REST API

Authentication

Generate a token in the admin area and send it as a bearer token. Tokens are scoped and revocable, and every call is written to the audit log against the token that made it.

curl https://hr.yourcompany.com/api/v1/employees \
  -H "Authorization: Bearer edc_live_xxxxxxxxxxxx" \
  -H "Accept: application/json"

Endpoints

A worked example: month-end payroll

curl -G https://hr.yourcompany.com/api/v1/attendance/summary \
  -H "Authorization: Bearer $EDC_TOKEN" \
  -d from=2026-08-01 \
  -d to=2026-08-31

{
  "period": { "from": "2026-08-01", "to": "2026-08-31" },
  "data": [
    {
      "employee_code": "EDC-014",
      "name": "A. Sharma",
      "present_days": 21,
      "absent_days": 1,
      "late_marks": 2,
      "half_days": 0,
      "leave_days": 2,
      "worked_hours": 168.5
    }
  ],
  "meta": { "page": 1, "per_page": 100, "total": 47 }
}

Pagination

List endpoints return 100 records per page. Pass page and per_page, and read meta.total to size the loop. Sorting is stable, so paging through a large range does not skip or repeat records.

Webhooks

Register an endpoint and receive a signed POST when something happens, rather than polling for it.

Each delivery carries an HMAC signature header computed with your webhook secret. Verify it before acting on the payload. Failed deliveries retry with exponential backoff for 24 hours.

Errors

Related