The API Report CardAPI Index
BambooHR

BambooHR API

SMB HRIS & Payroll · bamboohr.com

BambooHR gives every paying customer a free public REST API with subdomain-scoped endpoints, self-service developer registration, and PHP and Python SDKs. New marketplace apps must use OAuth 2.0 since the legacy login API was retired in April 2025. Webhooks ship with HMAC signatures.

Last verified: July 2026HR & Payroll
API GRADE
A
VERIFIED JUL 2026

SCORECARD

ExistenceGOODPublic REST API at api.bamboohr.com, subdomain-scoped per company and documented at documentation.bamboohr.com.
AccessGOODFree for all paying customers, with self-service registration on the developer portal.
CoverageGOODEmployee data is the core surface, with event-based webhooks on employee.created and employee.updated carrying changed fields.
AuthGOODBasic auth with per-user API keys for internal use; OAuth 2.0 authorization code flow is mandatory for marketplace apps.
Docs & DXGOODOfficial PHP and Python SDKs plus global and event-based webhooks signed with SHA-256 HMAC.
StabilityGOODThe legacy OpenID Connect Login API was retired in April 2025; webhooks retry up to 5 times with jitter on failures.
Supergood: BambooHR shipped a real API. Most vendors don't; we ship near-native APIs for the rest.

Frequently asked questions

BambooHR scores A on the API Report Card. BambooHR gives every paying customer a free public REST API with subdomain-scoped endpoints, self-service developer registration, and PHP and Python SDKs. New marketplace apps must use OAuth 2.0 since the legacy login API was retired in April 2025. Webhooks ship with HMAC signatures.

Tried to integrate with BambooHR?