AgentStack
SKILL verified Apache-2.0 Self-run

Catalystone

skill-apideck-libraries-api-skills-catalystone · by apideck-libraries

|

No reviews yet
0 installs
10 views
0.0% view→install

Install

$ agentstack add skill-apideck-libraries-api-skills-catalystone

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets Used
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Catalystone? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

CatalystOne (via Apideck)

Access CatalystOne through Apideck's HRIS unified API — one of 58 HRIS connectors that share the same method surface. Code you write here ports to BambooHR, Workday, Deel and 54 other HRIS connectors by changing a single serviceId string. Apideck handles auth, pagination, rate limiting, and retries so you don't write per-tenant CatalystOne plumbing.

> Beta connector. CatalystOne is currently in beta on Apideck. Expect partial resource coverage and occasional mapping gaps. Always verify coverage (see below) and fall back to the Proxy API for unsupported operations.

Quick facts

  • Apideck serviceId: catalystone
  • Unified API: HRIS
  • Auth type: oauth2
  • Status: beta
  • Apideck setup guide: Connection guide
  • Gotchas: page
  • CatalystOne docs: https://www.catalystone.com
  • Homepage: https://www.catalystone.com/

When to use this skill

Activate this skill when the user explicitly wants to work with CatalystOne — for example, "sync employees in CatalystOne" or "list time-off requests in CatalystOne". This skill teaches the agent:

  1. Which Apideck unified API covers CatalystOne (HRIS)
  2. The correct serviceId to pass on every call (catalystone)
  3. CatalystOne-specific auth and coverage caveats

For the full method surface (parameters, pagination, filtering), use your language SDK skill:

  • [apideck-node](../../skills/apideck-node/), [apideck-python](../../skills/apideck-python/), [apideck-dotnet](../../skills/apideck-dotnet/), [apideck-java](../../skills/apideck-java/), [apideck-go](../../skills/apideck-go/), [apideck-php](../../skills/apideck-php/), or [apideck-rest](../../skills/apideck-rest/)

For the raw OpenAPI spec:

Minimal example (TypeScript)

import { Apideck } from "@apideck/unify";

const apideck = new Apideck({
  apiKey: process.env.APIDECK_API_KEY,
  appId: process.env.APIDECK_APP_ID,
  consumerId: "your-consumer-id",
});

// List employees in CatalystOne
const { data } = await apideck.hris.employees.list({
  serviceId: "catalystone",
});

Portable across 58 HRIS connectors

The Apideck HRIS unified API exposes the same methods for every connector in its catalog. Switching from CatalystOne to another HRIS connector is a one-string change — no rewrite, no new SDK.

// Today — CatalystOne
await apideck.hris.employees.list({ serviceId: "catalystone" });

// Tomorrow — same code, different connector
await apideck.hris.employees.list({ serviceId: "bamboohr" });
await apideck.hris.employees.list({ serviceId: "workday" });

This is the compounding advantage of using Apideck over integrating CatalystOne directly: code against the unified HRIS API once, gain access to every connector in it. New connectors Apideck adds become available to your app without code changes.

Authentication

  • Type: OAuth 2.0
  • Managed by: Apideck Vault — Apideck handles the full OAuth dance (authorization code flow, token exchange, refresh). Never ask the user for API keys or tokens directly.
  • User setup: Users authorize via the Vault modal. Connection state progresses available → added → authorized → callable.
  • Token refresh: automatic. Expired tokens are refreshed transparently on the next API call.

Setup guide: Apideck publishes a step-by-step guide for registering an OAuth app / configuring credentials for CatalystOne — see https://developers.apideck.com/connectors/catalystone/docs/consumer+connection. Use that as the authoritative source when walking users through connection setup.

See [apideck-best-practices](../../skills/apideck-best-practices/) for Vault setup, connection lifecycle, and handling re-auth flows.

Verifying coverage

Not every HRIS operation is supported by every connector. Always verify before assuming a method works:

curl 'https://unify.apideck.com/connector/connectors/catalystone' \
  -H "Authorization: Bearer ${APIDECK_API_KEY}" \
  -H "x-apideck-app-id: ${APIDECK_APP_ID}"

See [apideck-connector-coverage](../../skills/apideck-connector-coverage/) for patterns around UnsupportedOperationError and connector-specific fallbacks.

Escape hatch: Proxy API

When an endpoint isn't covered by the HRIS unified API, use Apideck's Proxy to call CatalystOne directly — Apideck injects auth headers and handles token refresh. Set x-apideck-downstream-url to the target endpoint on CatalystOne's own API:

curl 'https://unify.apideck.com/proxy' \
  -H "Authorization: Bearer ${APIDECK_API_KEY}" \
  -H "x-apideck-app-id: ${APIDECK_APP_ID}" \
  -H "x-apideck-consumer-id: ${CONSUMER_ID}" \
  -H "x-apideck-service-id: catalystone" \
  -H "x-apideck-downstream-url: " \
  -H "x-apideck-downstream-method: GET"

See CatalystOne's API docs for available endpoints.

Sibling connectors

Other HRIS connectors that share this unified API surface (same method signatures, just change serviceId):

[bamboohr](../bamboohr/), [workday](../workday/), [deel](../deel/) (beta), [hibob](../hibob/), [personio](../personio/), [adp-ihcm](../adp-ihcm/) (beta), [adp-workforce-now](../adp-workforce-now/) (beta), [paychex](../paychex/) (beta), and 49 more.

See also

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.