r_absence
  description: Read absence data
  flows:
  - authorizationCode
  sources:
  - openapi/absenceManagement.yml
- scope: r_benefits
  description: Read benefits data
  flows:
  - authorizationCode
  sources:
  - openapi/benefits.yml
- scope: r_common
  description: Read common reference data
  flows:
  - authorizationCode
  sources:
  - openapi/common.yml
- scope: r_compensation
  description: Read compensation data
  flows:
  - authorizationCode
  sources:
  - openapi/compensation.yml
- scope: r_financials
  description: Read financial data
  flows:
  - authorizationCode
  sources:
  - openapi/financialManagement.yml
- scope: r_payroll
  description: Read payroll data
  flows:
  - authorizationCode
  sources:
  - openapi/payroll.yml
- scope: r_performance
  description: Read performance data
  flows:
  - authorizationCode
  sources:
  - openapi/performanceManagement.yml
- scope: r_person
  description: Read person data
  flows:
  - authorizationCode
  sources:
  - openapi/person.yml
- scope: r_prism
  description: Read Prism Analytics data
  flows:
  - authorizationCode
  sources:
  - openapi/prismAnalytics.yml
- scope: r_recruiting
  description: Read recruiting data
  flows:
  - authorizationCode
  sources:
  - openapi/recruiting.yml
- scope: r_reports
  description: Read report data
  flows:
  - authorizationCode
  sources:
  - openapi/raas.yml
- scope: r_staffing
  description: Read staffing data
  flows:
  - authorizationCode
  sources:
  - openapi/staffing.yml
- scope: r_talent
  description: Read talent data
  flows:
  - authorizationCode
  sources:
  - openapi/talent.yml
- scope: r_timeTracking
  description: Read time tracking data
  flows:
  - authorizationCode
  sources:
  - openapi/timeTracking.yml
- scope: r_worker
  description: Read worker data
  flows:
  - authorizationCode
  sources:
  - openapi/hcm.yml
- scope: r_wql
  description: Execute WQL queries
  flows:
  - authorizationCode
  sources:
  - openapi/wql.yml
- scope: w_absence
  description: Write absence data
  flows:
  - authorizationCode
  sources:
  - openapi/absenceManagement.yml
- scope: w_benefits
  description: Write benefits data
  flows:
  - authorizationCode
  sources:
  - openapi/benefits.yml
- scope: w_compensation
  description: Write compensation data
  flows:
  - authorizationCode
  sources:
  - openapi/compensation.yml
- scope: w_financials
  description: Write financial data
  flows:
  - authorizationCode
  sources:
  - openapi/financialManagement.yml
- scope: w_payroll
  description: Write payroll data
  flows:
  - authorizationCode
  sources:
  - openapi/payroll.yml
- scope: w_performance
  description: Write performance data
  flows:
  - authorizationCode
  sources:
  - openapi/performanceManagement.yml
- scope: w_person
  description: Write person data
  flows:
  - authorizationCode
  sources:
  - openapi/person.yml
- scope: w_prism
  description: Write Prism Analytics data
  flows:
  - authorizationCode
  sources:
  - openapi/prismAnalytics.yml
- scope: w_recruiting
  description: Write recruiting data
  flows:
  - authorizationCode
  sources:
  - openapi/recruiting.yml
- scope: w_staffing
  description: Write staffing data
  flows:
  - authorizationCode
  sources:
  - openapi/staffing.yml
- scope: w_talent
  description: Write talent data
  flows:
  - authorizationCode
  sources:
  - openapi/talent.yml
- scope: w_timeTracking
  description: Write time tracking data
  flows:
  - authorizationCode
  sources:
  - openapi/timeTracking.yml
- scope: w_worker
  description: Write worker data
  flows:
  - authorizationCode
  sources:
  - openapi/hcm.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/workday-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.