Workday REST API
workday.com · Company
REST APIs for Workday HCM, Payroll, and Financial Management. Access workers, organizations, pay slips, time tracking, absence, benefits, and financial data. Workday is the dominant HCM/ERP platform for large enterprises. Requires Workday tenant.
Authentication
OAuth2
OAuth2 client credentials (for integrations) or authorization code (for user-facing apps). Register an API client in Workday tenant → Security → API Clients.
Sample Requests
GET
Get workers
Returns active workers with basic profile info. Paginate with offset and limit.
https://{tenant}.myworkday.com/api/v1/workers?limit=20&offset=0
Hover any highlighted part to learn what it does
Headers — extra info sent with the request
| Authorization | Bearer YOUR_ACCESS_TOKEN |
curl -X GET "https://{tenant}.myworkday.com/api/v1/workers?limit=20&offset=0" \
-H "Authorization: Bearer YOUR_ACCESS_TOKEN"import requests
params = {
"limit": "20",
"offset": "0"
}
headers = {
"Authorization": "Bearer YOUR_ACCESS_TOKEN"
}
response = requests.get(
"https://{tenant}.myworkday.com/api/v1/workers",
params=params,
headers=headers,
)
print(response.json())const url = new URL('https://{tenant}.myworkday.com/api/v1/workers');
url.searchParams.set('limit', '20');
url.searchParams.set('offset', '0');
const response = await fetch(url, {
headers: {
'Authorization': 'Bearer YOUR_ACCESS_TOKEN'
},
});
const data = await response.json();
console.log(data);package main
import (
"fmt"
"io"
"net/http"
"net/url"
)
func main() {
baseURL, _ := url.Parse("https://{tenant}.myworkday.com/api/v1/workers")
q := baseURL.Query()
q.Set("limit", "20")
q.Set("offset", "0")
baseURL.RawQuery = q.Encode()
targetURL := baseURL.String()
req, _ := http.NewRequest("GET", targetURL, nil)
req.Header.Set("Authorization", "Bearer YOUR_ACCESS_TOKEN")
client := &http.Client{}
resp, _ := client.Do(req)
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
fmt.Println(string(body))
}require "net/http"
require "json"
uri = URI("https://{tenant}.myworkday.com/api/v1/workers")
uri.query = URI.encode_www_form({
"limit" => "20",
"offset" => "0"
})
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"
req = Net::HTTP::Get.new(uri)
req["Authorization"] = "Bearer YOUR_ACCESS_TOKEN"
res = http.request(req)
puts JSON.parse(res.body)<?php
$url = "https://{tenant}.myworkday.com/api/v1/workers?" . http_build_query([
"limit" => "20",
"offset" => "0"
]);
$opts = ["http" => [
"method" => "GET",
"header" => implode("\r\n", [
"Authorization: Bearer YOUR_ACCESS_TOKEN"
]),
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));
GET
Get pay slips for a worker
Returns payroll pay slips for a specific worker.
https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips
Hover any highlighted part to learn what it does
Headers — extra info sent with the request
| Authorization | Bearer YOUR_ACCESS_TOKEN |
curl -X GET "https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips" \
-H "Authorization: Bearer YOUR_ACCESS_TOKEN"import requests
headers = {
"Authorization": "Bearer YOUR_ACCESS_TOKEN"
}
response = requests.get(
"https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips",
headers=headers,
)
print(response.json())const url = 'https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips';
const response = await fetch(url, {
headers: {
'Authorization': 'Bearer YOUR_ACCESS_TOKEN'
},
});
const data = await response.json();
console.log(data);package main
import (
"fmt"
"io"
"net/http"
)
func main() {
targetURL := "https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips"
req, _ := http.NewRequest("GET", targetURL, nil)
req.Header.Set("Authorization", "Bearer YOUR_ACCESS_TOKEN")
client := &http.Client{}
resp, _ := client.Do(req)
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
fmt.Println(string(body))
}require "net/http"
require "json"
uri = URI("https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"
req = Net::HTTP::Get.new(uri)
req["Authorization"] = "Bearer YOUR_ACCESS_TOKEN"
res = http.request(req)
puts JSON.parse(res.body)<?php
$url = "https://{tenant}.myworkday.com/api/v1/workers/{workerId}/paySlips";
$opts = ["http" => [
"method" => "GET",
"header" => implode("\r\n", [
"Authorization: Bearer YOUR_ACCESS_TOKEN"
]),
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));Postman Setup Guide
- Requires Workday tenant — must be a Workday customer or implementation partner
- In Workday: go to Security → API Clients → Register API Client
- Set grant type to Client Credentials for system integrations
- Token URL: https://{tenant}.myworkday.com/ccx/oauth2/{tenant}/token
- In Postman, use OAuth2 with client credentials grant type
- Base URL: https://{tenant}.myworkday.com/api/v1
- API reference: https://community.workday.com (Workday Community login required)
What can you build with Workday REST API?
Workday REST API is a Company API. Developers commonly use company APIs for:
- enriching CRM records with company firmographics
- building lead-generation and prospecting tools
- verifying business identity and registration details
- monitoring competitors and market intelligence
- powering B2B data enrichment pipelines
OAuth 2.0. OAuth lets your app act on behalf of a user. You redirect them to authorise access, receive a token, then use that token in requests. Best for accessing user-owned data. Workday REST API is a paid API — check the provider's pricing page before building a production integration.
New to APIs? Read our beginner's guide · Learn about API keys · What is REST?