API Tokens

API tokens are used for organization level endpoints, such as company creation and webhooks and related endpoints.

API tokens cannot be used for company or employee level access. To access company or employee level data, access_tokens must be used, as detailed in the OAuth2 guide.

API Token Authentication

When creating a new Gusto company via the API or setting up a wehooks subscription, the application is acting on behalf of
itself rather than a Gusto user. For these, certified partners are granted an API token in their Developer Account under Organizations. This token is included in the authorization HTTP header with the Token scheme.

Example

HTTP Headers

Content-Type: application/json
Authorization: Token bbb286ff1a4fe6b84742b0d49b8d0d65bd0208d27d3d50333591df71c45da519