Skip to main content
monday.com The monday.com connector wraps the monday.com v2 GraphQL API as MCP tools for Agent Factory agents, and as Monday.op: App instructions for Builder automations — covering boards, items, subitems, columns, groups, workspaces, updates, files, webhooks, docs, folders, tags and activity logs, plus a generic graphql passthrough. The MCP server runs in the tenant app-instance context: it resolves the installing workspace’s own credentials and authorizes the calling agent against that workspace’s allowlist. Authentication supports three modes:
  • Per-user OAuth2 — central client (oauthCentral, recommended) — one monday.com OAuth application is registered once by the platform maintainer; every end user signs in with their own monday.com account. Nothing to register per workspace: each one just installs the app and clicks Connect.
  • Per-user OAuth2 — tenant client (oauth) — paste your own monday.com OAuth client ID/secret in the connector config app. Each user signs in with their own account against your client (authorization-code + PKCE flow).
  • Personal API Token (accessToken) — a caller-managed monday.com Personal API Token (v2), used as-is with no exchange. One identity acts for the whole workspace.

Boards & Items

Boards, items, subitems, columns and groups with full CRUD, plus cursor pagination and column-value filtering.

Collaboration

Updates, in-app notifications, webhooks, tags, docs, users and teams.

Per-user auth

Per-user OAuth (central or tenant client) resolved server-side, or a workspace Personal API Token.

Who is this for?

This connector is used by three different roles. Jump to the section that matches yours — each one is self-contained.

Agent builder

You build agents in Agent Factory and want them to use monday.com. → Agent builder tab.

Platform admin

You run the platform and set up the shared monday.com OAuth client once for everyone. → Platform admin setup accordion below.

Workspace builder

You write Builder automations (DSUL) that call monday.com operations directly. → Workspace builder tab.

Prerequisites

  • A monday.com account.
  • For the OAuth modes — a monday.com OAuth application created at monday.com/developers/apps; copy its Application ID (client id) and Client Secret. The platform maintainer registers one app for the central mode; a workspace can also register its own for the tenant mode.
  • For the access-token mode — a Personal API Token (v2) generated in monday.com Developer center > My access tokens.
  • The default OAuth scopes requested are:
  • Base URL: https://api.monday.com (the connector targets the /v2 GraphQL endpoint).
Goal: two one-time tasks — (1) configure the shared central OAuth client so every workspace lets its users sign in with their own monday.com account, and (2) optionally expose monday.com as a reusable capability in AI Governance so agent builders can pick it without pasting endpoint URLs. Throughout, <api-url> is your environment’s API URL (https://api.studio.prisme.ai/v2 on production).

1. Configure the connector

1

Register the OAuth application at monday.com

Open monday.com/developers/apps and create an OAuth application. Set the single authorized redirect URI (callback URL) to the core workspace callback:
(e.g. https://api.studio.prisme.ai/v2/workspaces/slug:monday/webhooks/oauthCallback on production). Add the scopes listed in Prerequisites. Save and copy the Application ID (client id) and Client Secret (the secret is shown only once).
2

Enter the credentials through the configuration app

Open the central monday workspace and launch its Configuration app<studio>/apps/monday (e.g. https://studio.prisme.ai/apps/monday). Loaded from the core workspace, the app shows the maintainer view (org owner / editor / admin only); paste the Application ID and Client Secret there and Save — the app stores them in the core workspace’s secrets for you. Do not edit Studio’s raw Secrets by hand. These credentials stay in the monday workspace and are never exposed to tenants or end users; token exchange is proxied through the core centralTokenExchange webhook so the client secret never leaves the core workspace.
3

Tell workspaces to use the central client

Each consuming workspace selects auth mode oauthCentral in the connector configuration app (no client id/secret to enter on their side). Their users then just click Connect.
4

(Optional) Publish to the Capabilities catalog

From that same maintainer view, the Add to catalog button publishes monday.com to the org-wide Capabilities catalog in one click (org owner / admin only; it stays disabled until the central client is saved). Once published, every agent builder in the org can enable monday.com from the catalog without pasting an endpoint — see Option A in the Agent builder tab.

2. Declare the capability in AI Governance

As an alternative to (or in addition to) the catalog button, you can declare monday.com as a named capability in AI Governance. Agent builders then enable that capability on their agents instead of pasting a raw MCP endpoint.
1

Open AI Governance > Capabilities

Create (or edit) the monday.com capability.
2

Point it at the MCP endpoint

Set the capability’s MCP server URL to the connector’s MCP Endpoint, and set its Scope to:
The agent_id in the scope is what lets the connector identify and authorize the calling agent.
3

Make it available to agent builders

Once created, the capability appears in the capability picker for agent builders in your organization, who enable it on their agents. Access to the catalog follows your organization’s existing roles; there is no per-capability role grant.
4

Smoke-test

From an agent that has the capability, in a workspace configured for oauthCentral, trigger any tool (e.g. me). The user is prompted to connect once (monday.com sign-in); subsequent calls reuse the stored token transparently and refresh it automatically.
Declaring the capability makes the connector available; it does not by itself authorize a specific agent. This connector follows the tenant-context model — which agents may actually call it is gated per-workspace by the authorized-agents allowlist in the configuration app (see the Workspace builder tab). There is also no OAuth auth-config JSON to attach in Governance: connect / status / disconnect are handled by the connector’s own webhooks, wired automatically.

Agent builder

Goal: let an agent you build in Agent Factory use monday.com through MCP tools.
Before an agent can call the connector, a Workspace builder must have installed and configured the monday.com app in a workspace (see the Workspace builder tab), and — for the central OAuth mode — a Platform admin must have provisioned the shared OAuth client (see the Platform admin setup accordion above).
This connector runs in the tenant app-instance context: your agent is authorized two ways at once — it is identified by the agent_id that Agent Factory injects through the capability Scope, and that agent must appear in the connector’s authorized-agents allowlist (managed in the configuration app). The monday.com access token itself is resolved server-side from the configured auth mode.There are two ways to wire it up. Pick based on how much isolation you need.

Option A — Enable the shared capability from the catalog

The fastest path: a Platform admin has already published a monday.com capability to the Capabilities catalog (see the Platform admin setup accordion above — the Add to catalog button, or §2), so you just pick it from the catalog.
1

Open your agent in Agent Factory

Open the agent you want to extend and go to its capabilities / tools.
2

Add the monday.com capability

Browse the capability catalog, select monday.com, and enable it. The MCP endpoint URL and the Scope (context_id,agent_id,user_id) are already wired by the admin — nothing to paste, and the shared instance accepts every agent, so there is no allowlist step on your side.
3

Connect a monday.com account

On the first tool call, an unconnected user is prompted to sign in — Agent Factory surfaces a connect_url to monday.com’s authorization page. After sign-in the per-user token is stored and reused on subsequent calls.
Convenient, but your agent runs against a shared, platform-managed instance: its monday.com credentials are owned by someone else and the instance accepts every agent that is granted the capability. Prefer Option B for anything beyond quick experiments.
For production agents, install the connector in your own workspace and point the agent at that workspace’s MCP endpoint.
Prefer this mode for security. Because the MCP runs in your app-instance context, the monday.com credentials, the per-user OAuth tokens and the authorized-agents allowlist are all scoped to your workspace — not shared platform-wide. You decide exactly which agents may call it and which monday.com account / auth mode backs them, and a misconfiguration elsewhere can never expose your data. The shared catalog capability (Option A) is a broad surface many agents can reach; your own workspace is an isolated, least-privilege boundary.
1

Install and configure the connector in your workspace

Follow the Workspace builder tab: install monday.com in your workspace, open its Configuration app, choose the auth mode and connect a monday.com account (or paste a Personal API Token).
2

Allowlist your agent

In that workspace’s config app, open Authorized agents and tick your agent (the Install capability button does this for you), or enable Allow all agents.
3

Add the MCP capability to your agent

In your agent, add a capability pointing at your workspace’s MCP Endpoint URL, and set its Scope to:
The agent_id is what lets the connector identify and authorize your agent — without it, every call is rejected with an explicit “agent could not be identified” message. This Scope is separate from the monday.com OAuth scopes.
4

Connect a monday.com account

On the first tool call, the user is prompted to sign in (or uses Connect in the config app). The per-user token is stored and reused; refresh is automatic.

Brief the agent in its system prompt

Whichever option you pick, wiring the capability is not enough — the agent also needs to know the tools exist and when to reach for them. Copy-pasteable starter:
Legacy AI Knowledge agents (no native MCP picker): add the connector under Advanced > Tools > MCP and paste the MCP Endpoint URL. The agent still has to be allowlisted in the config app and its identity propagated so the connector can read its agent_id.
Restricting to read-only (least privilege). monday.com tools cover both reads and writes (create/update boards, items, docs). The requested OAuth scopes are the grant. To allow only read access, set the Scopes field in the configuration app to the read-only set, dropping every :write scope, e.g.:
With central OAuth (oauthCentral) you do not create your own monday app — keep oauthCentral and enter the read scopes; your tenant scope overrides the platform default (the central app must list these read scopes). Write calls (GraphQL mutations) are then rejected by monday with a permission error. The scope is set at the workspace level (a workspace editor can widen it again).

Available Tools

All tools accept an outputFormat argument (verbose default / structured / both). monday.com IDs are numeric strings; list the parent resource first to obtain them.

Boards

Items & Subitems

Columns

Groups

Users & Teams

Workspaces

Updates (comments)

Tags, Assets, Webhooks, Notifications

Docs & Folders

Meta & Admin

Output Formats

Every tool accepts an outputFormat parameter that controls the MCP response shape:
  • verbose (default) — human-readable text optimized for LLM consumption.
  • structured — machine-readable JSON in structuredContent.
  • both — both text and structured content.

Tool Details

create_item

items_page_by_column_values

Filter board items by column values server-side.

change_column_value vs change_simple_column_value

  • change_column_value takes a typed JSON payload (e.g. {"label": "Done"} for status, {"date": "2026-05-15"} for date).
  • change_simple_column_value takes a plain string and lets monday.com infer the format (e.g. Done, 2026-05-15).
Use the typed variant when you need precise control (e.g. a people column with {"personsAndTeams":[{"id":123,"kind":"person"}]}).

create_notification

create_doc

To attach a doc to a board item, use location.board instead:

Error Handling

Common Issues

“This agent is not authorized to use this connector” — The calling agent is not in the allowlist. Open the configuration app → Authorized agents → tick this agent (id is shown in the error) or enable Allow all agents, and Save. The Install capability button does this for you. “The calling agent could not be identified” — The MCP capability Scope does not declare agent_id, so Agent Factory never injects the agent identity. Set the Scope to context_id,agent_id,user_id on the capability (this is separate from the monday.com OAuth scopes), then allow the agent in the config app. “monday.com is not connected for this user” — No per-user OAuth token is stored for the caller. Open the configuration app (OAuth mode) and click Connect, or use the agent’s connect flow. In the accessToken mode, paste a Personal API Token in the config app instead. “monday.com token refresh failed … must reconnect” — The stored refresh token was rejected by monday.com (revoked / expired). The connection is dropped automatically; the user must reconnect from the config app. “monday.com OAuth is not configured” — Neither a tenant OAuth client nor the central platform client is available. Set the OAuth client id/secret in the config app (tenant mode), or ask the platform maintainer to provision the central OAuth client from the core workspace’s config app. “Complexity budget exceeded” — monday.com rate limits by query complexity, not request count. Large items_page calls can exhaust the budget quickly. Paginate with smaller limit, or fetch fewer columns. “Invalid column value” — The payload shape depends on the column type. Prefer change_simple_column_value for simple types (text, numbers, status) and change_column_value for complex ones (people, dropdown, timeline). create_labels_if_missing only applies to status and dropdown columns.

External Resources

monday.com API

Official monday.com API reference.

Column Value Formats

Per-column-type payload reference.

monday.com Webhooks

Webhook events and payloads.

Tool Agents

Learn how Agent Factory agents consume MCP tools in Prisme.ai.