POST
/
passthrough
/
{tool}
/
{api}
curl --request POST \
  --url https://api.kombo.dev/v1/passthrough/{tool}/{api} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-Integration-Id: <x-integration-id>' \
  --data '{
  "method": "GET",
  "path": "/company/employees"
}'
{
  "status": "success",
  "data": {
    "url": "<string>",
    "status": 123,
    "headers": {},
    "data": "<string>"
  }
}

At Kombo we put a lot of work into making sure that our unified API covers all our customers’ use cases and that they never have to think about integration-specific logic again. There are cases, however, where our customers want to build features that are very integration-specific. That’s where this endpoint comes in.

Pass in details about the request you want to make to the integration’s API and we’ll forward it for you. We’ll also take care of setting the right base URL and authenticating your requests.

To get started, please pick the relevant API (some tools provide multiple to due different base URLs or authentication schemes) from the table below and pass in the {tool}/{api} identifier as part of the path.

Integration{tool}/{api}Description
Personiopersonio/personnelPersonio’s Personnel Data API. We automatically authenticate all requests using the client ID and secret and use https://api.personio.de/v1 as the base URL.
Personiopersonio/personnelv2Personio’s V2 Personnel Data API. We automatically authenticate all requests using the client ID and secret and use https://api.personio.de/v2 as the base URL.
Workdayworkday/soapWorkday’s SOAP API. We automatically authenticate all requests. Set data to your raw xml string. Use / as your path, as we will always send requests to https://\{domain\}/ccx/service/\{tenant\}/\{service_name\}. Set your method to POST. You need to specify the api_options object and set service_name to the name of the service you want to call. Find all available services here. The string that you submit as data will be the content of the soapenv:Body tag in the request.
SAP SuccessFactorssuccessfactors/odata-v2SuccessFactors’ OData V2 API. We automatically authenticate all requests and use https://\{api_domain\}/odata/v2 as the base URL.
SmartRecruiterssmartrecruiters/defaultSmartrecruiters API. We automatically authenticate all requests using OAuth and use https://api.smartrecruiters.com as the base URL.
SmartRecruiterssmartrecruiters/defaultSmartrecruiters API. We automatically authenticate all requests using the credentials supplied by the customer and use https://api.smartrecruiters.com as the base URL.
Factorialfactorial/apiFactorial’s API. We automatically authenticate all requests and use https://api.factorialhr.com/api or https://api.demo.factorial.dev/api as the base URL, depending on the connected instance.
Oracle Recruiting Cloudoraclerecruiting/restOracles’s REST API. We automatically authenticate all requests and use ‘https://{company_url}’ as the base url.
Leverlever/v1Lever’s v1 API. We automatically authenticate all requests using the partner credentials which have been configured in the Lever tool settings (this uses Kombo’s partner credentials by default).
iCIMSicims/defaultiCIMS Default API. We automatically authenticate all requests and use https://api.icims.com/customers/\{customer_id\} as the base url.
Recruiteerecruitee/defaultThe Recruitee API. We automatically authenticate all requests and use https://api.recruitee.com/c/\{company_id\} as the base URL.
Greenhousegreenhouse/harvestGreenhouse Harvest API. We automatically authenticate all requests using the API key and use https://harvest.greenhouse.io/v1 as the base URL.
Greenhouse Job Boardgreenhousejobboard/boards-apiGreenhouse Job Board API. We automatically authenticate all requests and use ‘https://boards-api.greenhouse.io/v1/boards/\{job_board_token\}’ as the base URL. Optionally, you can provide a custom job_board_token to use a different job board.
Teamtailorteamtailor/v1Teamtailor’s JSON-API. We authenticate all request with the Teamtailor API key and use the base URL https://api.teamtailor.com/v1.
Ashbyashby/v1Ashby’s V1 API. We automatically authenticate all requests with the provided credentials and use https://api.ashbyhq.com as the base URL. Please note that Ashby uses an RPC-style API. Please check the Ashby API documentation for details on how to use it.
Onlyfyonlyfy/v1Onlyfy’s Public v1 REST API. We automatically authenticate all requests using the apikey header and use https://api.prescreenapp.io/v1 as the base URL.
Personiopersonio/recruitingPersonio’s Recruiting API. We automatically authenticate all requests using the Recruiting access token and use https://api.personio.de/v1/recruiting as the base URL.
Personiopersonio/recruitingV2Personio’s V2 Recruiting API. We automatically authenticate all requests using the Recruiting access token, send the Beta header and use https://api.personio.de/v2/recruiting as the base URL.
Personiopersonio/jobboardAPI endpoints exposed on Personio’s public job board pages (currently just the XML feed). We automatically use the right https://\{company\}.jobs.personio.de base URL.
UKG Proukgpro/recrutingUKG Pro’s Recruiting API. We automatically authenticate all requests and use https://\{hostname\}/talent/recruiting/v2/\{tenantalias\}/api as the base URL.
UKG Proukgpro/defaultUKG Pro’s HRIS API. We automatically authenticate all requests and use https://\{hostname\} as the base URL.
UKG Readyukgready/apiUKG Ready API. We automatically authenticate all requests using the provided credentials and use https://\{pod_url\} as the base URL.
ADP Workforce Nowadpworkforcenow/defaultADP Workforce Now API v2. We automatically authenticate all requests and use the correct subdomain.
Taleotaleo/soapTaleo’s API. We automatically authenticate all requests and use ‘https://{your-subdomain}.taleo.net/enterprise/soap’ as base URL.
rexx systemsrexx/defaultRexx’s HRIS export API. There is only one endpoint: Get /
AFAS Softwareafas/apiAFAS’ API. We automatically authenticate all requests and use https://\{domain\}/ProfitRestServices as the base URL.
BambooHRbamboohr/v1BambooHR’s API. We automatically authenticate all requests using the customer credentials https://api.bamboohr.com/api/gateway.php/\{subdomain\}/v1 as the base URL.
Bullhornbullhorn/defaultBullhorn’s API. We automatically use the right https://rest.bullhornstaffing.com/rest-services/\{corpToken\} base URL.
Workableworkable/v1Workable’s API. We automatically authenticate all requests using the client ID and secret and use https://\{subdomain\}.\{environment\}.com/spi/v3 as the base URL.
PayFitpayfitcustomer/apiPayFit Partner API. We automatically authenticate all requests using the provided API key and use https://partner-api.payfit.com as the base URL.
Jobvitejobvite/apiWe automatically authenticate all requests and use ‘https://api.jobvite.com/api/v2’ as the base URL.
Employment Heroemploymenthero/defaultEmploymentHero API. We automatically authenticate all requests using the credentials supplied by the customer and use https://api.employmenthero.com/api as the base URL.
Fountainfountain/v2Fountain’s Hire API. We automatically authenticate all requests and use https://api.fountain.com/v2 as the base URL.
Kenjokenjo/apiKenjo’s API. We automatically authenticate all requests using the API key and use https://api.kenjo.io/ as the base URL.
HeavenHRheavenhr/v2HeavenHR API. We automatically authenticate all requests using the provided credentials and use https://api.heavenhr.com/api/v2 as the base URL.
HiBobhibob/v1HibBob’s v1 API. We automatically authenticate all requests using the service user credentials (or, for old integrations, the API key) and use https://api.hibob.com/v1 as the base URL.
Softgardensoftgarden/frontend-v3[Softgarden’s Frontend API v3](https://dev.softgarden.de/frontend-v3/. We automatically authenticate all requests and use ‘https://api.softgarden.io/api/rest’ as base URL.
Softgardensoftgarden/apply-apiSoftgarden’s Apply API. We automatically authenticate all requests and use ‘https://jobdb.softgarden.de/jobdb/public’ as base URL.
Cezanne HRcezannehr/dataserviceCezanneHR’s v7 dataservice API.We automatically authenticate all requests and use the base URL https://subdomain.cezanneondemand.com/cezanneondemand/v7/dataservice.svc
Microsoft Entra IDentraid/v1AzureAD’s API. We automatically authenticate all requests.
Microsoft Azure ADazuread/v1AzureAD’s API. We automatically authenticate all requests.
Google Workspacegoogleworkspace/peopleGoogles’s API. We automatically authenticate all requests and use ‘https://people.googleapis.com’ as the base URL.
Google Workspacegoogleworkspace/adminGoogles’s API. We automatically authenticate all requests and use ‘https://admin.googleapis.com’ as the base URL.
Pinpointpinpoint/v1Pinpoint’s JSON:API. We automatically authenticate all requests using the X-API-KEY header and use https://\{subdomain\}.pinpointhq.com/api/v1 as the base URL.
d.vincidvinci/rest-apiDVinci REST API.
d.vinci admindvinciadmin/rest-apiDVinci REST API.
d.vinci admindvinciadmin/odata-apiDVinci ODATA API.
Deeldeel/apiDeel’s API. We automatically authenticate all requests using the provided credentials and use https://\{api_domain\}/rest as the base URL.
Remoteremotecom/defaultRemote’s API. We automatically authenticate all requests using provided credentials.
IRIS Cascadeiriscascade/v2IRIS Cascade HR API. We automatically authenticate all requests using the provided credentials and use https://api.iris.co.uk/hr/v2 as the base URL.
Oktaokta/v1Okta’s API. We automatically authenticate all request ans use ‘https://<your-okta-domain>/api/v1’ as the base URL.
Sage HRsagehr/apiSage HR’s API. We automatically authenticate all requests and use https://\{subdomain\}.sage.hr/api as the base URL.
Sage Peoplesagepeople/salesforce-rest-apiSage People is built on Salesforce’s API. We automatically authenticate all requests and use https://\{customer_name\}.my.salesforce.com/ as the base URL.
Humaanshumaans/apiHumaans’ API. We automatically authenticate all requests using the API key and use https://app.humaans.io/api as the base URL.
TRAFFITtraffit/v2Traffit’s v2 API. We authenticate all requests with the Traffit API key and use the base URL https://yourdomain.traffit.com/api/integration/v2.
eRecruitererecruiter/apieRecruiter’s API. We automatically authenticate all requests and use https://\{domain\}/Api as the base URL.
Abacus Umantisabacusumantis/v1Umantis API v1. We automatically authenticate all requests and use https://\{subdomain\}.umantis.com/api/v1 as the base URL.
Haufe Umantisumantis/v1Umantis API v1. We automatically authenticate all requests and use https://\{subdomain\}.umantis.com/api/v1 as the base URL.
Taleeztaleez/0Taleez’s API. We automatically authenticate all requests and use https://api.taleez.com/0 as the base URL.
HR WORKShrworks/v2HRWorks’s v2 API. We automatically authenticate all requests using the customer credentials.
Zoho Recruitzohorecruit/v2Zoho Recruit’s V2 API. We automatically authenticate all requests and use https://recruit.\{domain\}/recruit/v2 as the base URL.
AlexisHRalexishr/v1AlexisHR’s v1 API We automatically authenticate all requests and use https://\{subdomain\}.alexishr.com as base URL.
Simployersimployer/v1AlexisHR’s v1 API We automatically authenticate all requests and use https://\{subdomain\}.alexishr.com as base URL.
Eployeploy/apiEploy’s API. We automatically authenticate all requests and use https://\{subdomain\}.eploy.net/api as the base URL.
JobDivajobdiva/apiWe automatically authenticate all requests and use https://api.jobdiva.com as the base URL.
Visma Peplepeple/hrmVisma Payroll Reporting API. We automatically authenticate all requests using the client credentials and use ‘https://api.analytics1.hrm.visma.net’ as the base URL.
Dayforcedayforce/V1Dayforce’s API. We automatically authenticate all requests using the service user credentials
Paylocitypaylocity/defaultPaylocity’s Weblink API. We automatically authenticate all requests and use ‘https://{apidc1demogw}.paylocity.com/’ as the base URL.
Paycorpaycor/v1Paycors’s v1 API. We automatically authenticate all requests and use ‘https://apis.paycor.com’.
Avatureavature/custom-apiAvatures’s Custom API. Call Get /openapi to retrieve the specific custom API schema. We automatically authenticate all requests and use the instance specific custom API URL as the base URL.
Apploiapploi/rest-apiThe Apploi API. We automatically authenticate all requests and use https://partners.apploi.com/ as the base URL.
Phenomphenom/rest-apiThe Phenom API. We automatically authenticate all requests and use https://api-stg.phenompro.com as the base URL.
Ripplingrippling/apiRippling’s API. We automatically authenticate all requests and use https://api.rippling.com/platform/api as the base URL.
PeopleHRpeoplehr/defaultPeopleHR’s API. We automatically authenticate all request ans use ‘https://api.peoplehr.net’ as the base URL.
JazzHRjazzhr/v1JazzHR’s v1 API. We automatically authenticate all requests.
Luccalucca/apiLuccas’s API. We automatically authenticate all requests and use ‘https://{account}.{iluccailucca-demo}.{region}/’ as the base URL.
BITEbite/v1Bite’s v1 API. We automatically authenticate all requests and use ‘https://api.b-ite.io/v1’ as base URL.
Zeltzelt/partnerZelt’s Partner API. We automatically authenticate all requests using the connected OAuth credentials and use https://go.zelt.app/apiv2/partner as the base URL.
Hailey HRhaileyhr/apiHailey HR’s API. We automatically authenticate all requests using the provided credentials and use https://api.haileyhr.app as the base URL.
Silaesilae/restSilae’s REST API. We automatically authenticate all requests and use ‘https://payroll-api.silae.fr/payroll’ as the base URL.
Mysolutionmysolution/defaultMysolution’s API. We automatically authenticate all requests and use the customer’s domain as base URL.
InRecruiting by Zucchettiinrecruiting/defaultinRecruiting’s v3 API. We automatically authenticate all requests and use the customers domain as base URL
Connexys By Bullhornconnexys/apiConnexy’s API. We automatically authenticate all requests and use https://\{connexys_domain\}/ as the base URL.
HR4YOUhr4you/v2HR4YOU’s v2 API. We automatically authenticate all requests and use https://\{subdomain\}.hr4you.org/api2/ as the base URL.
Cornerstone OnDemandcornerstoneondemand/recruitingCornerstone’s Recruiting API. We automatically authenticate all requests using the client ID and secret and use https://your_domain.csod.com/services/api as the base URL.
Spark Hire Recruitcomeet/apiSpark Hire Recruit’s API.We automatically authenticate all requests and use https://api.comeet.com as the base URL.
Leapsomeleapsome/scimLeapsome SCIM API. We automatically authenticate all requests using the credentials supplied by the customer and use https://api.leapsome.com/scim/v1 as the base URL.
Gemgem/apiGem’s ATS API We automatically authenticate all requests.
workforce.comworkforcecom/apiWorkforce.com API. We automatically authenticate all requests using the provided credentials and use https://my.tanda.co as the base URL.
Lauralaura/apiWe automatically authenticate all requests and use https://\{subdomain\}.rekrytointi.com/api/v1.2 as the base URL.
Covetocoveto/publicWe automatically use https://\{subdomain\}.coveto.de as the base URL.
DATEVdatevhr/hr-exportsDATEV’s hr-exports. We automatically authenticate all requests and use `https://hr-exports.api.datev.de/\{platformplatform-sandbox}/v1/clients/{client-id}` as the base URL.
DATEVdatevhr/eauDATEV’s eau API. We automatically authenticate all requests and use `https://eau.api.datev.de/\{platformplatform-sandbox}/v1/clients/{client-id}/` as the base URL.
Sympasympa/apiSympa’s API. We automatically authenticate all requests and use https://api.sympahr.net/api/ as the base URL.
Breezy HRbreezyhr/v3BreezyHR’s v3 API. We automatically authenticate all requests using the service user credentials
Flatchrflatchr/apiFlatchr’s API. We automatically authenticate all requests and use https://api.flatchr.io as the base URL.
Flatchrflatchr/careerFlatchr’s Career API. We automatically authenticate all requests and use https://career.flatchr.io as the base URL.
Please note that the passthrough API endpoints are only meant for edge cases. That’s why we only expose them for new integrations after understanding a concrete customer use case. If you have such a use case in mind, please reach out to Kombo.

Authorizations

​
Authorization
string
header
required

Create an API key on the Secrets page in the Kombo dashboard.

Headers

​
X-Integration-Id
string
required

ID of the integration you want to interact with.

Path Parameters

​
tool
string
required

The ID of the tool whose passthrough API you want to call (e.g., personio).

​
api
string
required

The ID of the passthrough API you want to call (some tools provide multiple). Check the endpoint description for a list of all available APIs.

Body

application/json

POST /passthrough/:tool/:api request body

The body is of type object.

Response

200
application/json

POST /passthrough/:tool/:api Successful response

The response is of type object.