Resources / Integrations / Gusto (payroll and HR)

Gusto (payroll and HR)

Read-only employee directory sync from Gusto payroll through an OAuth connection.

Last verified against our product: October 4, 2026

Availability

Connect flow built; availability depends on Gusto app approval

Gusto grants API access per application after review. Ask us for the current status before planning around this one.

How an admin connects it

OAuth Connect button. No API key to copy or paste.

Who can set it up: Organization admin (and a Gusto admin able to approve the app).

  1. In the Mucho Gusto admin console, open the Gusto card and click Connect.
  2. Approve the request on Gusto's consent screen.
  3. You are returned to the admin console and the first sync runs.

Permissions requested

Permission or scopeWhat it allows
(none requested by us)Our authorization request carries no scope parameter. Gusto assigns the data an application can read when it reviews and approves the application, so the permissions are fixed by that approval rather than chosen at connect time.

We use only Gusto's read endpoints for the company and its employees, and never request compensation or payroll data.

Data we read

Read

  • Work email (falling back to the employee email)
  • First and last name
  • Job title (primary job)
  • Hire date (primary job)
  • Manager (resolved to the manager's email)
  • Terminated flag and termination date when Gusto provides one

Not read

  • Compensation, bonuses or pay-related fields
  • Government identifiers (SSN, tax ID, passport)
  • Date of birth
  • Home address or personal phone number
  • Bank or benefits information
  • Performance reviews or time-off records

Sync reads up to the first 500 employees of the company. Department is not imported from Gusto.

How the data is used

  • Seeds and refreshes your organization's org chart: job title, department and reporting line.
  • Records hire and termination dates so tenure and new-hire cohorts in the Connection Score are accurate.
  • Matches directory people to existing members by lowercased email address. A manager you have set by hand is never overwritten by a sync.
  • A sync never deactivates a seat or deletes a member account. Someone who disappears from the directory is marked as terminated in the employment history only.

Sync frequency

Automatically once a day (04:00 UTC), plus on demand with the admin console's sync button.

Disconnecting and purging data

How: Admin console, Gusto card, Disconnect.

  • Our stored Gusto connection (company and refresh token) is deleted.
  • Nightly syncs for your organization stop.
  • Disconnecting removes our stored connection. We do not call the vendor to revoke the grant, so also revoke Mucho Gusto's access inside the vendor's own admin settings.

What remains: Disconnecting removes the stored connection only. Org-chart entries, titles, reporting lines and employment dates already imported stay in your organization's workspace, and member accounts are not deleted. To have previously synced data removed as well, email [email protected] and we will handle it case by case; there is no self-service purge today.

Back to all integrations

Questions or a correction? [email protected]. See also: Security, Subprocessors, Privacy, Terms.