Yes, you can pull payroll data. Gusto exposes a broad payroll platform (companies, employees, contractors, payrolls, pay schedules, compensations, benefits, time off, and tax), readable both through its read-only AI connector and through the Embedded Payroll REST API; writing or running payroll, however, is possible only through the gated REST API.
What it can do. Yes, you can pull payroll data (run history, pay schedules, pay periods, earning types) plus company, employee, and contractor records, either read-only through the MCP server or as GET endpoints in the Embedded Payroll REST API.
Where it stops. You cannot create or run payroll, add employees, or change compensation without the gated Embedded Payroll REST API and an approved partner integration; the read-only MCP exposes none of those writes.
Gusto exposes its platform two ways. There is the read-only MCP server aimed at AI agents, and the full Embedded Payroll REST API aimed at developers. Pulling payroll data works on both surfaces; only the REST API can write or run anything.
The REST API reference covers the whole payroll operation. Companies (bank accounts, locations, federal tax details, signatories, departments, onboarding). W2 Employees (tax setup, payment methods, jobs and compensations, terminations, benefits, garnishments). 1099 Contractors (payment methods, payment groups and payments, forms). Payrolls (pay schedules, creation, calculation, submission, off-cycle runs, reversals, receipts). Time Off and Policies. Plus events and webhooks, reports, and ACH transactions. In short, most things a payroll administrator can see or do, an integration can access.
On the specific question of pulling payroll data: yes. You can read run history and detail, pay schedules, pay periods, and earning types. Through the MCP those come from read-only tools such as list_company_payrolls, get_payroll, list_company_pay_schedules, get_pay_schedule, list_company_pay_periods, and list_company_earning_types. Through the REST API the same data is available as GET endpoints, with more depth per record.
Access and authentication for the REST API run on OAuth 2.0. A developer registers an application in Gusto's Developer Portal, then exchanges credentials for system access tokens and company access tokens; access tokens expire after 2 hours and are refreshed. There is an open demo environment at api.gusto-demo.com for building, and a separate production environment for live data.
Reading is the easy part; writing is the gated part. Creating employees, editing compensation, or running payroll (the create then prepare, calculate, and submit chain) all require the Embedded Payroll REST API inside an approved partner integration. For pure reporting and analysis, the read-only MCP is enough on its own. For anything that changes data, you need the partner REST build, and no AI connector performs those writes for you.
One caveat: the getting-started page confirms application registration and OAuth but does not lay out the full partner-approval terms in a single line, so treat the exact gating as part of Gusto's partner onboarding process (uncertain on precise contractual wording).