Personio MCP server: connect AI agents to Personio from the EU

Personio is a Munich-based HR platform for small and mid-sized companies, covering employee records, absences, payroll preparation, recruiting and performance. It offers an official MCP server at https://app.personio.com/mcp, in open beta for customers on the Core Pro plan.

The server is disabled by default. An administrator turns it on, decides whether write actions are allowed at all, switches individual tools on or off, and can hide employee attributes such as address or IBAN from every connected AI tool.

An HR business partner can ask an agent for a list of employees in the London office who lack a phone number, then draft a reminder for each of them. A team lead can get an overview of past leave and remaining balances for direct reports before approving holidays.

Payroll and HR operations can combine compensation data with other sources, for example to find who has had no salary change in twelve months ahead of a review round. Employees can simply ask the agent to request next Friday off.

An administrator first enables Personio MCP under AI features and chooses which tools and attributes to allow. Then you add the Personio connector to an agent on inference.eu and sign in with your Personio account through OAuth.

Personio only accepts AI clients it knows about. For a client that is not on its list, Personio asks for the client's metadata document or fixed redirect URLs, so check this with your Personio contact before rollout. The token is stored encrypted in the EU and only reaches the agents you allow.

HR data is among the most sensitive data a company holds. With this connector, the agent requests data from Personio's own server, so it leaves Personio only as an answer to that request, as it would for any other AI client. Personio states that once data reaches the AI tool, your agreement with that tool's provider applies.

On inference.eu, the model that reads the answers runs in EU data centres and your connection credentials are stored encrypted in the EU. Hide attributes you never want an agent to see directly in Personio.

The server can only see and do what the signed-in employee is already allowed to in Personio, so permissions stay with your existing roles. Write access is a separate opt-in, and Personio recommends requiring approval for writes and for sensitive reads such as compensation.

On inference.eu you can make a person approve these calls before they run. A sensible setup lets an agent read absences freely, asks for approval before it reads salaries or requests time off, and keeps tools you do not need switched off.