HiBob MCP Connector

Bob MCP lets people use HiBob from AI clients such as Claude, ChatGPT and Cursor. Employees ask questions in natural language, for example "Who's out this week?", and the AI client retrieves the answer from Bob on their behalf.

Bob MCP always works within each employee's existing Bob permissions. It never gives an AI client access to more than the signed-in employee can see or do in Bob.

Note for people using the legacy service user access (non-OAuth)
The legacy Service user connection to the Bob MCP server with a service user is being deprecated and will soon stop working. OAuth is now the only supported way to connect to Bob MCP. See Connecting to Bob MCP with OAuth for migration steps.

Requirements

A HiBob account. Bob MCP is available to HiBob customers.
A Bob admin has turned on Bob MCP for the company.
The employee is in a Bob permission group that includes the Bob MCP permission (on by default for all employees when Bob MCP is first enabled).
Supported AI clients: Claude (Claude.ai and Claude Desktop), ChatGPT and Cursor.
Full setup instructions in Manage Bob MCP.

Set up

Setup has two steps. An IT admin adds the connector once for the organization, then each employee signs in with their own Bob account.

1. Add the connector (IT admin)

From the connectors directory: search for HiBob in your AI client's connectors directory and add it to your organization's connectors.
Manually: in your AI client's admin settings, go to Connectors, add a custom connector, and paste the server URL: https://mcp.hibob.com/mcp/public

Once added, HiBob appears in the organization's connector list. Employees don't need the URL.

2. Sign in (employees)

In your AI client, open Connectors and select HiBob.
Sign in with your Bob account (OAuth 2.0) and approve the connection.
Start using Bob in the chat.

The access token is valid for 30 days. After it expires, you sign in again.

What you can do

Bob MCP exposes tools grouped by Bob module. Which tools are available depends on the company's Bob setup, enabled modules and the employee's permissions. Every tool is annotated as read-only or write, so AI clients can ask for confirmation before changing data.

Module	What you can do	Access
People	Search employees, view permitted profile, org and job information, create and update employee records, and manage meetings	Read and write
Time off	Check balances and policies, see who's out, and submit or review requests	Read and write
Attendance	Check who's in and clock in or out	Read and write
Tasks and approvals	View assigned tasks, flow templates and pending approvals, and complete supported actions	Read and write
Reports	Find, run, create and manage reports	Read and write
Analytics	Query company metrics, KPIs and dashboards	Read
Documents	Find and read documents	Read
Job catalog	Browse the job catalog, job assignments and team insights	Read
Social	Read the social digest and posts, and publish posts	Read and write
Skills	Search the skills catalog and employee skills, and explore career paths	Read
Performance Reviews	Manage review cycles and reviewers, give and request feedback, and get manager coaching	Read and write
Goals	View and manage goals	Read and write
Surveys	View survey results	Read
Talent Management	View and update development plans	Read and write
Hiring	Work with job openings, candidates, applications and approval workflows	Read and write
Compensation	View compensation data and plans	Read
Payroll	View payroll information	Read
Learning	Browse the learning library and enrollments	Read
Finance	View finance metrics	Read
Bob MCP administration	Register and manage the MCP clients allowed to connect to your company	Read and write

Talent, Hiring, Compensation, Payroll, Learning and Finance tools are available only when the company has the module enabled. Bob MCP also includes a tool for searching Bob Help Center content.

Example prompts

"What Bob MCP capabilities do I have access to?"
"Who on the Engineering team is out of office next week?"
"What open tasks are assigned to me, and which are overdue?"
"Do I have any pending approvals in Bob?"
"Show me the job title, department and manager for Jordan Lee."

Security and data handling

Authentication: each employee signs in with their own Bob account using OAuth 2.0.
Permissions: Bob checks the user's current permissions on every request. Anything the employee can't access in Bob isn't available through MCP, and permission changes or termination apply immediately.
Scope: Connecting an AI client doesn't copy or sync the Bob database. Bob returns data only in response to specific requests for the signed-in user.
Admin controls: Bob admins can turn Bob MCP on or off, limit it to specific permission groups, and choose which module sources are available.
Write actions: tools that change data are marked as write. Turn on your AI client's tool-approval setting to review these calls before they run.
Data handling: data returned by Bob MCP is sent to the connected AI client as part of the conversation. How the AI provider handles it is governed by the customer's agreement with that provider and their internal AI policy.

See the HiBob Privacy Policy and Terms.

Troubleshooting

"HiBob denied this connection": the employee doesn't have the Bob MCP permission. A Bob admin can add it to their permission group.
Connector won't connect (IT admin): check the URL for typos or extra spaces, and allowlist it if your network blocks outbound connections.
Connected, but data is missing: access depends on enabled modules, activated MCP sources and the employee's Bob permissions. Try asking for your own employee details first.
Tools don't update: reload or restart the AI client.

Support

Existing HiBob customers can find full admin and employee guides in the Bob Help Center (requires a Bob login) or contact HiBob Support.