Hibob API
Hibob (bob) is an AI-powered, all-in-one HR and payroll platform covering core HR, talent management, payroll and benefits, workforce planning, compensation, and time and attendance. An API lets you programmatically pull employees, time-off requests, attendance entries, salary and payroll data, documents, and reports—and push updates like employee changes, time entries, and lifecycle events back into bob.
What is Hibob?
Hibob (the product is called bob) is an AI-powered, all-in-one HR and payroll platform that helps companies manage core HR, talent, payroll, workforce planning, compensation, and finance from a single system of record. Customers use bob to run organization structure and employee self-service, automate onboarding, manage performance reviews and compensation cycles, process US and UK payroll, administer benefits, track time and attendance, and plan headcount tied to budget forecasting.
Core product areas include:
- Core HR (org structure, employee self-service, document management, time & attendance, real-time analytics)
- Talent Management (hiring, onboarding, performance reviews, learning, skills tracking)
- Payroll & Benefits (US and UK payroll processing, benefits administration, compliance)
- Workforce Planning & Compensation (headcount planning, compensation cycles, pay bands, scenario modeling)
- Finance (financial planning, forecasting, people-powered financial insights)
- Bob AI (embedded AI assistant for productivity, data analysis, and decision support)
Common data entities:
- Employees, People records, Avatars, Org structure, Custom tables and fields
- Salary history, Variable payments, Actual payments, Bank accounts
- Time-off requests, Time-off policies, Balances
- Attendance entries, Clock in/out, Daily breakdowns, Projects and tasks
- Documents (confidential, shared, custom folders), Tasks, Named lists
- Job catalog (profiles, roles, families), Goals and key results, Reports
The Hibob Integration Challenge
Teams run mission-critical people and payroll workflows on bob daily, but turning them into reliable API-driven automation comes with friction:
- Service-user setup gates: API access requires provisioning service users with the right scopes, and permissioning differs by customer configuration and field-level access
- Custom fields and tables: bob's flexible custom tables, named lists, and per-tenant fields mean generic integrations break across instances
- Spread across modules: People, payroll, time off, attendance, documents, and reports each have their own resources, IDs, and response shapes
- Rate limiting: API calls are throttled, so high-volume people-data sync and report pulls need careful pacing and backoff
- Sensitive payroll and PII data: Salary, bank account, and confidential document access demand encryption, scoping, and audit trails
- Lifecycle event timing: New-hire, activation, termination, and update events must be captured precisely to keep downstream systems in sync
How Supergood Creates Hibob APIs
Supergood delivers a resilient, normalized API layer over your bob instance—working with service-user authentication and bob's documented resources to give you consistent objects across people, payroll, time, and documents.
- Authenticates with service users and manages token scopes and rotation securely
- Handles rate limiting with adaptive throttling, retries, and backoff
- Normalizes responses across People, Payroll, Time off, Attendance, Documents, and Reports so you integrate once
- Preserves tenant-specific custom tables, named lists, and fields rather than forcing a generic schema
Use Hibob with AI agents: Hibob MCP Server →
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your modules, service-user scopes, and custom fields.
- Supergood Generates and Validates Your API
We deliver a production-ready bob adapter tailored to your instance configuration and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as bob evolves.
API Endpoints
Authentication
/authenticateAuthenticate to a bob tenant using a service user ID and token and obtain a session for downstream calls.
People
/peopleSearch and read employee records by ID or email, including profiles, org structure, and custom fields.
People
/create_employeeCreate or update an employee record, including lifecycle fields and custom table entries.
Time Off
/time_offList time-off requests, policies, and balances with filters for employee, status, and date range.
Attendance
/attendanceRetrieve attendance entries, clock in/out records, and daily breakdowns for projects and tasks.
Payroll
/payrollPull salary history, variable payments, actual payments, and bank account details for payroll sync.
Documents
/documentsUpload and download employee documents across confidential, shared, and custom folders.
Reports
/reportsGenerate and download reports asynchronously in multiple formats from the reporting API.
Use Cases
Sync bob people data to your warehouse and downstream tools
- Pull employee records, org structure, and custom fields from bob into a single warehouse - Stream new-hire, activation, termination, and update lifecycle events to downstream systems - Reconcile people data across HRIS, identity, and finance tools for a single source of truth
Automate payroll and compensation workflows
- Pull salary history, variable payments, and bank account details for payroll runs - Push compensation-cycle changes back into bob without manual entry - Reconcile actual payments against pay bands and budget forecasts
Integrate time off and attendance with scheduling and finance
- Sync time-off requests, policies, and balances into scheduling and capacity tools - Pull attendance entries, clock in/out, and daily breakdowns for project costing - Route approvals and accruals to downstream systems without portal clicks
Automate documents, reports, and onboarding
- Upload and download employee documents across confidential and shared folders - Generate and pull reports asynchronously for analytics and compliance - Trigger onboarding workflows and document e-sign completions via webhooks
Technical Specifications
Authentication
Service-user ID and token, with scopes and credential rotation handled in a managed session
Connectivity
bob's documented REST API resources surfaced through a normalized Supergood adapter
Response format
Normalized JSON across People, Payroll, Time off, Attendance, Documents, and Reports objects
Rate limits
Adaptive throttling tuned to bob's enforced rate limits to avoid 429s on high-volume syncs
Session management
Automatic token handling, scope validation, and credential rotation
Data freshness
Near real-time reads for people, time off, and attendance with optional scheduled batch syncs
Security
Encrypted credential vault, scoped access, SOC 2-aligned controls, and audit logging for PII and payroll
Webhooks
Lifecycle events for employee created, activated, terminated, updated, table entries, and document e-sign completion
Latency
Sub-second reads on cached entities; multi-second waits on asynchronous report generation
Throughput
Horizontally scaled workers sized to enterprise headcount and report volume
Reliability
Retry, backoff, and idempotency keys for employee updates and payroll writes
Adaptation
Continuous monitoring of bob API releases and tenant-specific custom table and field drift
Frequently asked questions
bob uses service users for API authentication—a service-user ID and token scoped to the resources you need. Supergood manages these credentials, scopes, and rotation in a secure session so you never handle raw tokens.
Yes. Salary history, variable payments, actual payments, and bank account details are exposed through the same normalized surface, so payroll and compensation data sits alongside people, time off, and attendance entities.
Each tenant is profiled against its configured custom tables, named lists, and fields. Supergood preserves these per-instance structures rather than forcing a generic schema, so your custom data flows through intact.
Yes. bob supports webhooks for employee lifecycle events (created, activated, terminated, updated), table entries, and document e-sign completions, which Supergood relays to your systems for real-time sync.
bob enforces rate limiting on API calls. Supergood applies adaptive throttling, retries, and backoff so high-volume people-data syncs and report pulls stay within limits without dropping data.