Windmill HR

Query performance review cycles, feedback, 1:1s and pulse surveys.

Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.

Paste it into any MCP client. Setup docs

What the Windmill HR connector does

The Windmill HR MCP server connects Windmill, an AI performance review platform for People Ops, to Claude, ChatGPT, Cursor and any MCP-compatible agent. It exposes 64 tools across employee records, feedback, performance review cycles, 1:1 agendas, pulse surveys and workforce stats. Sign-in is OAuth through your own Windmill account, and every call runs at your existing permission level.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Windmill HR tools (64)

  • employees_count
  • employees_groups_load
  • employees_query
  • employees_update
  • feedback_create
  • feedback_delete
  • feedback_edit
  • feedback_load_visibility_setting
  • feedback_query
  • feedback_requests_cancel
  • feedback_requests_create
  • feedback_requests_query
  • feedback_shoutouts_load_config
  • help_center_page_load
  • help_center_search
  • load_resources
  • members_count
  • members_invite
  • members_query
  • ona_collaborators_top_query
  • one-on-one-events_next
  • one-on-one-events_query
  • one-on-ones_calendar_query
  • one-on-ones_create
  • one-on-ones_event_confirm
  • one-on-ones_event_remove
  • one-on-ones_notes_load
  • one-on-ones_notes_update
  • one-on-ones_query
  • one-on-ones_series_remove
  • performance-reviews_cycle_admin_todo_status_query
  • performance-reviews_cycles_load
  • performance-reviews_cycles_query
  • performance-reviews_employees_query
  • performance-reviews_manager_review_context_load
  • performance-reviews_my_todos_load
  • performance-reviews_reviews_query
  • private_notes_count
  • private_notes_create
  • private_notes_delete
  • private_notes_load
  • private_notes_query
  • private_notes_update
  • pulse_answers_load
  • pulse_answers_save
  • pulse_create
  • pulse_employee_runs_count
  • pulse_employee_runs_query
  • pulse_employees_query
  • pulse_owner_add
  • pulse_owner_remove
  • pulse_owner_update
  • pulse_query
  • pulse_runs_query
  • pulse_send_now
  • pulse_send_nudge
  • pulse_test
  • pulse_update
  • query_resources
  • stats_employee_data_counts
  • stats_metadata
  • stats_query
  • weekly_recaps_query
  • whoami

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • Performance reviews cannot be written. Windmill records drafting, submitting and nudging on reviews as unavailable through the public MCP. Seven review tools all read.
  • Members cannot be removed. members_invite adds a person; Windmill states removing a member is not available through the public MCP.
  • Private notes reach only your own. Windmill's MCP matrix states you can access only your own private notes through the connector.
  • No application OAuth scope. offline_access is the only advertised scope, so there is no read-only connection to approve. Access is limited by your Windmill account instead.
  • No consent-screen narrowing, and no admin kill switch documented. Windmill's documentation describes revoking a connector as a way to end a session, but publishes no per-tool or per-family admin control over what a connected user's assistant can call.
  • Data leaves Windmill on every answer. Windmill states data returned passes through the connected AI tool's model so it can generate a response, and advises using tools that meet your company's privacy and security requirements.
  • The connection does not expire. There is no scheduled re-authentication; the refresh token rotates indefinitely until the server is removed, the connector revoked, or the session invalidated by an admin.
  • Seats are billed on provisioning, not usage. Windmill's standard plan includes 10 free seats and charges $10 per additional seat per month; an invited member counts even if they never log in, and archiving mid-cycle produces no refund.
  • Organizational Health has no partial view. The collaboration graph behind ona_collaborators_top_query is documented as available only to Workspace Admins and Data Analysts, with no manager-limited version of the report.
  • History starts when you connect. Windmill states reviews and 1:1s collect data on a go-forward basis from when a system was connected, so the connector cannot reach what predates the integration.
  • Retention is engagement-linked. Windmill retains customer data for the life of the engagement and offers deletion on request after it ends; it publishes no fixed retention window.
  • We could not read tool schemas or safety annotations. The endpoint is OAuth-gated. Tool names come from Anthropic's directory; every behaviour claim comes from Windmill's documentation.

Frequently asked questions

Does connecting Windmill to Claude expose my whole company's performance reviews?

No. Windmill states the MCP server acts as the signed-in user, so role-based access, org-chart scoping, connected-source permissions and feature privacy rules all apply. Its documented example is an Engineering manager being refused People Team review results. Review visibility stays with the management chain and cycle admins.

Can an AI assistant draft or submit a performance review through Windmill MCP?

No. Windmill's MCP documentation records performance reviews as read-only over the connector: cycles, participants, reviews, todos and manager-review context can be read, and nothing can be changed. Drafting reviews, submitting them and sending performance-review nudges are all listed as unavailable through the public MCP.

Can someone read the feedback other people wrote about them through this connector?

No. Windmill's visibility rules state the subject of a piece of feedback never reads it, regardless of role. Peer and upward feedback about you stay hidden permanently; a manager review reaches you only when your manager shares it. Windmill records that cycle admins get no exception.

Who can see my private notes if I connect Windmill to an AI tool?

Only you. Windmill documents private notes as visible solely to their author and never shared with the people they are about. The MCP page repeats the boundary for the connector, listing private notes as an area where you can access only your own. Six tools read and write that personal set.

How often do I have to re-authenticate the Windmill MCP connector?

Never on a schedule. Windmill states an MCP connection has no time-based expiry, because the OAuth refresh token rotates silently in the background. You re-authenticate only if you remove and re-add the server, revoke the connector, or an admin signs you out. Dashboard logins expire after about seven days.

Does everyone on my team have to set up the Windmill connector separately?

Yes. Windmill's documentation states each person adds the connector and authenticates with their own Windmill account, and that MCP access uses your individual account. There is no workspace-wide install that connects colleagues on your behalf, so each person's connection carries only their own permissions.

Sources

  • Windmill MCP documentation — https://help.gowindmill.com/features/mcp (retrieved 2026-09-08). Endpoint, per-client setup, the read/change/limits matrix, authentication and permissions, and seven vendor FAQs. · retrieved 2026-09-08
  • Windmill permissions and access — https://help.gowindmill.com/permissions-and-access (retrieved 2026-09-08). Five roles and their capability matrix, org-chart scope, access delegation and its limits, 1:1 auditability, connected-system permissions. · retrieved 2026-09-08
  • Windmill performance review visibility — https://help.gowindmill.com/features/performance-reviews/visibility (retrieved 2026-09-08). The subject-cannot-read rule, cycle admin scoping, calibration access, sharing behaviour. · retrieved 2026-09-08
  • Windmill feedback — https://help.gowindmill.com/features/continuous-feedback (retrieved 2026-09-08). Feedback types, default visibility, and the giver's inability to choose an audience. · retrieved 2026-09-08
  • Windmill private notes — https://help.gowindmill.com/features/private-notes (retrieved 2026-09-08). Author-only visibility and the writing-aid boundary in review drafting. · retrieved 2026-09-08
  • Windmill data privacy and collection — https://help.gowindmill.com/security/data-privacy (retrieved 2026-09-08). HRIS fields collected and explicitly not collected, admin visibility, historical data, retention. · retrieved 2026-09-08
  • Windmill Organizational Health — https://help.gowindmill.com/features/analytics/organizational-health (retrieved 2026-09-08). ONA report access limited to Workspace Admins and Data Analysts. · retrieved 2026-09-08
  • Windmill pricing — https://help.gowindmill.com/getting-started/pricing (retrieved 2026-09-08). Free-seat allowance, $10 per seat per month, provisioning-based billing. · retrieved 2026-09-08
  • Windmill documentation index — https://help.gowindmill.com/llms.txt (retrieved 2026-09-08). The machine-readable page map that resolved the directory's bare help-centre URL to the MCP page. · retrieved 2026-09-08
  • Live OAuth probe of https://mcp.gowindmill.com/mcp — 2026-09-08. Anonymous initialize and tools/list both returned HTTP 401 with a WWW-Authenticate: Bearer challenge; the RFC 9728 protected-resource descriptor and the authorization-server metadata at api.gowindmill.com both returned HTTP 200. No tool was called and no credential was supplied. · retrieved 2026-09-08
  • Anthropic connector directory snapshot — https://claude.ai/directory/9af5c0c8-b270-4457-851e-196b591e43b1 (snapshot dated 2026-09-08). The 64 tool names, partner tier, endpoint, transport, categories. · retrieved 2026-09-08
  • help.gowindmill.com/robots.txt (retrieved 2026-09-08) carries a Content-Signal line setting ai-train=yes, search=yes and ai-input=yes, and gowindmill.com/robots.txt carries the same three values — synthesis of this publisher's content is expressly permitted. · retrieved 2026-09-08
Use it in an agent

Put Windmill HR to work.

Connect Windmill HR once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.

Call (650) 285-1019Our AI receptionist answers.