# Nowsta

> Workforce management platform for hourly, gig and contingent labor — sourcing, AI-assisted shift
> scheduling, GPS time and attendance, labor-cost reporting, payroll handoff and staffing-agency vendor
> management — used by 25,000+ teams across hospitality, events and venues, healthcare, logistics,
> education and retail. Headquartered in Brooklyn, New York.

Nowsta does not publish an llms.txt of its own (probed 2026-08-01 — every Nowsta host either 404s or
soft-404s /llms.txt with the homepage). This file was generated by API Evangelist from the catalog
entry and the artifacts in this repository.

## What the API does

Nowsta publishes one public API: the **Nowsta Integration API**. It is an allow-listed, write-only bulk
publication surface that lets an upstream system (event management, catering, venue or CRM software)
push workforce data into Nowsta. Six endpoints, all POST, all under `/integrations/v1/`:

- `POST /integrations/v1/events/publications` — events with nested shifts (`publishEvents`)
- `POST /integrations/v1/venues/publications` — venues (`publishVenues`)
- `POST /integrations/v1/clients/publications` — clients (`publishClients`)
- `POST /integrations/v1/uniforms/publications` — uniforms (`publishUniforms`)
- `POST /integrations/v1/positions/publications` — positions and pay rates (`publishPositions`)
- `POST /integrations/v1/workers/publications` — workers / company users (`publishWorkers`)

There are **no read, PATCH or DELETE operations**, no webhooks, no event stream and no GraphQL.

## Key facts an agent needs

- Base URL `https://api.nowsta.com`; staging `https://api.nowsta-staging.com` (access granted on request).
- Auth: `Authorization: Bearer <token>` — one static token per company, retrieved from the Nowsta UI.
- Nowsta must approve a company before its token works; otherwise `403` with error code `1101`.
- Max **32 items** per publication request; over that is `422` / code `1203`.
- Requests for the same company are **queued and processed serially** — issue calls in series.
- Success is **`202 Accepted`** with a queued-job id. There is no way to poll or confirm the job.
- **POST, not PATCH** — omitted fields are reset to `null`. Always send the complete object.
- Retries are safe: publications are full-object upserts on your own external `id`. No
  `Idempotency-Key` header exists.
- Errors are `{"errors":[{"code":<int>,"message":"..."}]}` — a proprietary numeric registry, not RFC 9457.

## Specs

- [OpenAPI 3.0.3 — Nowsta Integration API](openapi/nowsta-integration-openapi.yml) (transcribed from Nowsta's published reference; 6 operations)
- [Overlay — API Evangelist enhancements](overlays/nowsta-integration-overlay.yaml)

## Artifacts

- [API conventions](conventions/nowsta-conventions.yml) — idempotency, batching, concurrency, tracing, versioning
- [Error catalog](errors/nowsta-problem-types.yml) — the published 1000–1500 code registry
- [Authentication profile](authentication/nowsta-authentication.yml)
- [Data model](data-model/nowsta-data-model.yml) — entities, relationships, publish order, PII map
- [Lifecycle](lifecycle/nowsta-lifecycle.yml) — versioning, status page, docs decommissioning
- [Sandbox](sandbox/nowsta-sandbox.yml) — staging environment and access
- [Conformance](conformance/nowsta-conformance.yml) — standards conformance and compliance posture
- [Domain security](security/nowsta-domain-security.yml) — TLS, HSTS, SPF, DMARC, DNSSEC, CAA
- [Well-known probe](well-known/nowsta-well-known.yml) — no discovery documents published
- [Candidate MCP tool surface](mcp/nowsta-mcp.yml) — derived, not published by Nowsta
- [Agent skills](skills/_index.yml)

## Docs

- API reference (archived — developer.nowsta.com no longer resolves): https://web.archive.org/web/20240603053309/https://developer.nowsta.com/
- Integration Addendum: https://www.nowsta.com/integration-addendum/
- Help center: https://intercom.help/nowstasupport/en/
- Support tickets: https://community.nowsta.com/support/tickets/new
- Status page: https://status.nowsta.com/

## Company

- Website: https://www.nowsta.com/
- Workforce Management: https://www.nowsta.com/workforce-management/
- Vendor Management: https://www.nowsta.com/vendor-management/
- Blog: https://www.nowsta.com/blog/
- Customer sign in: https://app.nowsta.com/
- Worker portal: https://my.nowsta.com/jobs
- Terms and conditions: https://www.nowsta.com/terms-and-conditions/
- Privacy policy: https://www.nowsta.com/privacy-policy/
- GitHub: https://github.com/Nowsta

## Caveats

- Nowsta's developer documentation host (`developer.nowsta.com`) was decommissioned; the API is still
  live and answering. There is no current canonical reference and no changelog, so drift between this
  specification and the running API cannot be detected from public sources.
- Nowsta ships no SDKs, no CLI, no Postman collection and no MCP server (registries and the GitHub org
  were searched on 2026-08-01).
- No published compliance certifications (SOC 2 / ISO 27001 / HIPAA) were found, and there is no
  security.txt or vulnerability disclosure policy.