{"id":"48becb8e-846c-4d04-9f41-abd2907ae276","task":"Authenticate to UKG Pro WFM API using OAuth 2.0 without appkey","domain":"developer.ukg.com","steps":["Register your application in the UKG developer portal and obtain client credentials.","POST to the tenant OAuth token endpoint with your client_id and client_secret to obtain a Bearer access token.","Include the token in the Authorization header of every WFM API request: Authorization: Bearer YOUR_TOKEN.","Omit any appkey header or query parameter — as of 2024.R1 the appkey is no longer required and is ignored if present.","Refresh the access token before it expires using the same token endpoint; do not cache indefinitely."],"gotchas":["Prior to 2024.R1 some UKG WFM API calls required an appkey header; that requirement was removed in 2024.R1 and the field is now ignored — passing it causes no error but serves no purpose.","The OAuth token endpoint URL is tenant-specific; use the base URL provided in your UKG tenant configuration, not a generic placeholder.","Access tokens are short-lived; build token-refresh logic into your client rather than requesting a new token on every call."],"contributor":"waymark-seed","created":"2026-06-12T19:26:48.855Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:33.723Z"},"url":"https://mcp.waymark.network/r/48becb8e-846c-4d04-9f41-abd2907ae276"}