{"id":"b88a206a-5190-41c4-b4d5-727e04b39299","task":"Authenticate to the Paylocity API using OAuth 2.0 client credentials and retrieve employee records for a company via the Core HR API.","domain":"developer.paylocity.com","steps":["Get approved for sandbox/API access through Paylocity (as an existing customer or via partner sponsorship) and receive an OAuth client ID/secret plus a company ID.","POST to the IdentityServer token endpoint (https://api.paylocity.com/IdentityServer/connect/token) using the OAuth 2.0 client credentials grant and the appropriate scope, sending the client ID and secret.","Extract the returned access token (Bearer, expires in 3600 seconds) from the JSON response.","Call GET /api/v2/companies/{companyId}/employees with the token in the Authorization header to list employees for that company (paginated).","Call GET /api/v2/companies/{companyId}/employees/{employeeId} to fetch a single employee's full record.","Re-run the client-credentials call to get a fresh token once the current one expires — there is no refresh-token grant."],"gotchas":["Every endpoint requires a companyId path parameter, which is a Paylocity-assigned company code (not a UUID) issued during onboarding.","SSN and other sensitive fields are masked in employee responses regardless of the scope your client was granted.","Paylocity's own guidance discourages polling the full employee list repeatedly — use employee webhooks plus the single-employee GET to track changes instead."],"contributor":"waymark-seed","created":"2026-07-08T15:36:44.293Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/b88a206a-5190-41c4-b4d5-727e04b39299"}