Bamboohr MCP Server

BambooHR data management through 74 MCP tools across 11 modules.

Data last scanned today · Reviewed today

242 dangerous tools74 tools10TypeScriptMIT

Overview

BambooHR MCP Server allows AI assistants to interact directly with HR data, covering areas like time tracking, recruitment, benefits, and employee records. By implementing the Model Context Protocol, it enables users to query their organization's HR metrics, manage PTO requests, and retrieve training compliance reports using plain language commands. The server features 74 specific tools mapped to 11 functional modules within BambooHR. Setup is streamlined via an npx-runnable package, requiring only an API key and company subdomain to integrate with MCP-compatible clients.

Our verdict

This server receives a security score of 24/100, indicating a high risk level. The lack of a read-only mode means every installation is granted full write access to your organization's sensitive HR platform, which requires careful handling. Because it is a community-maintained project rather than an official integration and lacks OAuth support, it is best suited for controlled testing environments rather than broad deployment within corporate infrastructure.

  • Provides comprehensive coverage across 11 BambooHR API modules
  • Uses only three direct dependencies to reduce supply-chain surface
  • Includes 30 pre-built role-based skill workflows
  • Grants full write access by default with no read-only mode
  • Community-maintained without official vendor support or auditing
  • Missing OAuth support for secure authentication

Setup

Claude Desktop
{
  "mcpServers": {
    "bamboohr-mcp": {
      "args": [
        "-y",
        "bamboohr-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
bamboohr_get_employeeGet an employee record by IDlow
bamboohr_list_employeesList all employees in the directorylow
bamboohr_create_employeeCreate a new employeemedium
bamboohr_update_employeeUpdate employee fieldsmedium
bamboohr_get_updated_employee_idsGet IDs of recently changed employeeslow
bamboohr_get_company_infoGet company account detailslow
bamboohr_get_time_off_typesList all leave typeslow
bamboohr_get_time_off_policiesList all time-off policieslow
bamboohr_get_time_off_requestsGet requests by date range, status, employeelow
bamboohr_create_time_off_requestSubmit a time-off requestmedium

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What are the environment requirements for running this server?

This server requires Node.js version 18 or higher.

What information is required from BambooHR to configure the server?

You need an API key generated from the API Keys section of your BambooHR profile and your company's unique subdomain, which is the prefix found in your BambooHR URL.

Which MCP-compatible clients can I use with this server?

The server is compatible with Claude Desktop, the Claude Code CLI, and any other MCP-compatible client.

How many tools are provided by the server?

The server includes 74 distinct MCP tools covering 11 different BambooHR modules, including employees, time off, time tracking, ATS, and benefits.

Badge

Bamboohr MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.