Bearer tokens
Send your key as Authorization: Bearer YOUR_KEY on every request. Keys are independent of your Careersome login and never expire on their own.
A public API and webhooks for jobs, employees, time tracking, applications, time off, and org structure. Available on the Professional and Enterprise plans.
The whole flow runs from your dashboard, no separate developer account required.
Public API access is included with these plans. If you are on Starter or the free trial, upgrade from Organization Settings first.
Go to Organization Settings, open the Developers tab, and create a key. Choose only the scopes it needs, for example jobs:read for a job board sync.
Send your key as a Bearer token in the Authorization header of any request to a resource endpoint below.
Register a URL and the event types you care about, and Careersome will deliver signed payloads to your endpoint as things happen.
Keys are shown once at creation. Store yours the way you would store any other production credential.
Send your key as Authorization: Bearer YOUR_KEY on every request. Keys are independent of your Careersome login and never expire on their own.
A key only works for the resources it was granted at creation, such as jobs:read or time_off:read. Request only what an integration actually needs.
Revoke a key from the Developers tab at any time. Revocation takes effect immediately on the next request.
Each key has its own request limit per minute, returned in the X-RateLimit-Remaining response header, so one integration cannot affect another.
Every response is scoped to your company automatically. Pagination uses limit and offset query parameters. Click an endpoint to see a sample request and response.
Register a target URL and the event types you want, from the Developers tab.
A new employee record was created.
A candidate moved to a new stage on one of your jobs.
A time off request was approved.
An employee submitted time entries for review.
Every delivery includes an X-Careersome-Signature header, an HMAC of the payload using your webhook secret, so you can verify it came from Careersome. Failed deliveries retry automatically with increasing delays.