Pull published employee schedules and time-clock punch data from When I Work via its REST API for payroll export.

Steps

1. Request API access from When I Work as an admin-level user by emailing your company name, admin name, developer contact info, and intended use — API keys are not self-service.
2. Authenticate by POSTing your private developer key (W-Key header) plus a When I Work user's email/password to https://api.login.wheniwork.com/login to receive a person object containing a Bearer token.
3. Use the returned token as an Authorization: Bearer header (or W-Token) on subsequent calls, and set the W-UserId header to select which When I Work account you are acting as.
4. Call the Primary service's Users, Shifts, and time-entry/punch resources under https://api.wheniwork.com/2/ to pull scheduled shifts and clock in/out punch records for the desired pay period.
5. Refresh the token before it expires by POSTing the current token to https://api.login.wheniwork.com/refresh — tokens are valid 7 days and should be refreshed at least 2 days before expiration.
6. For ongoing syncs, subscribe to When I Work webhooks rather than repeatedly polling shift/time-entry endpoints, since frequent large pulls can hit rate limits.