BambooHR API and MCP server

BambooHR has no API for onboarding task lists or e-signature requests. Sign in to BambooHR once in your own Cloud Browser, and your AI agent does the work there for you. The same tools work over MCP for agents and as a REST API for scripts.

Not affiliated with BambooHR.

BambooHR has no API for this. So we run one for you.

BambooHR's own API, a GitHub MCP server and Cotlet compared
What you need BambooHR's APIGitHub MCP serverCotlet
Onboarding tasks, task lists, e-signature requests No Partly Yes, 13 tools
Acts as you, signed in 24/7 No No Yes, Cloud Browser
Fixed for you when BambooHR changes N/A No Yes, tested every 6h
Runs with your laptop off N/A No Yes, hosted

Checked Oct 16, 2026. Sources: BambooHR API: MCP Server (beta) · BambooHR API: Claude connector · BambooHR API: Getting started (API keys and OAuth) · BambooHR API reference index

Your own Cloud Browser, on 24/7. Sign in once. We keep it connected.

  1. 01Sign in to BambooHR in your own Cloud Browser

  2. 02Connect it for your agents

  3. 03Cotlet keeps it signed in and working

How do I connect BambooHR to Claude, ChatGPT or my code?

AI agents connect over MCP, scripts call the REST API. Both reach the same 13 tools with one API key.

For AI agents: MCP

Add Cotlet to your agent once. BambooHR and every other app you connect show up as its tools.

  • Claude
  • ChatGPT
  • OpenClaw
  • Hermes
  • GrokBot
  • Cursor
  • n8n
  • Any MCP client
  1. 1

    Add Cotlet to your agent

    Claude Code
    claude mcp add --transport http cotlet \
      https://cotlet.dev/mcp/v1 \
      --header "Authorization: Bearer $COTLET_API_KEY"
    Cursor
    {
      "mcpServers": {
        "cotlet": {
          "url": "https://cotlet.dev/mcp/v1",
          "headers": {
            "Authorization": "Bearer ${COTLET_API_KEY}"
          }
        }
      }
    }
    Codex
    # ~/.codex/config.toml
    [mcp_servers.cotlet]
    url = "https://cotlet.dev/mcp/v1"
    bearer_token_env_var = "COTLET_API_KEY"

    Paste the snippet for your client. The same server and key serve every app you connect, so you do this once.

For scripts: REST API

Every tool is an endpoint under /api/v1/bamboohr with its own method and path, such as POST /api/v1/bamboohr/tasks/{task_id}/employees/{employee_id}/task/complete, with the same API key. Our open-source repo has ready scripts to start from.

REST API docs

What can the BambooHR API and MCP server do?

13 tools on your own BambooHR account. Agents call them as operations of the MCP tools bamboohr_read and bamboohr_write; scripts call each one at its own REST endpoint, with the same inputs and answers.

BambooHR tools in Cotlet's MCP server and REST API
Tool What it does Access
find_employee Employees matching a name in the directory, with the employee ID the other tools need. read
list_task_lists Task lists and their tasks from the Onboarding or Offboarding settings. read
list_onboarding_tasks Onboarding tasks on an employee's Onboarding tab with list, assignee, due date and status. read
list_offboarding_tasks Offboarding tasks on an employee's Offboarding tab with list, assignee, due date and status. read
list_signature_templates E-signature templates on the Files tab, with the folder the signed copy is saved to. read
list_signature_requests Signature requests from the Signed Documents report: who has signed and who is still pending. read
list_pending_time_off_requests Time off requests waiting for approval in your BambooHR inbox, or in the company inbox for admins. read
add_task_lists Import onboarding or offboarding task lists to an employee, as Add Task List(s) and Save Tasks do. writeasks first
update_employee_task Change who a task is assigned to or when it is due, on one employee's checklist. writeasks first
complete_employee_task Mark one onboarding or offboarding task done, or open it again. writeasks first
request_signature Send an e-signature template to one or more employees. writeasks first
remind_signature_signers Send a reminder for pending signature requests, as the Signed Documents report does. writeasks first
decide_time_off_request Approve or deny a time off request waiting for you. writeasks first

Scroll the table for all 13 tools.

Ask in plain words. Your agent does the rest.

Is it safe to connect BambooHR?

You sign in yourself in your own Cloud Browser, we never save your password, and anything that reaches your readers waits for your OK. The browser profile is encrypted in the EU. Independent scanners grade cotlet.dev A+.

How much do the BambooHR API and MCP server cost?

One price for both: a tool call costs the same over MCP or REST. Free 7-day trial with 2,000 credits, no card needed. Then one-time credit packs, no subscription, valid 12 months. Most calls use 25 credits, and your Cloud Browser uses 50 credits a day while BambooHR is enabled for agents, so 20 calls a day come to 550 credits.

Cotlet credit packs: price, credits and calls at 25 credits each
Credits Price, one time Calls at 25 credits Per 1,000 credits
5,000 $29 200 $5.80
15,000 $79 600 $5.27
32,000 $149 1,280 $4.66
60,000 $249 2,400 $4.15

Only successful calls use credits; failed calls and timeouts cost nothing. At a balance of 0 calls pause, never a surprise charge. Authenticate with the Authorization: Bearer header.

Questions

Does BambooHR have an API?

Yes. BambooHR has a public REST API (API key or OAuth) and a beta MCP server at {your-subdomain}.bamboohr.com/api/mcp that an admin must switch on under Settings > Apps > AI Connectors (checked 16 Oct 2026). Both cover employees, time off, goals and hiring, and the API also moves file contents. Neither has an endpoint or tool for onboarding and offboarding task lists or for e-signature requests, and the beta MCP reads file metadata only.

How do I get access?

Sign up free, open BambooHR under Integrations in the console and press Request access. Your free trial starts with your account, no card needed.

Is the MCP server different from the API?

No, only the way in. Cotlet builds each integration as a REST API and puts an MCP server on top, so both have the same 13 tools, the same inputs and answers, one API key and one price. AI agents such as Claude, ChatGPT or Cursor use MCP; scripts, cron jobs and HTTP steps in n8n, Make or Zapier use the REST API.

What is the Cloud Browser?

Your own Chrome that Cotlet runs for you in the EU, around the clock. You open it from the console, sign in to BambooHR yourself and press Enable for agents. Your agent's calls go through it, from its IP with its cookies, so BambooHR sees the browser you signed in with. Password saving is off and the profile is stored encrypted with AES-256-GCM.

Can my agent act without asking me?

Not on anything that reaches other people: add_task_lists, update_employee_task, complete_employee_task, request_signature, remind_signature_signers, decide_time_off_request wait for your OK by default. You can switch that off per tool for scheduled runs.

Which BambooHR plan do I need?

BambooHR's e-signature feature is included in the Core, Pro and Elite packages. BambooHR's API documentation does not say which plans include the API or the MCP server, and Cotlet needs only that your account can use the screens the tools act on.

Should I use a BambooHR MCP server from GitHub instead?

Pick one if you want the code on your own computer and do not mind the upkeep: you install it, sign it in and fix it when BambooHR changes. Pick Cotlet if you want it hosted and kept working for you.

Can I use it in n8n, Make or Zapier?

Yes. Add https://cotlet.dev/mcp/v1 in n8n's MCP Client node, or call the REST endpoints from an HTTP step in Make or Zapier.

Who runs Cotlet?

Cotlet is run by Take Group, a Polish software company working since 2019. Take Group runs about 3,200 websites on its own systems and has its own DevOps team for infrastructure security. We built and used integrations like this inside the company for years before opening them as Cotlet.

Is Cotlet affiliated with BambooHR?

No. Cotlet is independent and not affiliated with BambooHR.

Give your agent access to BambooHR.

Free 7-day trial with 2,000 credits, no card needed.