July 2026 — At DevCon 2026, Workday made a developer-focused argument that could reshape how enterprises think about building versus buying AI capabilities in HR and finance. The company announced four interconnected products: Developer Agent, Agent-Ready Tools, Agent Passport, and a Workday Data Cloud integration with AWS.
The Strategic Shift
The announcements position Workday not just as an application suite but as a governed action layer for enterprise AI agents. Instead of forcing developers back into a Workday-only interface, the company is making its platform available inside tools developers already use.
Developer Agent
Plugs into agentic development tools including Claude Code, Cline, Codex, Cursor, and Google Antigravity. Developers can use plain language to build AI apps and agents on the Workday platform, with Developer Agent selecting relevant Agent-Ready Tools, connecting data and services, and pulling in documentation.
Why it matters: Many enterprises have central Workday teams, internal developers, implementation partners, and AI builders working across different tools. Developer Agent lets Workday participate in that environment without asking every builder to abandon their preferred workflow.
Agent-Ready Tools
These are connectors built specifically for autonomous agents rather than traditional APIs built for system-to-system integration. They let agents take actions such as looking up a record, updating a benefit, or triggering an approval while inheriting Workday’s security model, delegation rules, business process controls, and audit trail.
Why it matters: An agent that touches payroll, benefits, workforce planning, or financial data needs more than access. It needs the rules that determine who can see the data, what action is allowed, what approval path applies, and how the action will be logged.
Agent Passport
Tests, verifies, and continuously monitors Workday-built and third-party AI agents before and after deployment. Checks are tied to public standards including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS, with Cisco serving as the first attestation partner through Cisco AI Defense.
Why it matters: Agent risk is difficult to evaluate through vendor claims alone. Prompt injection, jailbreaks, system prompt extraction, employee data leakage, and unsafe outputs create different kinds of exposure when agents can act inside HR and finance workflows. Independent attestation creates a path toward comparability across vendors.
Data Cloud & AWS Integration
Bi-directional zero-copy access between AWS data services and Workday’s governed HR and finance data layer. Workday Data Lake, Workday Data Connect, and Workday Live Data Query are available to early adopter customers.
Why it matters: Agents need business context before they can act reliably. Zero-copy access lets developers point AWS tools at governed Workday data without duplicating pipelines or recreating business logic.
Availability Timeline
- Developer Agent & Agent-Ready Tools: Early access now through Workday Extend Professional; general availability projected for the second half of 2026
- Agent Passport: Early access in H2 2026, general availability before year end
- Agent System of Record: Already generally available
What This Means for HR Leaders
The build-versus-buy question has evolved. It’s no longer just about cost — it’s about control and governance. The companies that benefit most will be the ones that treat agent development like an operating model decision, not a shortcut around ERP governance.
Agent trust is becoming a buying conversation. Enterprises will increasingly ask for proof that an AI agent has been tested, monitored, and tied to recognized standards before it touches sensitive workforce workflows.
Sources: ERP Today by Tarsilla Moura (July 2, 2026), Workday DevCon press releases (June 2, 2026), CIO coverage of Agent Passport