---
updatedAt: 2026-07-21T10:29:50.000Z
---

Fetch the complete documentation index at: https://apidocs.hibob.com/llms.txt. Use this file to discover all available pages before exploring further.

# Work locations

Read-only Public API for searching work locations belonging to an employer in Bob.

A **work location** is a site belonging to a single employer, either a **Public** office or a **Remote** location. Work-location endpoints are **read-only**, **search-based**, and nested under the parent employer resource.

# Before you begin

* [Explore Employer API](/docs/explore-employer-api) to learn about employers and work locations in Bob and how to use the API.

# Required permissions

To use the Work locations API, make sure the service user or OAuth app has the following access:

| Authentication            | Permission or scope                                              |
| :------------------------ | :--------------------------------------------------------------- |
| Service user (Basic Auth) | `Settings > Employers > View` or `Settings > Employers > Manage` |
| Marketplace app (OAuth)   | `employers:read`                                                 |

If the caller lacks the required permission or scope, or its source IP is not on the company IP trust list, the API returns `403 Forbidden`. To learn more, see [Permissions](/reference/permissions).

# Work locations API endpoints

| Resource              | Endpoint                                                                               |
| :-------------------- | :------------------------------------------------------------------------------------- |
| Metadata              | [Get work location metadata](/reference/post_employers-work-locations-metadata-search) |
| Work location details | [Search work locations](/reference/post_employers-employerid-work-locations-search)    |

Work-location metadata is employer-agnostic. Work-location search requires the parent `{employerId}` in the path. To list employers first, see [Employers](/reference/employers).

# Rate limiting

Rate limits are restrictions that our API imposes on the number of times a user can access our endpoints within a specified period of time. To learn more about rate limiting best practices, see [Rate limiting](/reference/rate-limiting).

| Method | Endpoint                                                                               | Limit per minute |
| :----- | :------------------------------------------------------------------------------------- | :--------------: |
| POST   | [Get work location metadata](/reference/post_employers-work-locations-metadata-search) |        60        |
| POST   | [Search work locations](/reference/post_employers-employerid-work-locations-search)    |        60        |

<br />