Employer & admin
API and webhooks
Updated September 13, 2026
The platform API lets an Enterprise workspace read candidate and interview data and receive webhook events without polling the dashboard.
Authentication
Requests carry a bearer token scoped to your workspace; when a token can act across more than one workspace, an explicit realm header picks which one a given call applies to, the same disambiguation the topbar realm picker does for a signed-in user.
Webhooks
Subscribe to events like a candidate's application, a completed interview, or a finished CV batch. Each delivery is signed so you can verify it came from HireSuite, and a failed delivery is retried with backoff rather than dropped.
Rate limits and idempotency
Mutating endpoints accept an idempotency key, so a retried request after a timeout never creates a duplicate record — the same pattern this help centre uses internally for ticket replies and CV batch uploads.