The API Report CardAPI Index
Hibob

Hibob API

Mid-Market HRIS / HCM · hibob.com

Hibob runs a documented REST API at api.hibob.com/v1 with a public portal, webhooks, and granular per-module permissions. Auth is Basic with admin-created Service Users; the legacy token method was sunset in April 2025. Per-endpoint rate limits can throttle heavy syncs.

Last verified: August 2026HR & PayrollMCP PARTIAL
API GRADE
C
VERIFIED AUG 2026

SCORECARD

ExistenceGOODA documented REST API at api.hibob.com/v1 with a public developer portal and webhook subscriptions.
AccessMIXEDService Users are created by an admin inside the customer's account; there is no developer access without a Hibob tenant.
CoverageMIXEDModules from People to Payroll are exposed, but each service user sees only the data categories and populations granted to it.
AuthMIXEDBasic auth with a Service User ID and token pair; no OAuth flow.
Docs & DXMIXEDDocs at apidocs.hibob.com cover every module and publish an llms.txt index; no SDKs are listed anywhere.
StabilityMIXEDThe legacy API token auth was sunset April 30, 2025, forcing migrations to Service Users.
MCPPARTIALHiBob has no official MCP server or registry listing, but several community-built MCP servers for the Bob API exist on GitHub, including one actively maintained in 2026 with documented install steps. Coverage and support depend on those third-party projects. VERIFIED 2026-08
Supergood turns hard-to-integrate enterprise software into clean REST APIs and MCP tools: stable endpoints, normalized JSON, managed auth.

Frequently asked questions

Hibob scores C on Supergood's API Report Card. Hibob runs a documented REST API at api.hibob.com/v1 with a public portal, webhooks, and granular per-module permissions. Auth is Basic with admin-created Service Users; the legacy token method was sunset in April 2025. Per-endpoint rate limits can throttle heavy syncs.

Tried to integrate with Hibob?