API and integrations

Connect Selfcare to the rest of your company

A documented REST API, signed webhooks and an MCP server for AI assistants. Everything acts as the person who sets up the integration and sees only what they see in the app.

Included in every plan, at no extra cost.

Acts as the person

Every request is worth what the role of whoever created the key or authorized the app is worth. Nobody sees through the API what they do not see in the app.

Secure by default

Salaries, medical certificates and health or disciplinary documents never leave. The IBAN is always masked and every write goes to the audit log.

Built for developers

OpenAPI 3.1 in Portuguese and English, stable error codes, cursor pagination, Idempotency-Key, a test company and a TypeScript SDK.

MCP: Selfcare inside your AI assistantNew

Connect Claude, ChatGPT or Cursor to Selfcare in two minutes. Each person signs in with their own account, and the assistant can then book vacation, record expenses, read documents and handle approvals.

  • Sign in with the Selfcare account and pick the company, no keys to copy
  • The assistant sees only what the person sees, with the API's scopes and limits
  • Every action goes to the company's audit log, marked as coming from the assistant
  • Revoke access whenever you want in Settings → API
How to connect →

REST API: vacation, expenses, documents and people

Read and write what your team does in Selfcare from your ERP, time tracking, BI or your own tool.

  • Absences and vacation balances, approvals, expenses with receipts, per diem and documents
  • Employees, teams, contracts and compensation, with sensitive scopes for the owner and HR only
  • Personal keys with chosen scopes, or OAuth 2.1 with PKCE for apps used by several people
  • A test company with fictitious data and its own keys, to build without touching real data
Quick start →

Your own mobile app, with vacation, expenses and notifications

Everything an employee app needs: native sign-in, notifications and a home screen in one call.

  • Native sign-in with OAuth 2.1 and PKCE, tokens that rotate on every refresh
  • Push notifications when an absence or expense is decided, with no names or amounts on the lock screen
  • A home screen summary: balance, upcoming absences, approvals and documents to read
  • Expenses with a photo of the receipt, sent straight to secure storage
Mobile app guide →

Webhooks: know the moment something changes

Your server gets a signed notice when an absence is approved, an expense is paid or an employee changes.

  • More than 30 events: absences, expenses, business trips, documents, people and teams
  • HMAC signature with a timestamp and automatic retries for 24 hours
  • The notice carries only ids and statuses: read the rest through the API, with the permissions of whoever set it up
Webhooks guide →

Security and control

The API was designed for HR data. The owner and HR always have the last word.

  • Per-company isolation in the database, as in the app
  • Keys stored only as a hash, shown once, revoked when the password changes
  • Emergency block of the whole API, by the owner or HR
  • Limits per key, per company and per app, with clear headers
  • Data hosted in the European Union

Looking for a ready-made integration?

Coverflex already lands in the payslip with no retyping, and more connections are on the way.

See integrations

Questions about the API

Does the API cost extra?+

No. The API, webhooks and the MCP server are included in every plan.

Can I read salaries or payslips?+

Payroll stays out of the API and the MCP server. Through the API, each person sees their own payslips already issued, as in the app; through MCP, payslips, contracts and ID documents never leave.

Who can create keys?+

Anyone in the company, for themselves, with what their role allows. The owner and HR see and revoke every key.

Which AI assistants work with Selfcare?+

Any MCP client with OAuth, such as Claude, ChatGPT or Cursor. Clients without OAuth can use a personal key.

Is there a test environment?+

Yes. Create a test company with fictitious data and its own keys, without touching real data.

Start with the documentation

Guides, curl and TypeScript examples and the full reference, in Portuguese and English.

HR API and integrations: REST API, webhooks and MCP · Selfcare