Skip to main content

ShiftControl API

Automate ShiftControl operations and integrate with your existing tools using the REST API.

Overview​

The ShiftControl API lets you programmatically manage users, groups, apps, and other resources. Use it to automate repetitive tasks, integrate with workflow tools, or build custom integrations.

API Documentation: api.shiftcontrol.io/api-docs — available in Scalar, Redoc, and Swagger formats. You can test API calls directly on the site.

Common Use Cases​

  • Automating user management — Create, update, or deactivate users programmatically. Useful for HRIS integrations or custom onboarding workflows.
  • Updating redirect URIs — When deploying new test environments, update the redirect URI of an OIDC app to manage active endpoints automatically.
  • Integration with workflow tools — Connect ShiftControl to Make, Zapier, or Workato to trigger actions based on events in other systems.

API Keys​

You need an API key to authenticate requests. ShiftControl provides two types:

Organization API Keys — Associated with your organization, not a specific user. These have full administrative rights and can access all organization-wide data and actions.

warning

Org API keys have the highest permission level. Use them only for trusted server-side integrations, never in client-side code.

User API Keys — Associated with an individual user. These have permissions limited to what that user's role allows. Use these for user-scoped integrations or personal automation scripts.

Manage your keys in Settings:

Using Postman​

To test the API with Postman:

  1. Download the OpenAPI Spec
  2. Import it into Postman (instructions)
  3. Set your API key in the Authorization header