# Zoho Recruit

> Zoho Recruit is a hosted applicant tracking system from Zoho for in-house HR teams and staffing agencies. Agents reach it through the REST API v2 and asynchronous bulk read and write APIs, behind OAuth 2.0.

- Canonical: https://www.anchorterminal.com/tools/zoho-recruit
- Markdown: https://www.anchorterminal.com/tools/zoho-recruit.md (~8,600 tokens)
- Slim: https://www.anchorterminal.com/tools/zoho-recruit.min.md (~2,080 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/tools/zoho-recruit.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-08

## Overview

**Grade C · 59.8/100 · rank #421 of 722 · #6 in Recruiting & applicant tracking · not agent-ready · confidence medium**


More from Zoho, listed separately because each is its own product: [Zoho Books](https://www.anchorterminal.com/tools/zoho-books.md) (Accounting & invoicing), [Zoho CPaaS (formerly ZeptoMail)](https://www.anchorterminal.com/tools/zoho-zeptomail.md) (Email delivery APIs), [Zoho CRM](https://www.anchorterminal.com/tools/zoho-crm.md) (CRM & customer platforms), [Zoho People](https://www.anchorterminal.com/tools/zoho-people.md) (HR & employee operations).

## Assessment

OAuth scopes narrow to one module and one operation, the docs have an llms.txt index with a Markdown page per endpoint, and the Free edition includes 5,000 API credits a day. No OpenAPI description, official SDK, SLA or dated API changelog was found, and the documented token refresh puts the client secret in the URL.

## Facts

| Field | Value |
| --- | --- |
| Vendor | Zoho (https://www.zoho.com/recruit/) |
| Kind | HTTP API |
| Category | Recruiting & applicant tracking (https://www.anchorterminal.com/categories/recruiting) |
| Transport | HTTP |
| Auth | OAuth · OAuth 2.0 only. A person registers a client in the Zoho API console (a web application, or a self client for one organisation) and approves scopes, which narrow to one module and one operation. The access token lasts one hour and goes in `Authorization: Zoho-oauthtoken <token>`. The refresh token lasts until revoked. Each data centre has its own accounts host and API host. Registration is self-serve, with no app review or sales approval for use inside one's own organisation. |
| Pricing | Freemium ($25 / seat-mo) · Free edition with 5,000 API credits a day, and the home page says no credit card is required. Paid editions cost $25 to $75 a recruiter licence a month billed yearly ($30 to $90 monthly) and a 15-day trial of Enterprise comes first. API calls draw on a daily credit allowance set by edition and user licences. Extra API calls are an add-on at $11.50 per 250 calls billed monthly (https://www.zoho.com/recruit/pricing.html and the price file it loads, checked 2026-10-08). |
| x402 | No · No x402, MPP or L402 in the API docs or the pricing page (checked 2026-10-08). |
| Licence | Proprietary service under Zoho's Terms of Service |
| Docs | https://www.zoho.com/recruit/developer-guide/apiv2/ |
| llms.txt | https://www.zoho.com/recruit/developer-guide/llms.txt |
| API | REST API v2 at https://recruit.zoho.com/recruit/v2 (US). Records, search, upsert, status change, candidate association, submissions, reviews, assessments, notes, tags, attachments, résumé upload to the parser, module and field metadata, users, roles and profiles, plus bulk read and bulk write jobs |
| Read and write | Candidates, Job Openings, Applications, Interviews, Clients, Contacts, Departments, Tasks, Events, Vendors, Campaigns and custom modules. Insert covers Candidates, Job Openings, Interviews, Clients, Contacts, Departments, Tasks, Events, Vendors and custom modules |
| Recruiting actions | `PUT /Candidates/actions/associate` links candidates to job openings. `PUT /{module_api_name}/status` changes a candidate, application, job opening or offer status. `PUT /Interviews/{record_id}/action/cancel` cancels an interview. `POST /Candidates/actions/import_document` sends a résumé to the parser |
| Credentials | OAuth 2.0 authorisation code grant, or a self client for one organisation. Access tokens last one hour. Refresh tokens last until revoked, 20 a user at most |
| Auth scopes | `ZohoRecruit.<group>.<name>.<operation>` with operations ALL, READ, CREATE, UPDATE and DELETE. Groups are users, org, settings, modules, bulk, notifications and search. Module scopes name one module, such as `ZohoRecruit.modules.candidates.READ` |
| Rate limits | Credits per rolling 24 hours. Free 5,000. Standard 5,000 plus 250 a user licence, at most 100,000. Professional 10,000 plus 500 a licence, at most 500,000. Enterprise 15,000 plus 1,000 a licence, at most 1,000,000. Concurrency 5, 10, 15 and 20 by edition, sub-concurrency 10 |
| Credit costs | Most calls 1. Get records with `cvid` 3. Deleted record IDs 2. Insert or update 1 per 10 records (100 records a call). Bulk read 50. Bulk write 500 |
| Pagination | `page` and `per_page` up to 200, with `more_records` in the `info` object. `fields`, `sort_by`, `sort_order`, `cvid` and the `If-Modified-Since` header on list calls. Search takes up to 10 criteria |
| Bulk | Bulk read exports up to 200,000 records a job as zipped CSV, with polling or a callback. Bulk write takes one zipped CSV of up to 25,000 records and 25 MB |
| Webhooks | Workflow webhooks on Professional (10,000 calls a day) and Enterprise (20,000 a day) per the plan comparison. Notification scopes are listed, with no notification API page found |
| Data centres | US, EU, India, Australia, China, Japan, Canada and Saudi Arabia accounts hosts are listed. API hosts are documented for the US, EU, China, India and Japan |
| SDKs | None found for the Recruit API |
| Free tier | Free edition, one active job a recruiter licence, 5,000 API credits a day. 15-day trial of Enterprise, then the account moves to Free |
| Audit | Audit and activity logs of user actions, kept 60 and 90 days, per the shared responsibility page |
| Certifications | SOC 2 Type 2, ISO/IEC 27001, 27701, 27017 and 27018 per zoho.com/compliance.html. Bug bounty at bugbounty.zohocorp.com |
| Status | status.zoho.com redirects to us.zohostatus.com, with a Zoho Recruit component and incident history back to 3 November 2025 |
| Capabilities | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters |
| Tags | hosted, closed-source, oauth, llms-txt, webhooks, free-tier, no-card, status-page, bug-bounty, soc2 |
| JSON | https://www.anchorterminal.com/api/v1/tools/zoho-recruit.json |

## Score breakdown (methodology v0.4, October 2026 research run)

Assessed 2026-10-08 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points.

| Category | Weight | This run | Score (0–100) | Points |
| --- | --- | --- | --- | --- |
| Reliability | 16% | 20 | 76 | 15.2 |
| Performance | 10% | pending | pending | n/a |
| Schema & documentation | 13% | 16.2 | 46 | 7.5 |
| Agent ergonomics | 13% | 16.2 | 64 | 10.4 |
| Security & auth | 14% | 17.5 | 65 | 11.4 |
| Payments & pricing | 10% | 12.5 | 35 | 4.4 |
| Task success | 10% | pending | pending | n/a |
| Maintenance & community | 7% | 8.8 | 48 | 4.2 |
| Transparency & trust (editorial 59, provenance 95) | 7% | 8.8 | 77 | 6.7 |
| Negative events | up to −15 | up to −15 | none recorded | 0 |
| **Total** | | | | **59.8 → C** |

### Why each score

- Reliability 76: Graded on the REST API v2, read as a hosted service. status.zoho.com redirects to us.zohostatus.com, which has a Zoho Recruit component and 198 incidents across all Zoho services since 3 November 2025 (20). In the last 90 days one incident names Recruit, 2 minutes 32 seconds on 4 August 2026, and the Recruit component changed state at the end of a 9 minute 35 second incident on 10 August that named Zoho WhiteBoard and other components. Both are brief, though the page marks them as major outages (25 of 30). Only the US page was read. Daily credits and concurrency are published with numbers per edition (15). 429 is documented for the daily and concurrency limits, with no Retry-After or backoff guidance found. Upsert on duplicate check fields makes creates safer to retry (6 of 15). No SLA found (0). v2 is the current documented version (10).
- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.
- Schema & documentation 46: No OpenAPI description found, and the public repository zoho/recruit-oas has no commits (0 of 25). The developer guide has an llms.txt index of 79 pages, each with a Markdown twin (10). Each endpoint page states a purpose, URL, method and scopes, with little on when not to use a call (12 of 20). Parameter tables give types, defaults and possible values, and a field-type table gives length limits. Record bodies accept any field because modules are customisable, and search criteria are a string grammar (8 of 15). Pages carry curl samples, sample responses and a Possible Errors table, though the upload page's sample URL omits `/v2` and the status code page is generic (11 of 15). The version is in the path. What's New in API v2 is undated, and the limits page, the What's New page and the Corporate HR plan comparison disagree on daily allowances (5 of 15).
- Agent ergonomics 64: Graded on the REST API. `fields` is optional on list calls and `per_page` goes to 200, so responses can be narrowed, but the default returns every field (18 of 25). `page`, `per_page` and `more_records`, sorting, custom views, `If-Modified-Since`, search by criteria, email, phone or word, and bulk read for large exports (18 of 20). Errors carry a code, message, details and status, with a table per endpoint, some of them short (14 of 20). Upsert on `duplicate_check_fields`, with no idempotency key (9 of 20). No official SDK for Recruit was found. Defaults are sensible, but the one-hour token, the refresh step and per-data-centre hosts add setup (5 of 15).
- Security & auth 65: OAuth 2.0 with scopes down to one module and one operation, one-hour access tokens and revocable refresh tokens (30). Less 10 because the documented refresh and revoke calls carry the refresh token and client secret in the URL query string (20 of 30). READ-only scopes per module, and calls are bound by the user's profile (the Notes module answers admins only). No approval step for deletes, which take 100 records a call (13 of 20). Candidate records and résumés hold text from outside parties and no prompt-injection guidance was found (3 of 15). Audit logs kept 60 days and activity logs 90 days per the shared responsibility page. No per-application API usage view was found in the reviewed pages (9 of 15). security.txt valid to 30 June 2028, a bug bounty, SOC 2 Type 2 and ISO/IEC 27001, 27701, 27017 and 27018 (20).
- Payments & pricing 35: No x402, MPP or L402 (0). Edition prices are public, $25 to $75 a recruiter licence a month billed yearly, read from the price values the pricing page loads by script. Extra API calls are an add-on at $11.50 per 250 calls billed monthly, and the page does not say whether that is a daily or monthly allowance (15 of 20). The Free edition includes 5,000 API credits a day, and the home page says no credit card is required (20). A person signs up in a browser, registers an OAuth client in the API console and approves scopes (0).
- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.
- Maintenance & community 48: No SDK or dated API changelog exists to date a release. The product's What's New page is dated by month and its newest entries are from September 2026, so the last change is between 8 and 38 days old. We scored it as within 90 days (20 of 30). Ten entries from July to September 2026 (20). A public product changelog and a community forum on help.zoho.com, which we did not test for replies. No API changelog (8 of 25). No official SDK for the Recruit API found (0 of 15). No package or public CI to assess (0 of 10). The Markdown limits page was last modified on 1 April 2026 per its HTTP header.
- Transparency & trust 77: Closed service under the Zoho Terms of Service, last updated 2 March 2022 (15 of 30). The privacy policy of 22 December 2025 says Zoho does not sell personal information, and that data is deleted from the active database within six months of account termination and from backups three months later. The DPA is sent on request by email (24 of 30). No API deprecation policy found. One dated notice was found, the retirement of auth tokens on 28 February 2021 (5 of 20). A sub-processor page exists, but its directory loads by script and we could not read the list. The data centre page names locations and their certifications (15 of 20).

Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (19 items): https://www.anchorterminal.com/fixes/zoho-recruit.md (JSON https://www.anchorterminal.com/fixes/zoho-recruit.json)

### What we couldn't check

- unchecked: the sub-processor directory at zoho.com/privacy/sub-processors.html, which loads by script
- unchecked: status pages for data centres other than the US
- unchecked: whether Zoho MCP has tools for Recruit. The Zoho MCP landing page does not name Recruit and the tool list needs a signed-in session, so the listing grades the REST API only
- unchecked: GitHub and package registries were probed by name only (five repository names under github.com/zoho, three PyPI names), so an official SDK under another name is possible
- unchecked: the rendered prices on the pricing page. Prices were read from the JSON file the page loads, taking its USD column
- The add-on price of $11.50 per 250 API calls does not state whether the allowance is daily or monthly, so it is left out of the unit prices
- The limits page gives Enterprise 1,000,000 credits a day, What's New in API v2 gives Enterprise 500,000 and an Ultimate edition 1,000,000, and the Corporate HR plan comparison gives 500, 5,000 and 30,000 calls a day. The listing follows the limits page
- No day-dated change was found, so `lastRelease` is empty. The product's What's New page is dated by month, newest September 2026
- No SLA page, API deprecation policy, dated API changelog or notification API page was found. Whether failed calls and 429 responses use credits is not stated
- The lead was right on the vendor, URL, docs link and interface

### Sources

- API v2 index: <https://www.zoho.com/recruit/developer-guide/apiv2/> (seen 2026-10-08)
- developer guide llms.txt: <https://www.zoho.com/recruit/developer-guide/llms.txt> (seen 2026-10-08)
- product llms.txt: <https://www.zoho.com/recruit/llms.txt> (seen 2026-10-08)
- API limits: <https://www.zoho.com/recruit/developer-guide/apiv2/limits.html> (seen 2026-10-08)
- OAuth overview and scopes: <https://www.zoho.com/recruit/developer-guide/apiv2/oauth-overview.html> (seen 2026-10-08)
- authorisation request: <https://www.zoho.com/recruit/developer-guide/apiv2/auth-request.html> (seen 2026-10-08)
- access and refresh tokens: <https://www.zoho.com/recruit/developer-guide/apiv2/access-refresh.html> (seen 2026-10-08)
- refresh access tokens: <https://www.zoho.com/recruit/developer-guide/apiv2/refresh.html> (seen 2026-10-08)
- revoke tokens: <https://www.zoho.com/recruit/developer-guide/apiv2/revoke-tokens.html> (seen 2026-10-08)
- register a client: <https://www.zoho.com/recruit/developer-guide/apiv2/register-client.html> (seen 2026-10-08)
- multi data centre support: <https://www.zoho.com/recruit/developer-guide/apiv2/multi-dc.html> (seen 2026-10-08)
- modules API: <https://www.zoho.com/recruit/developer-guide/apiv2/modules-api.html> (seen 2026-10-08)
- get records: <https://www.zoho.com/recruit/developer-guide/apiv2/get-records.html> (seen 2026-10-08)
- search records: <https://www.zoho.com/recruit/developer-guide/apiv2/search-records.html> (seen 2026-10-08)
- insert records: <https://www.zoho.com/recruit/developer-guide/apiv2/insert-records.html> (seen 2026-10-08)
- upsert records: <https://www.zoho.com/recruit/developer-guide/apiv2/upsert-records.html> (seen 2026-10-08)
- delete records: <https://www.zoho.com/recruit/developer-guide/apiv2/delete-records.html> (seen 2026-10-08)
- associate candidate: <https://www.zoho.com/recruit/developer-guide/apiv2/associate-candidate.html> (seen 2026-10-08)
- change status: <https://www.zoho.com/recruit/developer-guide/apiv2/change-status.html> (seen 2026-10-08)
- cancel interview: <https://www.zoho.com/recruit/developer-guide/apiv2/cancel-interview.html> (seen 2026-10-08)
- upload a document: <https://www.zoho.com/recruit/developer-guide/apiv2/upload-document.html> (seen 2026-10-08)
- status codes: <https://www.zoho.com/recruit/developer-guide/apiv2/status-codes.html> (seen 2026-10-08)
- what's new in API v2: <https://www.zoho.com/recruit/developer-guide/apiv2/whats-new.html> (seen 2026-10-08)
- migration to OAuth: <https://www.zoho.com/recruit/developer-guide/apiv2/migration-v2.html> (seen 2026-10-08)
- GDPR changes in the API: <https://www.zoho.com/recruit/developer-guide/apiv2/gdpr-compliance.html> (seen 2026-10-08)
- bulk read limitations: <https://www.zoho.com/recruit/developer-guide/apiv2/bulk-read/limitations.html> (seen 2026-10-08)
- bulk write limitations: <https://www.zoho.com/recruit/developer-guide/apiv2/bulk-write/limitations.html> (seen 2026-10-08)
- unauthenticated API request (401): <https://recruit.zoho.com/recruit/v2/Candidates> (seen 2026-10-08)
- pricing: <https://www.zoho.com/recruit/pricing.html> (seen 2026-10-08)
- price values read by the pricing page: <https://www.zohowebstatic.com/sites/zweb/json/pricing/recruit-pricing-val.json> (seen 2026-10-08)
- plan comparison (staffing agency): <https://www.zoho.com/recruit/plan-comparison.html> (seen 2026-10-08)
- plan comparison (corporate HR): <https://www.zoho.com/recruit/corporate-plan-comparison.html> (seen 2026-10-08)
- product home page: <https://www.zoho.com/recruit/> (seen 2026-10-08)
- product What's New: <https://www.zoho.com/recruit/whats-new.html> (seen 2026-10-08)
- shared responsibility model: <https://www.zoho.com/recruit/shared-responsibility-model.html> (seen 2026-10-08)
- status page: <https://us.zohostatus.com/> (seen 2026-10-08)
- status incident history: <https://us.zohostatus.com/incident_history> (seen 2026-10-08)
- status RSS: <https://us.zohostatus.com/rss> (seen 2026-10-08)
- terms of service: <https://www.zoho.com/terms.html> (seen 2026-10-08)
- contracting entities: <https://www.zoho.com/legal/zoho-contracting-entities.html> (seen 2026-10-08)
- developer agreement: <https://www.zoho.com/developer/terms.html> (seen 2026-10-08)
- privacy policy: <https://www.zoho.com/privacy.html> (seen 2026-10-08)
- sub-processors: <https://www.zoho.com/privacy/sub-processors.html> (seen 2026-10-08)
- GDPR and DPA: <https://www.zoho.com/gdpr.html> (seen 2026-10-08)
- data centres: <https://www.zoho.com/know-your-datacenter.html> (seen 2026-10-08)
- compliance: <https://www.zoho.com/compliance.html> (seen 2026-10-08)
- security.txt: <https://www.zoho.com/.well-known/security.txt> (seen 2026-10-08)
- Zoho MCP: <https://www.zoho.com/mcp/> (seen 2026-10-08)
- empty OpenAPI repository (clone): <https://github.com/zoho/recruit-oas> (seen 2026-10-08)
- RDAP for zoho.com: <https://rdap.verisign.com/com/v1/domain/zoho.com> (seen 2026-10-08)

## Who's behind it (provenance 95/100, checked 2026-10-08)

| Check | Finding | Points |
| --- | --- | --- |
| Legal entity named | Zoho Corporation Private Limited | 20/20 |
| Domain age | zoho.com, registered 2004-01-16 (22 years) | 15/15 |
| Endpoint on the vendor's domain | zoho.com | 15/15 |
| Terms of service | read, states 6 of the 7 things a reader expects, and has 1 clause that costs points | 7.1/10 |
| Privacy policy | read, states 8 of the 8 things a reader expects, and has 1 clause that costs points | 8/10 |
| Status page | status.zoho.com | 10/10 |
| Changelog | published | 10/10 |
| security.txt | valid | 10/10 |

The Terms of Service (last updated 2 March 2022) are the service agreement for Zoho's online services. The contracting entity depends on the customer's region, Zoho Corporation Private Limited for India and Zoho Corporation for the United States (https://www.zoho.com/legal/zoho-contracting-entities.html).

A separate Zoho Developer Agreement at https://www.zoho.com/developer/terms.html covers the developer platform and names Zoho Corporation Private Limited and its affiliates.

The privacy policy was last updated on 22 December 2025 and covers Zoho's websites and the products on them.

security.txt at www.zoho.com gives a bug bounty contact, security@zohocorp.com, a policy link and an expiry of 30 June 2028.

API calls go to recruit.zoho.com and its regional equivalents, or to the `api_domain` returned with the token (www.zohoapis.com). An unauthenticated request to https://recruit.zoho.com/recruit/v2/Candidates answered 401 with a JSON error on 8 October 2026.

The changelog link is the product's What's New page, dated by month. No dated API changelog was found.

RDAP for zoho.com gives a registration date of 2004-01-16.

### Terms and privacy, as read

A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.

**Terms of service** (https://www.zoho.com/terms.html), read 2026-10-08, dated 2022-03-02, states 6 of the 7 things a reader expects.

- To know. Restricts benchmarking or competitive use (costs points). "use the Services for any form of competitive or benchmarking purposes"
- To know. Has not been updated for three years or more. "Last updated on: 2nd March 2022."
- Gives the date it was last updated. Last updated 2022-03-02.
- States a limit on its liability. Capped at the fees paid in the 12 months before the claim or $1000.
- Says how changes to the terms are announced. Gives 30 days of notice before a change.
- Not found in the text. Refers to a service level or uptime commitment.
- Also in the text (2026-10-08). Subscriptions renew automatically and the customer must give at least seven days' notice before the renewal date to stop renewal. "If you do not wish to renew the subscription, you must inform us at least seven days prior to the renewal date."
- Also in the text (2026-10-08). Unpaid accounts inactive for 120 continuous days may be terminated and their data deleted, with prior notice, and activity in one service does not keep another active. "We reserve the right to terminate unpaid user accounts that are inactive for a continuous period of 120 days."
- Also in the text (2026-10-08). If the customer does not answer a forwarded complaint within 10 days, Zoho may give the customer's name and contact information to the complainant. "If you do not respond to the complainant within 10 days from the date of our email to you, we may disclose your name and contact information to the complainant for enabling the complainant to take legal action against you."

**Privacy policy** (https://www.zoho.com/privacy.html), read 2026-10-08, dated 2025-12-22, states 8 of the 8 things a reader expects.

- To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). "In keeping with Zoho's promise not to exploit your data in a way that is not respectful of your privacy and confidentiality expectations, we make only the following limited use of service data for these technologies: (i) using anonymized crops of service data to improve accuracy of the algorithms;"
- Gives the date it was last updated. Last updated 2025-12-22.
- Says how long data is kept. Names a period of 6 months.
- Gives a privacy contact. privacy@zohocorp.com.
- Says where data is transferred or stored. Data goes to the United States.
- Also in the text (2026-10-08). Zoho employees and contractors may open service data to resolve errors and to check by hand emails reported as spam and scanned images. "so that they can (i) identify, analyze and resolve errors, (ii) manually verify emails reported as spam to improve spam detection, or (iii) manually verify scanned images that you submit to us to verify the accuracy of optical character recognition."
- Also in the text (2026-10-08). Zoho says it uses an organisation's data to develop models specific to that organisation. "(ii) using your organization's data for developing models specific for your organization."
- Also in the text (2026-10-08). After an account is terminated, data leaves the active database at a clean-up run once every six months and leaves backups three months later. "Once you terminate your Zoho user account, your data will eventually get deleted from active database during the next clean-up that occurs once in 6 months."

## Probe metrics

Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.

## Prices

| Item | Price | Unit | Note |
| --- | --- | --- | --- |
| Corporate HR Standard | $25 | per seat per month | per recruiter licence, billed yearly; $30 billed monthly |
| Corporate HR Enterprise | $50 | per seat per month | per recruiter licence, billed yearly; $60 billed monthly |
| Staffing Agency Standard | $25 | per seat per month | billed yearly; $30 billed monthly |
| Staffing Agency Professional | $50 | per seat per month | billed yearly; $60 billed monthly |
| Staffing Agency Enterprise | $75 | per seat per month | billed yearly; $90 billed monthly |

Across all listings: https://www.anchorterminal.com/prices/index.md

## Strengths

- OAuth scopes narrow to one module and one operation, such as `ZohoRecruit.modules.candidates.READ`
- `https://www.zoho.com/recruit/developer-guide/llms.txt` indexes 79 API pages, each with a Markdown twin
- Free edition with 5,000 API credits a day, and the home page says no credit card is required
- Upsert matches on `duplicate_check_fields`, so a repeated create updates the record
- Daily credits and concurrency limits are published per edition, with no per-minute cap

## Weaknesses

- No OpenAPI description found. The public repository zoho/recruit-oas is empty
- No official SDK for the Recruit API found in the docs, on PyPI under three likely names or under five likely repository names
- The documented refresh and revoke calls put the refresh token and client secret in the URL query string
- 429 is documented without a Retry-After header or backoff guidance, and no SLA was found
- The limits page, the What's New page and the Corporate HR plan comparison give different daily API allowances

## Before you call it (notes for agents)

1. Use the `api_domain` returned with the token, or the regional host (recruit.zoho.com, recruit.zoho.eu, recruit.zoho.in and others). Tokens from one data centre fail on another
2. Send `Authorization: Zoho-oauthtoken <token>` and refresh hourly. Put refresh parameters in the POST body, not the URL
3. Pass `fields` on list calls and page with `page` and `per_page` (200 at most) until `more_records` is false
4. Create through `/{module_api_name}/upsert` with `duplicate_check_fields` so a retry updates instead of duplicating
5. Move a candidate with `PUT /{module_api_name}/status`, not upsert. Pass `trigger: []` on writes to skip workflows, approvals and blueprints

## Connect

First request:

```bash
curl "https://recruit.zoho.com/recruit/v2/Candidates?fields=Last_Name,Email&per_page=5" \
  -X GET -H "Authorization: Zoho-oauthtoken $ZOHO_ACCESS_TOKEN"
```

Through letme (picks today, calling later): https://letme.dev/zoho-recruit. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md

## Similar tools

Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.

| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |
| --- | --- | --- | --- | --- | --- | --- |
| Greenhouse | B | 64.8 | 271 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/greenhouse.md |
| Ashby | C | 61.3 | 369 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/ashby.md |
| SmartRecruiters | C | 60.4 | 403 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/smartrecruiters.md |
| Lever | D | 53.6 | 541 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/lever.md |
| Recruitee | D | 52.9 | 557 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.interviews, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/recruitee.md |
| Workable | C | 61.7 | 359 | recruiting.candidates, recruiting.jobs, recruiting.applications, recruiting.offer-letters | no | https://www.anchorterminal.com/tools/workable.md |

## Panel reviews (0)

Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .

Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md

## Notable

- API usage is counted in credits over a rolling 24 hours. Free has 5,000, Standard 5,000 plus 250 a user licence up to 100,000, Professional 10,000 plus 500 up to 500,000, Enterprise 15,000 plus 1,000 up to 1,000,000 (source: <https://www.zoho.com/recruit/developer-guide/apiv2/limits.html>)
- Concurrent calls per user and app are capped at 5 on Free, 10 on Standard, 15 on Professional and 20 on Enterprise, with a sub-limit of 10 for heavy calls (source: <https://www.zoho.com/recruit/developer-guide/apiv2/limits.html>)
- The developer guide has an llms.txt index of 79 pages, each served as Markdown at the same path with `.md` (source: <https://www.zoho.com/recruit/developer-guide/llms.txt>)
- The refresh call is documented as a POST with `refresh_token`, `client_id` and `client_secret` in the query string (source: <https://www.zoho.com/recruit/developer-guide/apiv2/refresh.html>)
- The US status page lists a Zoho Recruit component. Its one Recruit-named incident since November 2025 lasted 2 minutes 32 seconds on 4 August 2026 (source: <https://us.zohostatus.com/incident_history>)
- Audit logs are kept for 60 days and activity logs for 90 days, per Zoho Recruit's shared responsibility page (source: <https://www.zoho.com/recruit/shared-responsibility-model.html>)
- github.com/zoho/recruit-oas is a public repository with no commits, and no OpenAPI file for Recruit was found (source: <https://github.com/zoho/recruit-oas>)

## Compare

- [Ashby vs Zoho Recruit](https://www.anchorterminal.com/compare/ashby-vs-zoho-recruit.md): C 61.3 vs C 59.8
- [Bullhorn vs Zoho Recruit](https://www.anchorterminal.com/compare/bullhorn-vs-zoho-recruit.md): D 46.7 vs C 59.8
- [Gem vs Zoho Recruit](https://www.anchorterminal.com/compare/gem-vs-zoho-recruit.md): D 53.3 vs C 59.8
- [Greenhouse vs Zoho Recruit](https://www.anchorterminal.com/compare/greenhouse-vs-zoho-recruit.md): B 64.8 vs C 59.8
- [Lever vs Zoho Recruit](https://www.anchorterminal.com/compare/lever-vs-zoho-recruit.md): D 53.6 vs C 59.8
- [Pinpoint vs Zoho Recruit](https://www.anchorterminal.com/compare/pinpoint-vs-zoho-recruit.md): C 61.2 vs C 59.8
- [Recruitee vs Zoho Recruit](https://www.anchorterminal.com/compare/recruitee-vs-zoho-recruit.md): D 52.9 vs C 59.8
- [SmartRecruiters vs Zoho Recruit](https://www.anchorterminal.com/compare/smartrecruiters-vs-zoho-recruit.md): C 60.4 vs C 59.8
- [Workable vs Zoho Recruit](https://www.anchorterminal.com/compare/workable-vs-zoho-recruit.md): C 61.7 vs C 59.8

## Verify this listing

For the vendor. The badge or a plain link to this page verifies the listing, from a page on zoho.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "zoho-recruit", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify

HTML badge:

```html
<a href="https://www.anchorterminal.com/tools/zoho-recruit"><img src="https://www.anchorterminal.com/badges/zoho-recruit.svg" alt="Zoho Recruit on Anchor Terminal" height="20"></a>
```

Markdown badge, for a README:

```markdown
[![Zoho Recruit on Anchor Terminal](https://www.anchorterminal.com/badges/zoho-recruit.svg)](https://www.anchorterminal.com/tools/zoho-recruit)
```

Plain link:

```html
<a href="https://www.anchorterminal.com/tools/zoho-recruit">Zoho Recruit on Anchor Terminal</a>
```

## Share this listing

For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Zoho Recruit is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.

- Dark: https://www.anchorterminal.com/assets/share/zoho-recruit-dark.png
- Light: https://www.anchorterminal.com/assets/share/zoho-recruit-light.png