> For the complete documentation index, see [llms.txt](https://www.cakewalk.security/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.cakewalk.security/docs/ai-agent-access/connections-and-integrations/agent-connections/personio.md).

# Personio

Connect your company's Personio so agents can work with employee, time off, compensation and performance data through Cakewalk's gateway. Personio's MCP server is in beta; your tenant needs beta acces

Connect your company's Personio to Cakewalk's MCP Gateway. Every agent tool call against Personio passes through the gateway and is evaluated against your Policies.

{% hint style="warning" %}
Personio's MCP server is in beta and not available to every tenant yet. Without beta enrollment, the settings described below do not appear in Personio at all. Menu paths follow Personio's beta documentation and may change before general availability. Last verified: 2026-08-21.
{% endhint %}

## Setup Flow: Personio Issues the Client ID

Personio does not register applications automatically, and there is no OAuth app to create by hand either. Personio generates the OAuth Client ID inside the product and shows it in each user's personal settings, next to your company's MCP server URL. There is no client secret.

## Requirements

* A Personio tenant enrolled in the MCP beta. If the Personio MCP section is missing from the settings below, ask your Personio representative for beta access.
* A Personio Administrator, to enable the MCP server for the company.
* A Cakewalk Admin, to add the Connection.
* Your Personio tenant URL. The MCP endpoint follows the pattern `https://yourcompany.app.personio.com/mcp` per Personio's documentation.

## Step 1: Enable the MCP Server in Personio

A Personio Administrator follows these steps, per Personio's beta documentation:

1. In Personio, go to **Settings**. In the **Account & support** section, click **AI features**.
2. Enable **General access** using the toggle.
3. In the **Personio MCP** section, enable **Personio MCP** using the toggle.
4. Review the **Tools** list and disable any capability, for example reading compensation data, that connected AI tools should not use.
5. Review the **Person attributes** list and disable any attribute, for example address or IBAN, that connected AI tools should not read.

{% hint style="info" %}
Write access is a separate opt-in toggle in Personio and is off by default. Personio enforces disabled tools and hidden attributes on its side, regardless of any client setting, and records changes to the MCP setting in its audit log.
{% endhint %}

## Step 2: Copy the MCP Server URL and Client ID

Per Personio's documentation: go to **Personal settings**, open the **Personio MCP** tab and expand the relevant entry. Copy the **MCP server URL** and the **OAuth Client ID**. There is no client secret.

## Step 3: Add the Connection in Cakewalk

Add Personio as a Connection with the MCP server URL and the OAuth Client ID from Step 2, leaving the client secret empty. See [Add a Custom Connection](/docs/ai-agent-access/how-to-guides/connections/add-a-custom-connection.md) for the flow.

## Step 4: Employees Connect

From an agent platform connected to Cakewalk, the employee connects Personio, signs in with their own Personio account and approves access. Each call then runs with that employee's own Personio permissions: Personio states the MCP server never grants more access to data than the signed-in user already has.

## What Agents Can Reach

Per Personio's beta documentation:

* Read: employee profiles, time off balances and history, compensation and employment details, performance feedback and reviews.
* Write: request time off, which triggers the normal Personio approval workflow. Approving time off is announced as coming soon.

## Verifying It Works

The Personio Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent for your own time off balance. If Personio returns it, the Connection is live.

## Troubleshooting

* **The MCP endpoint returns not found, or the settings sections are missing.** Your tenant is not enrolled in the beta, or the Personio MCP toggle is off. Confirm both; if both are correct, contact your Personio representative.
* **A write action, such as requesting time off, is refused.** Write access is disabled in Personio. It is a separate opt-in toggle, off by default.
* **You are asked to sign in again.** Personio expires the authentication after inactivity or at its maximum lifetime. Reconnect with your Personio account.
* **The agent only returns part of the data.** Personio paginates large result sets. Ask the agent to continue, or narrow the query.

## Learn More

* [Personio MCP server, beta access overview](https://support.personio.de/hc/en-us/articles/38314656674333-Personio-MCP-server-Beta-access-overview)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://www.cakewalk.security/docs/ai-agent-access/connections-and-integrations/agent-connections/personio.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
