Skip to content

Workato recipe usage

Workato contributes recipe, workspace, and usage context for AI-related automation activity. AI cost is attributed through the underlying provider account; Workato supplies the recipe and workspace context.

Onboarding scope

This guide covers the read-only workato connector in the Venturi platform connector package. It reads recipe, job, and workspace context and never edits recipes, deploys projects, or changes connections.

Required access

The names below are Venturi capability identifiers, not Workato API permissions:

Venturi capability Purpose
Workato.Usage.Read Read recipe and task usage context.
Workato.Recipe.Read Read recipe metadata.
Workato.Workspace.Read Read workspace ownership context.

Do not grant recipe edit, deployment, connection mutation, or workspace administration permissions.

The vendor-side authorization is a Workato API client. In Workspace admin → API clients, create a client role that enables only the list and get endpoints for recipes, jobs, and workspace details, then create an API client with that role, limited to the projects and environments you want Venturi to read. See Workato’s API client documentation. The connector never submits the Venturi capability names above as permissions.

Setup

  1. Create the read-only client role described above.
  2. Create a dedicated API client for Venturi with that role.
  3. Store the API client token as an encrypted credential reference in Settings / Admin / Credentials.
  4. The default lookback is 30 days; set VENTURI_WORKATO_LOOKBACK_DAYS to change it. See sync windows and failure behavior.
  5. In Venturi, go to Integrations / Workato and run Test connection.

Verification

  • Test connection passes the read-only boundary check: recipe, job, and workspace reads succeed, and the client role enables no recipe edit, deployment, or connection endpoint.
  • Recipe and workspace context appears in the latest sync.
  • Usage rows are treated as automation context unless paired with a provider cost source.
  • The connector inventory marks Workato as read-only.

Rotation and offboarding

Rotate the API client token through Workato administration, then update the credential reference in Settings / Admin / Credentials. Removing the connector stops new Workato context syncs.

Give feedback on this page

Sign in to send feedback. Opens in a new tab.

Copy page details 
Docs feedback: Workato recipe usage
Page: https://docs.venturi.systems/connectors/workato/