# Deel (slim)

> Deel is a global HR, payroll and employer-of-record platform. Its REST API and hosted MCP server let an agent read and update people records, time off, organisation structure, onboarding, contracts and compliance documents.

- Full: https://www.anchorterminal.com/tools/deel.md (~6,800 tokens) · this version ~1,830 tokens · JSON https://www.anchorterminal.com/tools/deel.json · canonical https://www.anchorterminal.com/tools/deel
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**B · 69.1/100 · rank #158 of 629 · #1 in HR & employee operations · not agent-ready · confidence medium**


Assessment: The API has 506 operations in public OpenAPI 3.1 specs, about 90 read and write OAuth scopes, a sandbox and a dated versioning policy with one year of deprecation notice. The limit is 5 requests a second for a whole organisation, and the legal documents load only with JavaScript, so data handling terms weren't read.

## Facts

- Kind: HTTP API · vendor: Deel, Inc. · category: HR & employee operations · legal entity: Deel, Inc. · provenance 94/100
- Endpoint: `https://api.letsdeel.com/rest` (HTTP, Streamable HTTP, SSE (legacy))
- Auth: OAuth or key · pricing: Paid · x402: no · licence: Proprietary service under Deel's platform terms. The Deel CLI on GitHub is MIT
- Probe metrics: not measured yet (probes haven't run)
- API: REST at https://api.letsdeel.com/rest, stable version 2026-01-01 set with the `X-Version` header. 506 operations (260 GET, 154 POST, 50 PATCH, 31 DELETE, 11 PUT) and 55 webhook events in the OpenAPI 3.1 spec, with SCIM 2.0 at /scim/v2
- HR coverage: People (list, retrieve, create, update personal information and working location), custom fields, organisation structures, positions, worker relations, time off (policies, entitlements, create, update, cancel, approve or reject), onboarding tracker, compliance and HR documents
- MCP server: Hosted at https://api.letsdeel.com/mcp over HTTP with SSE, server name deel-mcp 1.0.0, protocol 2025-03-26. 86 tools in the docs across contracts, people, time off, payments, payroll, hiring insights, benefits, IT assets, onboarding and reference data. 8 public tools are listed without a token
- Credentials: Organisation token, personal token or OAuth 2 app, all Bearer. Tokens are created in the Developer Centre with chosen scopes and a sensitive-data setting. OAuth for MCP uses PKCE (S256) and dynamic client registration
- Rate limits: 5 requests a second per organisation, shared by all tokens, rolling one-second window, 429 on excess. Same limits in the sandbox and on the MCP server
- Retries: `Idempotency-Key` header on POST and PATCH, responses cached 24 hours, replayed responses carry `x-original-request-id`. The MCP error page says 429 carries `Retry-After`
- Errors: JSON body with a `request` object (method, url, status, api_req_id, docs link) and an `errors` array of message and JSON path. `X-Request-ID` on every response
- Pagination: Mixed. `limit` with `offset` on some lists (people, limit up to 200), cursor parameters on others, and `page_size` with `next` on time-off requests
- Sandbox: https://api-staging.letsdeel.com/rest, created from the Developer Centre with its own login and tokens. Sample workers and organisations, simulated payments and signatures, resettable
- Webhooks: 55 events in the spec, among them worker created, updated and deleted, time off created, reviewed, updated and deleted, and onboarding status updated. HMAC-SHA256 signature, ten retries, 30-second timeout
- Clients: Deel CLI @deel-org/cli 0.2.0 (24 September 2026, MIT, Node 22.18+ or a signed binary). TypeScript SDK @deel-developers/deel 2.1.56, last published 13 March 2025
- Certifications: SOC 1, SOC 2, SOC 3 and ISO 27001 per deel.com/security. AWS hosting with primary operations in Ireland and disaster recovery in France
- Status: status.deel.com on StatusPal, with a Deel Developer API component, a Demo & Sandboxes component and 60-day uptime bars
- Prices: Deel HR Core $5 per seat per month; Deel HR Advanced $19 per seat per month; Deel HR Elite $29 per seat per month; Contractor management $49 per seat per month; Employer of record $599 per seat per month

- Scores: Reliability 88, Performance pending, Schema & documentation 85, Agent ergonomics 65, Security & auth 64, Payments & pricing 30, Task success pending, Maintenance & community 70, Transparency & trust 69 · total over the 7 assessed categories
- Why: Reliability, Graded on the hosted REST API, with the MCP server on the same host. · Schema & documentation, OpenAPI 3.1 specs are public under developer.deel.com/openapi/, 506 operations and 55 webhook events in the full file. · Agent ergonomics, The MCP docs list 86 tools with no toolsets. · Security & auth, OAuth 2 with PKCE, dynamic client registration, single-use refresh tokens and about 90 scopes split into read and write. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, The API changelog's newest entry is 5 October 2026 (30). · Transparency & trust, Editorial half only.
- Sources: 28, open questions: 10, both in the full twin
- Capabilities: hr.employees, hr.time-off, hr.org, hr.onboarding, hr.documents
- JSON: https://www.anchorterminal.com/api/v1/tools/deel.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/deel.svg` or a link to https://www.anchorterminal.com/tools/deel from a page on deel.com or one of its subdomains, or the README of github.com/letsdeel/deel-cli, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Queue calls to stay under 5 requests a second for the whole organisation. Other integrations on the same account share the limit
2. Send `X-Version: 2026-01-01` on REST calls, and watch `X-State`, `Deprecation` and `Sunset` response headers
3. Send a UUID `Idempotency-Key` on POST and PATCH. Only retry a 5xx on a write when the request carried one
4. Test against https://api-staging.letsdeel.com/rest with a sandbox token. Production and sandbox tokens aren't interchangeable
5. Request read scopes only (people:read, time-off:read) for a read-only agent. Rejecting a time-off request is irreversible

## Connect

```bash
npm install -g @deel-org/cli
```

```bash
curl -X GET 'https://api.letsdeel.com/rest/contracts' \
  -H 'Authorization: Bearer YOUR-TOKEN-HERE' \
  -H 'X-Version: 2026-01-01'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/deel

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| BambooHR | C | 61.7 | hr.employees, hr.time-off, hr.org, hr.onboarding, hr.documents | https://www.anchorterminal.com/tools/bamboohr.min.md |
| Rippling | C | 60.8 | hr.employees, hr.time-off, hr.org, hr.onboarding, hr.documents | https://www.anchorterminal.com/tools/rippling.min.md |
| HiBob | C | 57 | hr.employees, hr.time-off, hr.org, hr.onboarding, hr.documents | https://www.anchorterminal.com/tools/hibob.min.md |
| Finch | BB | 71.6 | hr.employees, hr.org, hr.documents | https://www.anchorterminal.com/tools/finch.min.md |
| Workable | C | 61.7 | hr.employees, hr.time-off, hr.org | https://www.anchorterminal.com/tools/workable.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)