BambooHR API Overview

BambooHR's open API allows users to connect internal tools and share data across systems. This guide provides an overview of API functionality, including how to obtain API keys. Key sections include API basics, authentication, management, and getting started requirements. Users with permission can create API keys to retrieve employee data, automate processes, and generate reports. API requests are authenticated via these keys, which do not expire but must be managed carefully. For further assistance, users can access detailed documentation and troubleshooting guides. Common questions address API key creation, loss, and request issues. This resource is essential for teams working with BambooHR data.

  • May 13, 2026
  • Knowledge

Title
BambooHR API Overview
Article Text
This feature is included in the Core, Pro, and Elite packages.

What do I need to know about BambooHR's open API?

Summary

You can use BambooHR's open API (application programming interface) to connect your internal tools and share data across systems. This guide introduces how the API works and how to get started with API keys.

Table of Contents

Access our BambooHR API Documentation.

To stay up-to-date on changes to our API, click here for detailed information on historical changes and here on planned changes.

Who this is for

  • Users who create or manage API keys
  • Teams building internal tools or workflows using BambooHR data

BambooHR API basics

The BambooHR API is a RESTful service that allows you to access and modify your company's data using HTTPS requests 

With an API key, you can:

  • Retrieve employee data
  • Automate internal processes
  • Generate reports and keep systems in sync

Each request interacts with BambooHR data in a structured and secure way. Visit our API documentation to learn more.

API key authentication & request behavior

API requests are authenticated using an API key. Each request is processed as if it were made by the user who created the key. This means:

  • Access is based on the user's permissions.
  • The API can only view or update data that the user can access.
  • API keys do not expire.
  • Each key can be named to help identify its purpose. 

Because API keys provide direct access to your data, it is important to create and manage them carefully. 

If a request uses an invalid or unknown API key repeatedly, access may be temporarily blocked, and the API will return a 403 Forbidden response.

Getting started requirements

To begin using the API, you will need:

  • A BambooHR account with permission to create API keys
  • Your company domain (the part before .bamboohr.com in your URL)
  • A tool or system that will connect to BambooHR
  • An API key
  • A developer or technical resource to build or maintain the connection

After creating an API key, you can use it with tools like Postman or your internal systems to begin making API requests.

API key management

API keys are designed to be managed over time. You can enable, disable, or delete keys and monitor how they are used to help keep your data secure and organized. For step-by-step instructions, see Create & Manage API Keys.

Next steps

Use the guides below to continue:

Common questions

  1. Can I have more than one API key?
    • Yes, you can create multiple API keys for different tools or workflows.
  2. What happens if I lose my API key?
    • For security reasons, API keys are only shown once. If you lose it, you will need to create a new one.
  3. What happens if my API requests stop working
    • Check that your API key is valid, enabled, and has the correct access permissions.
URL Name
587841