Bluewoo API.
Programmatic access to your HR.
A REST API over the same data and policies HeyBlue answers from. Build integrations, run automation, ship custom workflows. The full reference lives on the HRMS app at hrms.bluewoo.com/api-reference — auto-generated from the live NestJS controllers, so it never drifts from production.
What the API
covers.
Every endpoint respects the same RBAC HeyBlue does. The CEO and the intern get answers scoped to what each is allowed to see — programmatic queries are no exception.
Employee + org data
Read and write employee records, org charts, contracts, and lifecycle events. Permission-aware on every call.
Time off + workflows
Submit, approve, and query vacation requests, sick leave, and approval workflows. Mirrors the HeyBlue surface.
Documents + signatures
Upload templates, send for e-signature via Skribble, query audit trail entries. Same data the chat assistant reads from.
Dashboards + analytics
Pull headcount, turnover, time-off utilization, compensation overview. Drill-downs respect role permissions.
HeyBlue queries
Send natural-language questions to HeyBlue programmatically. Answers come back grounded in your tenant's policies and data.
Webhooks + events
Subscribe to lifecycle events (hire, leave-approved, document-signed) and route them into your own systems.
Auth, regions, and
rate limits.
Fundamentals first. Detail in the live reference.
Bearer-token auth
API keys per workspace, scoped to a role. Rotate any time. SSO-issued tokens supported on Enterprise.
Swiss / EU residency
API endpoints live alongside the application tier in europe-west6 (Zurich) by default. Germany on request, EU/EFTA on Enterprise.
Rate limits + audit
Per-tenant rate limits sized to plan. Every API call shows up in the same immutable audit log as in-product actions.
OpenAPI compliance
The reference is generated directly from the NestJS controllers — every shipped endpoint is documented with shape, auth requirement, and example payloads.
Browse the live API reference.
32 modules. ~490 endpoints. Auto-generated from production NestJS controllers, so it never drifts. Hosted on hrms.bluewoo.com behind the same authentication as the rest of the application surface.
Auto-generated from live controllers — never stale
Auto-generated from live controllers — never stale
Permission-aware: same RBAC as HeyBlue
Permission-aware: same RBAC as HeyBlue
Need an API key? Talk to us via /contact
Need an API key? Talk to us via /contact