Rippling MCP: what it does, what it can change, and how to connect it to Claude or ChatGPT

Rippling hosts a first-party MCP server with one code tool over 31 functions; mostly read, with time-off, draft-hire and custom-object writes. Verified 21 Oct 2026.

Rippling implementation by The People Stack, a Rippling implementation partner. The People Stack

Official MCP server · read & limited write (hosted)

Hosting: Remote, hosted by Rippling. Users copy the Remote MCP server URL from IT › My IT › MCP connectors; Rippling doesn't publish it.
Auth: Sign in with your Rippling account and authorise the connection; the agent acts as that employee. No API token.
Read / write: Read & limited write: 31 functions, 19 read and 12 write (time-off requests, draft hires, custom objects).
Works with: Claude, ChatGPT, Cursor and Gemini (named by Rippling), Codex (in Rippling's setup guide), and any MCP-compliant client via the remote URL
Plan requirement: Active Rippling AI subscription or trial, per Rippling; without one, tool calls return no data.
Last changed: 2026-08-13: Rippling announced the MCP server on its engineering blog
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Rippling through MCP?

An agent can look up people, reporting lines, department headcounts and time-off balances, and ask Rippling AI a question. It can also file time-off requests, start draft hires and manage custom objects. Everything runs as the signed-in employee.

Rippling exposes one tool, code. The model writes a short JavaScript program against typed functions. Rippling runs it in a sandbox it says has no network egress and never sees credentials.

What the functions do

Rippling's tools reference lists 31 functions.

Functions	What happens
Rippling AI (`ask_ai`) and the 9 people and org chart functions	Read-only.
`request_time_off`	Creates a Pending request that goes through normal manager approval.
`create_draft_hire`	Leaves a draft for a person to review and submit.
Custom objects: six reads and ten writes	Once a create or update runs, the record changes at once, with no draft or approval step.

Confirmation for custom objects

Rippling says creating, changing and deleting custom objects and data needs permission and explicit confirmation.
Its function table flags only the three deletes as needing confirmation.

Money

Rippling's tools reference lists no payroll, pay, payment or compensation functions, so as documented nothing here moves money.

Can

Look up profiles, direct reports and department headcounts
Search departments, teams, work locations and legal entities
Check who is on approved time off and a person's leave balances
Ask Rippling AI a plain-language question (read-only answer)
File a time-off request, which enters approval as Pending
Create a draft hire for a person to review and submit
Create, update and delete custom objects, fields and records (Rippling's table flags only deletes as needing confirmation)

Cannot

See or do anything the employee can't already see or do in Rippling, per Rippling
Return SSNs, home addresses, personal email or tax IDs, per Rippling; its troubleshooting page also excludes pay and EEO data
Run payroll, change pay or make payments: no such function is in Rippling's tools list
Run on a schedule or trigger; it works in a chat the user starts (per Carly, a third party)

What access does it get?

Access is set in two layers. The admin's MCP Gateway access assignment sets which functions a person may use. Their normal Rippling permissions then limit what data and actions those functions reach.

Where	Scopes and permissions (as documented)	Admin requirement
Rippling MCP (remote, any client)	Not documented by the vendor as scope names. Access is the intersection of the MCP Gateway access assignment (which tools a group or person gets) and the employee's Rippling permissions. No one has access until an admin assigns it.	A super admin, full admin or admin with the Manage MCP Gateway permission creates the access assignment. Claude Team/Enterprise: an Owner adds custom connectors. ChatGPT Business/Enterprise: an admin enables developer mode.

How do I connect it?

An admin first assigns tools in the MCP Gateway; each employee then adds Rippling MCP from My IT › MCP connectors or pastes the Remote MCP server URL into their client and signs in.

Admin: open IT › MCP Gateway › Rippling MCP › Access assignments (https://app.rippling.com/it/mcp-gateway/manage), choose Assign group or Assign individual, pick people, click Next, choose their tools and click Assign. If Rippling MCP isn't listed, choose Add connector › Add from catalog. A person in two groups gets the assignment with the lowest priority number.
Employee: go to My IT › MCP connectors (https://app.rippling.com/it/my-it/mcp-connectors), click + next to Rippling MCP and choose Claude.
Or, per Rippling, open Claude, find Rippling MCP and click Connect. If Rippling MCP is missing or Connect is unavailable, no tools have been assigned to you yet.
If Claude isn't offered, copy the Remote MCP server URL into Customize › Connectors › Add custom connector.
Sign in with your Rippling account and authorise the connection.

Rippling documents connecting from inside Claude, but we found no Claude directory listing as of 21 Oct 2026, so use My IT or the custom connector if it isn't shown. Team/Enterprise: an Owner adds custom connectors.

What should a finance team watch for?

The server has few functions and most are read-only. A confirmed custom-object create or update changes records at once, so assign write tools only to people who would make those changes in Rippling themselves.

Write path: time-off requests enter approval as Pending and hires stay drafts, per Rippling. Rippling says custom-object changes need explicit confirmation, yet its function table flags only the three deletes; assume a create or update applies as soon as the tool call runs. If custom objects hold finance data, keep write tools off for most groups.
Least privilege: assignments pick tools per Supergroup or person; an individual assignment overrides a group one, per Rippling. Admins can revoke specific tools company-wide.
Rate limits, per Rippling: 50 calls per 60 seconds per function per user; ask_ai allows 5 new runs per 60 seconds and 10 at once. A code program that calls a function 20 times uses 20 of that function's calls, so balances for 200 employees take at least four minutes. list_custom_records returns one page at a time.
Plan: without an active Rippling AI subscription or trial, tool calls return no data, per Rippling.
Prompt injection: custom records hold free text. The single code tool runs a model-written program that can chain many function calls, so one approval may cover several writes: injected text could lead the agent to update or delete records, file time off or start a draft hire in one call. Read the program before approving it, keep per-call approval on and leave 'always allow' off.
Data handling: Rippling says credentials stay outside the sandbox and SSNs, home addresses, personal email and tax IDs are never exposed. It makes no training statement on its MCP pages; read Rippling's and your AI provider's terms.
Rippling's developer docs describe a separate API-token SDK MCP for building integrations; don't confuse it with this server.

How could finance teams and accounting firms use it?

Read access suits headcount, org and leave questions. The custom-object and time-off writes suit preparing changes that a person checks before approving.

Inside a company

Get active headcount by department to compare against the headcount plan in the budget.
Look up a person's time-off balances by leave type when reviewing a leave accrual schedule.
Look up employees' profiles (department, location) and find legal entities by name before splitting a cost allocation; Rippling doesn't document legal entity as a profile field.
Ask Rippling AI a cross-product question and get one read-only answer.

At an accounting firm

With a Rippling login and access assignment from the client, look up headcount for named departments as a reasonableness check against the payroll journal (pay data is excluded, so it can't reconcile amounts).
Read a client's custom-object records (for example, a contract or asset tracker kept in Rippling) to match against the ledger.
Prepare a custom-object record update from engagement notes, approving the tool call only after the client has checked it.
Keep firm users on read-only tool assignments for review work.

Keep a person approving anything that changes Rippling or your ledger, including custom-object updates and deletions.

Want Rippling connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Rippling's developer docs (overview, setup, tools, troubleshooting) re-read: 31 functions, rate limits, Rippling AI requirement and excluded fields now stated by Rippling	developer.rippling.com/documentation/rippling-platform/rippl
2026-08-13	Rippling announced its MCP server with a single code tool (31 functions at launch)	www.rippling.com/en-GB/blog/building-mcp-server

FAQ

Is this official?

Yes. Rippling hosts and documents the Rippling MCP as a first-party server, managed through its MCP Gateway.

Is it free?

The MCP is enabled by default, but Rippling says tool calls return no data without an active Rippling AI subscription or trial. Rippling doesn't state the price on its MCP pages.

Does it change data in Rippling?

Yes, in limited ways: time-off requests (into normal approval), draft hires (for review) and custom-object creates, updates and deletes. It has no payroll or payment functions.

Is my data used to train models?

Rippling's MCP pages don't say. Read Rippling's terms and your AI provider's terms on training and retention before connecting HR data.

Can my accountant use it on my behalf?

Rippling doesn't document accountant access. The agent acts as the signed-in employee, so an accountant would need their own Rippling login plus an MCP Gateway access assignment.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.