The API Report CardAPI Index
BambooHR

BambooHR API

SMB HRIS & Payroll · bamboohr.com

BambooHR gives every paying customer a free public REST API with subdomain-scoped endpoints, self-service developer registration, and PHP and Python SDKs. New marketplace apps must use OAuth 2.0 since the legacy login API was retired in April 2025. Webhooks ship with HMAC signatures.

Last verified: August 2026HR & PayrollMCP PARTIAL
API GRADE
A
VERIFIED AUG 2026

SCORECARD

ExistenceGOODPublic REST API at api.bamboohr.com, subdomain-scoped per company and documented at documentation.bamboohr.com.
AccessGOODFree for all paying customers, with self-service registration on the developer portal.
CoverageGOODEmployee data is the core surface, with event-based webhooks on employee.created and employee.updated carrying changed fields.
AuthGOODBasic auth with per-user API keys for internal use; OAuth 2.0 authorization code flow is mandatory for marketplace apps.
Docs & DXGOODOfficial PHP and Python SDKs plus global and event-based webhooks signed with SHA-256 HMAC.
StabilityGOODThe legacy OpenID Connect Login API was retired in April 2025; webhooks retry up to 5 times with jitter on failures.
MCPPARTIALBambooHR has publicly announced MCP connections as part of its Bamboo AI platform, but has not yet published its own server with public install docs or a registry listing. Several actively maintained community MCP servers cover the BambooHR API in the meantime. VERIFIED 2026-08
Supergood turns hard-to-integrate enterprise software into clean REST APIs and MCP tools: stable endpoints, normalized JSON, managed auth.

Frequently asked questions

BambooHR scores A on Supergood's API Report Card. BambooHR gives every paying customer a free public REST API with subdomain-scoped endpoints, self-service developer registration, and PHP and Python SDKs. New marketplace apps must use OAuth 2.0 since the legacy login API was retired in April 2025. Webhooks ship with HMAC signatures.

Tried to integrate with BambooHR?