# SmartRecruiters (slim)

> Applicant tracking and recruiting platform from SmartRecruiters, an SAP company. Its Customer API covers jobs, candidates, applications, interviews, offer records, reports and webhooks over REST, with API key or OAuth 2.0 access for customers and approved partners.

- Full: https://www.anchorterminal.com/tools/smartrecruiters.md (~7,150 tokens) · this version ~1,880 tokens · JSON https://www.anchorterminal.com/tools/smartrecruiters.json · canonical https://www.anchorterminal.com/tools/smartrecruiters
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**C · 60.4/100 · rank #356 of 629 · #4 in Recruiting & applicant tracking · not agent-ready · confidence medium**


Assessment: OAuth client credentials limited by 49 scopes, a system role and an access group, with per-operation OpenAPI definitions, llms.txt and a dated changelog. Access needs a paid SmartRecruiters account, with the lowest plan starting at $14,995, and no free tier, official SDK or idempotency key was found.

## Facts

- Kind: HTTP API · vendor: SmartRecruiters, Inc. (an SAP company) · category: Recruiting & applicant tracking · legal entity: SmartRecruiters, Inc. · provenance 82/100
- Endpoint: `https://api.smartrecruiters.com` (HTTP)
- Auth: OAuth or key · pricing: Paid · x402: no · licence: Proprietary service under the SmartRecruiters Master Subscription Agreement
- Probe metrics: not measured yet (probes haven't run)
- Surface graded: The public REST API (Customer API) at https://api.smartrecruiters.com. The vendor's MCP page says the MCP server isn't supported for the public API
- API groups: 30 groups in llms.txt, among them Jobs, Candidates, Job Applications, Interviews, Self Scheduling, Offer, Reviews, Approvals, Messages, Reporting, Configuration, Users, Audit, Webhooks and SmartOnboard, 326 reference pages in all
- Credentials: API key in the `X-SmartToken` header (full company access, no scopes, no expiry, revocable), or OAuth 2.0 client credentials and authorisation code grants with 49 scopes. Both are created by an administrator in Credential Manager
- Token lifetime: Client credentials access tokens expire after 1,799 seconds. The client ID and secret don't expire and can be revoked
- Rate limits: 10 requests a second and 8 concurrent per credential. 2 a second on job publication and offer document downloads. 1 concurrent on `GET /candidates`
- Pagination: Cursor paging with `limit` (maximum 100, default 10 on candidate search) and `pageId` from `nextPageId` or the `Link` header. Some endpoints still use `offset`
- Webhooks: 54 events on `POST /subscriptions` covering jobs, positions, applications, candidates, offer records, approvals, reviews, onboarding and interviews. Notifications carry resource IDs only. Optional HMAC SHA256 signature, and a callback log endpoint
- Reports: Reporting API generates report files asynchronously from Report Builder reports and returns CSV
- No authentication: The Posting API and common endpoints return published job data without a credential, for example `GET /v1/companies/{companyIdentifier}/postings`
- Sandbox: The pricing page lists Sandbox Management as a product and Advanced Sandbox in the Complete plan. No free developer sandbox found
- SLA: 99.9 per cent annual system availability for paid subscriptions, with a penalty of 10 per cent of 12 months' fees per 1 per cent below it, on written request (https://www.smartrecruiters.com/legal/service-level-agreement/)
- Status: status.smartrecruiters.com on Statuspage with 11 components, among them Customer API and Marketplace API
- Certifications: The trust centre lists SOC 2 Type 2, ISO 27001, TISAX and UK Cyber Essentials, and says external penetration tests run once a year
- Hosting and sub-processors: Default hosting in Frankfurt on AWS, with Ohio and Sydney as alternatives. The sub-processor list names each vendor, its purpose and location
- Ownership: Acquired by SAP. The site footer reads "SmartRecruiters, part of SAP SuccessFactors" and the copyright line names SmartRecruiters, Inc.

- Scores: Reliability 78, Performance pending, Schema & documentation 75, Agent ergonomics 51, Security & auth 65, Payments & pricing 8, Task success pending, Maintenance & community 58, Transparency & trust 79 · total over the 7 assessed categories
- Why: Reliability, Graded on the public REST API. · Schema & documentation, Each reference page carries an OpenAPI 3.0.1 definition and a Swagger page exists. · Agent ergonomics, List endpoints take `limit` up to 100 with a default of 10, and webhooks carry IDs only. · Security & auth, OAuth 2.0 client credentials with 49 scopes, a system role and an optional access group, 1,799-second access tokens and revocation in Creden… · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, Newest changelog entry 5 October 2026, on offer property details (30). · Transparency & trust, Editorial half.
- Sources: 28, open questions: 8, both in the full twin
- Capabilities: recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters
- JSON: https://www.anchorterminal.com/api/v1/tools/smartrecruiters.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/smartrecruiters.svg` or a link to https://www.anchorterminal.com/tools/smartrecruiters from a page on smartrecruiters.com or one of its subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Ask the customer's admin for an OAuth client ID with only the scopes needed. An API key reads and writes all company data and never expires
2. Exchange the client ID and secret at https://api.smartrecruiters.com/identity/oauth/token and refresh every 30 minutes
3. Stay under 10 requests a second and 8 concurrent. `GET /candidates` allows 1 concurrent request, and job publication 2 a second
4. Move a candidate with `PUT /candidates/{id}/jobs/{jobId}/status`. The variants without `jobId` act on the most recently updated application
5. Page with `limit` (maximum 100, default 10) and `pageId` from `nextPageId`. Use the Reporting API for bulk reads, which returns CSV

## Connect

```bash
curl https://api.smartrecruiters.com/identity/oauth/token \
  -X POST \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  -d "client_id=$SMARTRECRUITERS_CLIENT_ID" \
  -d "client_secret=$SMARTRECRUITERS_CLIENT_SECRET" \
  -d 'grant_type=client_credentials'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/smartrecruiters

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Greenhouse | B | 64.8 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | https://www.anchorterminal.com/tools/greenhouse.min.md |
| Ashby | C | 61.3 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | https://www.anchorterminal.com/tools/ashby.min.md |
| Lever | D | 53.6 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | https://www.anchorterminal.com/tools/lever.min.md |
| Workable | C | 61.7 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.offer-letters | https://www.anchorterminal.com/tools/workable.min.md |
| BambooHR | C | 61.7 | recruiting.applications, recruiting.jobs | https://www.anchorterminal.com/tools/bamboohr.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)