Bamboo Unofficial MCP Server

BambooHR employee data and analytics via natural language AI queries.

Data last scanned today · Reviewed today

273TypeScriptNOASSERTION

Overview

This community-driven MCP server provides an interface between AI assistants and BambooHR data. It allows users to query HR information, such as time-off tracking and workforce analytics, using natural language requests directly within compatible AI clients. Installation is supported via DXT packages for Claude Desktop, direct NPX execution, or manual configuration. Once connected with a valid API key and subdomain, the server enables automated discovery and retrieval of specific employee records or custom HR reports.

Our verdict

With a high-risk security score of 27/100, this server requires caution. The project is community-maintained rather than official, and its lack of a defined license (NOASSERTION) creates significant ambiguity regarding legal usage and liability. Users should be aware that because it is not an official integration, it has not undergone formal security review and relies on a single contributor for ongoing maintenance.

  • Supports multiple installation methods including NPX and DXT
  • Provides eight distinct HR tools for data retrieval
  • Small dependency footprint with only three direct dependencies
  • High security risk rating due to lack of editorial review
  • Single contributor project increases long-term maintenance risk
  • License status is marked as NOASSERTION

Setup

Claude Desktop
{
  "mcpServers": {
    "bamboo-mcp-unofficial": {
      "args": [
        "-y",
        "@zuharz/bamboo-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What information do I need to connect to BambooHR?

You need your BambooHR API key, which can be obtained via the official BambooHR documentation, and your company subdomain.

Is this an official tool provided by BambooHR?

No, this is an unofficial community-driven project and is not affiliated with, endorsed by, or connected to BambooHR LLC.

Can this server modify my employee data?

No, the server operates in a read-only capacity and does not modify any data in your BambooHR account.

What are the environment requirements for running this server?

You need either Claude Desktop for DXT package installation or Node.js 16+ for other deployment methods.

Are there specific tools included for workforce analytics?

Yes, the server provides 8 tools including employee search, time-off tracking, workforce analytics, and custom report access.

Badge

Bamboo Unofficial MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.