Rippling
Rippling is a unified HR, IT, and Finance platform. This connector reads workforce data (workers, departments, teams, work locations, levels, time off) via the Rippling REST API and covers legacy Platform API write actions such as leave requests and group provisioning.
Tools
The connector exposes 28 tools. Twenty-three are read-only; five write.
Read
| Area | Tools |
|---|---|
| Workers | List Workers, Get Worker, List Employees, List Employees Including Terminated, Get Employee, List Users |
| Org structure | List Departments, Get Department, List Teams, List Work Locations, List Levels, List Job Functions |
| Employment | List Employment Types, Get Employment Type, List Entitlements |
| Time off | List Leave Requests, List Leave Balances, List Leave Types |
| Company | List Companies, Get Current Company, Get Current Context, Get Company Activity |
| Identity | Get SAML IdP Metadata |
All of the above are scored low risk.
Write
| Tool | Risk |
|---|---|
| Create Leave Request | medium |
| Update Leave Request | medium |
| Create Group | medium |
| Update Group | medium |
| Delete Group | high |
Delete Group is the only high-risk tool. Group membership in Rippling can drive downstream IT provisioning, so deleting one may remove access to systems well beyond Rippling itself.
Add the connector
- Open Build > MCP Servers.
- Select Add MCP Server.
- Find Rippling in the catalog, then select Use.
- Review the tools and their risk bands.
- Select Create.
At the default risk level the modal enables 27 of 28 tools and reports 1 tool excluded by your risk level selection. The excluded tool is Delete Group. Raise the risk level in the modal to include it, or leave it disabled and enable it later from the Tools tab once you have guards and approval in place.
Willow opens the new server's edit page with the status draft.
Authentication
Open the Setup tab on the new server to configure authentication. The tab shows the modes this connector supports and the fields each one needs, so use it as the source of truth rather than guessing which credentials to gather in advance.
For what each mode does and what it forwards to the upstream server, see Configure MCP Server Authentication. Consult Rippling's own API documentation for how to issue the credentials it asks for.
Next steps
- Manage Tools: enable, test, and require approval per tool
- Require approval on the write tools before exposing them
- Assign the server to groups so users can reach it