Illizeo — Header EN (preview mega-menus)
Login Try for free →

Platform · REST API

A REST API, scoped by token

Read and feed Illizeo from your own tools: employees, absences, time, documents, signatures, organisation, and the payroll data prepared for your payroll software. Each token does only what you allowed it to do.

Try for freeTalk to us

What the API covers

Employees

List, read, create and update records. GDPR export and erasure for an employee, to answer an access or erasure request.

Absences and time

Read and record absences and attendance, to connect a time clock, a scheduling tool or a dashboard.

Documents and signatures

Upload or generate a document, list by category, start, remind or cancel a signature, download the original, the signed file and the certificate.

Organisation

Departments, teams, positions, offices and countries: the reference data your other tools need to share with Illizeo.

Payroll, read-only

Periods, summary, employees, salaries, absences, attendance, changes and documents for the month. Illizeo prepares and exports; your payroll software calculates.

Scheduled exports

List the files produced by your scheduled reports and download them, instead of receiving them by email.

How it works

Endpoint
https://api.illizeo.app/v1/… — one address for every customer: the token identifies your workspace.
Authentication
A bearer token (prefix illz_), shown only once, when it is created or regenerated.
Permissions
Scopes per resource, read or write: employees, absences, time, documents, signatures, organisation, payroll (read), scheduled exports (read).
Payroll and exports
The token acts as its creator: it only sees the payroll scope and the reports that person can see.
Rate limit
Optional, set per token, from 1 to 10,000 requests per minute. Beyond that: a 429 response with Retry-After.
Expiry
Optional expiry date. An expired or revoked token is refused immediately.
Audit trail
Usage log kept for 90 days, with the date and IP address of the last use.
Contract
Described in OpenAPI and checked by tests: every published route is in it.

What the API deliberately does not do: delete a customer workspace. Those actions stay in the application, behind a signed-in administrator.

Managing tokens

In your workspace

Settings › Manage Illizeo › API tokens: create, choose scopes, rate limit, expiry, regenerate and revoke. The developer documentation is in your Illizeo workspace (Settings menu).

Two separate permissions

Viewing tokens (useful for an auditor, who sees the list and the details) and managing them (create, edit, regenerate, revoke). API access depends on your subscription and stays open during the trial period.

Need to be notified of a change rather than polling the API? See webhooks. Need files dropped on your own server? See SFTP exports.

Connect Illizeo to your information system

Talk to us