Connect your product to your customers' HR systems

curl -X POST https://api.remic.dev/v1/connect/sessions \
  -H "Authorization: Bearer $REMIC_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "endUserOriginId": "client-42",
    "endUserName": "Bakery Schmidt GmbH",
    "scopes": ["employees.basic", "teams", "time_off"]
  }'

# → { "sessionId": "…", "url": "https://connect…/?token=…", "expiresAt": "…" }

const res = await fetch('https://api.remic.dev/v1/connect/sessions', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.REMIC_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    endUserOriginId: 'client-42',
    endUserName: 'Bakery Schmidt GmbH',
    scopes: ['employees.basic', 'teams', 'time_off'],
  }),
});
const { url } = await res.json(); // hand this to your frontend

import { openConnect } from '@remic/connect-sdk';

// url comes from your backend (POST /v1/connect/sessions)
const { connectionId } = await openConnect(url);

// Confirm server-side: GET /v1/connections/:id

curl "https://api.remic.dev/v1/hris/employees?pageSize=100" \
  -H "Authorization: Bearer $REMIC_API_KEY" \
  -H "X-Connection-Id: $CONNECTION_ID"

# → { "results": [ …employees ], "next": "eyJjIjoi…" }
# Pass ?cursor=<next> for the next page, ?updatedAfter=<ISO> for changes only.

async function* employees(connectionId: string) {
  let cursor: string | null = null;
  do {
    const query = new URLSearchParams({ pageSize: '100', ...(cursor ? { cursor } : {}) });
    const res = await fetch(`https://api.remic.dev/v1/hris/employees?${query}`, {
      headers: {
        Authorization: `Bearer ${process.env.REMIC_API_KEY}`,
        'X-Connection-Id': connectionId,
      },
    });
    const page = await res.json();
    yield* page.results;
    cursor = page.next;
  } while (cursor);
}

import crypto from 'node:crypto';

// header: X-Remic-Signature: t=<unix seconds>,v1=<hex>
export function verify(rawBody: string, header: string, secret: string): boolean {
  const t = /t=(\d+)/.exec(header)?.[1];
  const v1 = /v1=([0-9a-f]{64})/.exec(header)?.[1];
  if (!t || !v1) return false;
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false; // replay window
  const expected = crypto.createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
}

{
  "id": "evt_8KfQ2…",
  "type": "hris.employees.changed",
  "createdAt": "2026-10-27T09:12:44.120Z",
  "data": {
    "connectionId": "6957e4c8-…",
    "syncRunId": "47e872fb-…",
    "created": ["emp_3eIG9JE6kd2z1Spd"],
    "updated": [{ "id": "emp_14Mylj48go5gqDpt", "changedFields": ["jobTitle"] }],
    "deleted": [],
    "part": 1,
    "totalParts": 1
  }
}