BambooHR

At a Glance

Difficulty

⚡MODERATEAPI key authentication, with no partnership or app review

Authentication

Basic AuthAPI key over HTTP Basic, not OAuth. Each consumer supplies their own API key plus their BambooHR subdomain.

Webhooks

Virtual webhooks (Apideck polls BambooHR for employee created, updated and terminated events)

Partnership Required

No(Not required for API access. Listing on the BambooHR Marketplace is a separate, optional programme (100+ customers, security review).)

Partnership Application

BambooHR Apps Marketplace Program↗

Apideck Credentials

Not available(Not available: each consumer generates and supplies their own API key and subdomain.)

Costs

Included with any BambooHR subscription, which BambooHR prices per employee per month; no separate API fee.

Sandbox Availability

Available — Access Sandbox↗(Free developer test accounts from the BambooHR Partner Portal (two per developer, dummy data only, no load testing).)

Account Type Required

Any BambooHR account (Core, Pro or Elite).

Consumer Access Level

Account Owner recommended, otherwise a custom access level carrying the permissions your integration needs.

Rate Limits

Not published. BambooHR throttles at its discretion and returns Retry-After; from 14 September 2026 that response changes from 503 to 429.

Responsibility matrix

Environments

Single environment

BambooHR uses one set of credentials, an API key plus the account subdomain, for both testing and production, so there is no separate sandbox with its own credentials. To test, use a free BambooHR trial, a developer test account requested from the BambooHR Partner Portal, or the consumer's own account. Apideck cannot supply temporary shared test credentials for BambooHR, because the connector has no Apideck-hosted application. Take care when testing against a live account holding real employee records.