Authenticate using OAuth 2.0 (SAML Bearer Assertion flow or mutual TLS) to obtain an access token; Basic Auth is deprecated and targeted for removal.
Construct the base URL for your SuccessFactors instance: https://{instance}.successfactors.com/odata/v2/.
Query the User or PerPerson entity for core employee data, e.g. GET /odata/v2/PerPerson?$format=json&$top=100&$skip=0 with the Authorization: Bearer <token> header.
Use OData query options ($filter, $select, $expand) to narrow results; for example, $expand=empInfo to include employment records inline.
Paginate using $top and $skip until the response returns fewer records than the page size.
Known gotchas
SuccessFactors exposes different entity sets depending on the modules enabled (EC vs. non-EC tenants) — the PerPerson/EmpEmployment model is only available on Employee Central tenants; non-EC tenants use the User entity.
Basic authentication is deprecated and will be removed; build integrations using OAuth 2.0 from the start to avoid mandatory rework.
The $expand option can cause significant response payload bloat and slower queries — request only the navigation properties you need rather than expanding all related entities.
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp