Connect Personio to Claude

Personio has no MCP server of its own, but a documented API. XenMCP plans to run a reviewed open-source server for it in an isolated sandbox.

HR data is among the most sensitive data in a company. The server is therefore read-only, and through the API credentials in Personio you decide exactly which fields it may see at all.

What you can ask Claude

• Who from sales is absent next week?
• How many days of leave has the support team requested in December?
• Who leads the purchasing team and who is in it?
• Which absences overlap with the trade fair on 12 March?

Typical tools

list_employees

Find employees with the released fields (e.g. name, team, role)

get_employee

Read a single record with the released fields

list_absences

Show absences in a period

list_teams

Show departments and teams

What you need to connect

• A Personio plan with the Public API – according to Personio help, Core Pro is required
• API credentials (client ID and secret) from "Marketplace → Connected integrations → Create custom integration", created by an admin
• A narrow selection of the fields the integration may read (no salaries, no health data)

Security

• Read-only: the server does not change any HR data.
• You control in Personio, on the API credentials, which attributes the AI sees – release only what is really needed.
• Client ID and secret are stored encrypted with AES-256-GCM and never logged; the call log holds only tool, status and duration.
• HR data falls under the GDPR, and health data (e.g. sick notes) is a special category under Art. 9. Clarify the use with your data protection officer and, where applicable, the works council.
• Your AI client processes the results in its own infrastructure. If you want to keep the data in the EU, you can also use the xenaxio AI assistant (Mistral, EU).

Built on

We use the open server personio-mcp-server (GoMedicus) (MIT), build the image ourselves from a pinned version and review the tool descriptions before release.

Frequently asked questions