diff --git a/src/workforce.js b/src/workforce.js
index 7918053..19c1644 100644
--- a/src/workforce.js
+++ b/src/workforce.js
@@ -13,7 +13,9 @@ async function getWorkforceCreds() {
   })
   if (!res.ok) throw new Error(`Failed to fetch Workforce credentials from settings: ${res.status}`)
   const creds = await res.json()
-  if (!creds.email || !creds.password) throw new Error('Workforce credentials not configured in settings')
+  if (!creds.bearer_token && (!creds.email || !creds.password)) {
+    throw new Error('Workforce credentials not configured in settings — set a bearer token or email/password')
+  }
   _credsCache = { creds, expires_at: Date.now() + 5 * 60_000 }
   return creds
 }
@@ -21,6 +23,12 @@ async function getWorkforceCreds() {
 async function getWorkforceToken() {
   const creds = await getWorkforceCreds()
   const baseUrl = creds.base_url || 'https://my.workforce.com'
+
+  // Use bearer token directly if configured — no OAuth exchange needed
+  if (creds.bearer_token) {
+    return { token: creds.bearer_token, baseUrl }
+  }
+
   if (_tokenCache && _tokenCache.base_url === baseUrl && Date.now() < _tokenCache.expires_at) {
     return { token: _tokenCache.access_token, baseUrl }
   }