Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Justworks website screenshot

Justworks

Justworks is a New York City-based Professional Employer Organization (PEO) and small-business HR platform. It bundles payroll, tax filing, multi-state compliance, large-group medical/dental/vision benefits, 401(k) administration, workers comp, time tracking, and HR consulting into a single per-employee-per-month subscription. Justworks operates four primary products: Justworks Payroll (standalone payroll), Justworks PEO Basic, Justworks PEO Plus (PEO with included benefits package), and Justworks EOR International for hiring full-time employees abroad without a local entity. Justworks exposes a Partner API at public-api.justworks.com for approved integration partners, covering Members, Company, Payroll, Paystubs, Deductions, Time Off, and Webhooks. The API uses OAuth 2.0 authorization-code grant, cursor pagination, signed at-least-once webhooks, and zero-decimal currency representation. Deductions is the primary write surface; everything else is read-only.

agent ready

Real signal across most facets with visible, nameable gaps — the contract exists but is thin, or the portal is good while governance and commercial terms are absent.

Kin Score

API Evangelist profiles Justworks the way a machine reads it — 52 machine-readable artifacts across 11 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.

Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Justworks scores 59.3/100 (developing), with a separate agent-readiness read of 48/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.

Kin Score

This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 59.3/100 · developing
Contract Quality 17.6 / 25
Developer Ergonomics 9.1 / 20
Commercial Clarity 11.6 / 20
Operational Transparency 3.4 / 13
Governance 8.8 / 12
Discoverability 8.8 / 10
Agent readiness — 48/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3

How we profile Justworks

Each block below is one kind of artifact we hold for Justworks. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.

APIs 11

Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.

Individual APIs this provider publishes, each with its own machine-readable definition.

Justworks Members API

Read employee, contractor, and member information from the Justworks Partner API. Provides access to member profiles, employment history, pay history, custom-field values, and U...

Justworks Company API

Read company-level data from the Justworks Partner API including company identity, departments, offices, bank account on file (masked), verified business information, custom-fie...

Justworks Deductions API

Manage employee deductions — list deduction types, create one-time and recurring deductions, update existing deductions, and cancel deductions in bulk. The primary write surface...

Justworks Webhooks API

Manage Justworks Partner API webhooks. Justworks signs every request, delivers events at-least-once with automatic retries, and closes a webhook on sustained failures (resumable...

Justworks OAuth API

OAuth 2.0 token endpoints for the Justworks Partner API. Authorization code is the only supported grant for initial token acquisition; refresh token grant is supported for renew...

Justworks Deduction Types API

Read access to Justworks deduction type catalog

Justworks Payrolls API

Read access to payroll runs and per-payroll fees

Justworks Paystubs API

Read access to per-member paystubs

Justworks Time Off Balances API

Asynchronous balance reports for time-off policies

Justworks Time Off Policies API

Read access to time-off policy catalog

Justworks Time Off Requests API

Read access to time-off requests submitted by members

Scroll within the panel for all 11 ·

Open Collections 7

Open, tool-agnostic collections carry the same runnable value as Postman without locking you to one client — the portable, forkable form of the same exercise.

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Justworks Company API

OPEN COLLECTION

Justworks Deductions API

OPEN COLLECTION

Justworks Members API

OPEN COLLECTION

Justworks OAuth API

OPEN COLLECTION

Justworks Payroll API

OPEN COLLECTION

Justworks Time Off API

OPEN COLLECTION

Justworks Webhooks API

OPEN COLLECTION

Scroll within the panel for all 7 ·

Pricing Plans 1

Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the six things the Kin Score reads for commercial clarity.

Published pricing tiers and plan structures.

Rate Limits 1

Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.

Documented rate limits and quota policies.

Justworks Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals let a buyer model the financial operations of an API before it's live. We profile them for the same reason we profile pricing: the money is part of the contract.

Cost, billing, and metering signals for API financial operations.

Features 18

The notable capabilities this provider advertises, captured as structured features so they can be searched and compared instead of read one landing page at a time.

Notable capabilities this provider offers.

Justworks PEO Basic — co-employment PEO with payroll, HR support, and access to large-group benefits
Justworks PEO Plus — PEO Basic plus medical, dental, vision, life, AD&D, disability, and 401(k) administration
Justworks Payroll — standalone small-business payroll, time tracking, and HR tooling for companies that source their own benefits
Justworks EOR International — employer-of-record service for hiring full-time employees abroad without a local entity
Justworks Partner API at public-api.justworks.com with OAuth 2.0 authorization-code flow
Members endpoints (list, get, custom field values, tax-id/SSN) with cursor pagination and updated_at filtering
Company endpoints (identity, bank account, business info, custom fields, jurisdictions)
Payroll endpoints (list runs by date range, list fees, list paystubs, get paystub with earnings + deductions + employer contributions)
Deductions endpoints (list types, list, create, update, cancel) with per-row operation_id idempotency
Time Off endpoints (asynchronous balance reports, policies, requests)
Signed webhooks for member.profile.created/updated, member.employment_state.termination_scheduled/canceled, and department.created/updated/deleted
Webhook simulator endpoint for partner-listener validation in the Tour environment
24-hour access tokens and 30-day refresh tokens
Hierarchical OAuth scopes (e.g., member.detail:read implies member.basic:read implies member.dob/sex:read)
Zero-decimal currency representation for all monetary fields
Partner program with revenue share, co-marketing, dedicated relationship managers
Integrations marketplace covering Greenhouse, Lever, JazzHR, CultureAmp, 15Five, QuickBooks, NetSuite, Xero, Sage Intacct, Brex, Ramp
Available via aggregator platforms Finch, Merge, and Apideck for cross-HRIS access

Scroll within the panel for all 18 ·

Semantic Vocabularies 1

JSON-LD contexts give the data shared meaning across APIs. We profile them because semantics are what let a machine reconcile 'customer' here with 'customer' somewhere else.

JSON-LD contexts and semantic vocabularies used across these APIs.

Justworks Context

0 classes · 8 properties

JSON-LD

Spectral Rules 1

Governance rulesets we run against this provider's specs — the automated checks behind parts of the score. Profiling them makes the quality bar explicit and re-runnable, not a matter of opinion.

Justworks API Rules

5 rules · 4 warnings

SPECTRAL

JSON Schema 6

Standalone JSON Schema definitions describe the data models behind the API. We profile them so the shapes are validatable on their own — useful long after a single request is forgotten.

Standalone JSON Schema definitions for this provider's data models.

Justworks Deduction

10 properties

JSON SCHEMA

Justworks Member

27 properties

JSON SCHEMA

Justworks Payroll

10 properties

JSON SCHEMA

Justworks Paystub

12 properties

JSON SCHEMA

Justworks Time Off Request

11 properties

JSON SCHEMA

Justworks Webhook Event

5 properties

JSON SCHEMA

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Justworks Authentication

oauth2 · 1 scheme

SECURITY

Justworks Domain Security

TLSv1.3 · DMARC

SECURITY

Justworks Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.

OAuth scopes governing access to this provider's APIs.

Justworks Scopes

15 scopes · authorizationCode

15 scopes

SCOPES

Agentic Access 1

An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.

Recommended x-agentic-access execution contracts for AI agents.

Justworks Agentic Access

27 operations · 9 acting · 1 human-in-the-loop

27 operations · 9 acting

AGENTIC

Resources

Every other property we hold for Justworks — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.

Get Started 2

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Build 1

SDKs, sample code, and the tooling you integrate with

Learn 1

Tutorials, courses, talks, and written guidance

Operate 2

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Other 1

Properties that don't map to a standard resource type

← All providers · Data indexed from github.com/api-evangelist/justworks · machine-readable index on apis.io