io.github.gzchenhao/openhire
Provides job search, watch intents, and application authorization for job listings sourced from employers' Greenhouse ATS APIs.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@io.github.gzchenhao/openhireFind me remote jobs for AI engineers with Rust and Kubernetes skills."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
OpenHire · 开聘
A job-search radar for your AI assistant — first-party listings, ghost jobs scored, and your résumé never touches our servers. 让 AI 助手替你盯岗的求职雷达 —— 一手职位、幽灵岗位打分,简历不经过我们的服务器。
An MCP server that turns your AI assistant (Claude, Cursor, Windsurf) into a private radar for AI / Infra, autonomous-driving and embodied-AI jobs — pulled straight from 139 employers' own career sites and public ATS APIs (Greenhouse / Lever / Ashby / 北森 Beisen / Moka), across the US, Europe and China (Waymo, Figure, Zoox — and Unitree, XPeng, UBTECH, Mech-Mind…). No account. No signup. No résumé upload. Ever.
Three things a job board won't do for you:
Kills ghost-job noise. Every listing carries a
ghost_scoreaged off the employer's real posting date — the "2 days ago" a board shows you can be 300 days old in the ATS.Structural privacy, not a pinky-promise. There is no résumé field in the protocol; a CI test fails the build if anyone adds one. Matching runs on your machine — only an anonymous fingerprint reaches the server.
Ranking you can't buy. Order is a locked pure function of (match, freshness). No sponsored slots, no bidding — the signature is frozen by a test.
This is the 「哨兵 / Sentinel」 reference implementation — see
design_handoff_openhire_v01/README.md for the full protocol spec.
Quickstart — under a minute
# 1. Install (pipx keeps it isolated and puts `ohp` on your PATH)
pipx install openhire
# 2. Get a job index. Default: download the public snapshot, then refresh it live.
ohp bootstrap # 139 employers · ~16k live postings · no account
# 3. Use it directly…
ohp search --required-skills rust,k8s --remote --role-family engineering
ohp search --currency CNY --role-family engineering # e.g. CN autonomous-driving / robotics roles
# …or connect it to an MCP client:
ohp serveThen point your MCP client at it — see Works with below.
Related MCP server: Job Application MCP
Works with
All clients use the same MCP entry. If you ran pipx install openhire, use ohp; otherwise
uvx openhire serve fetches and runs it with no prior install (needs uv).
Claude Desktop — %APPDATA%\Claude\claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/); quit & reopen after editing:
{ "mcpServers": { "openhire": { "command": "ohp", "args": ["serve"] } } }Cursor — ~/.cursor/mcp.json (or a project .cursor/mcp.json):
{ "mcpServers": { "openhire": { "command": "uvx", "args": ["openhire", "serve"] } } }Windsurf — ~/.codeium/windsurf/mcp_config.json:
{ "mcpServers": { "openhire": { "command": "uvx", "args": ["openhire", "serve"] } } }Run
ohp bootstraponce first so the index has data. On Windows Claude Desktop from the Microsoft Store, the config is under…\Packages\<Claude package>\LocalCache\Roaming\Claude\.
What it does
Tool | What it gives you |
| Hard-filter the live index; every result carries |
| Register a standing intent once — new matching jobs are waiting next time you check, even after you close the terminal. Accepts |
| Pull the matches that are new since your last check (client-pull; stdio has no push). |
| One explicit confirmation per job. It records your authorization and returns the employer's own application URL — you apply as yourself. It cannot accept a résumé. |
| Aggregate, anonymous trust signals for one employer ( |
Optional, entirely local: ohp init --scan <dir> derives a skill fingerprint from your
own repos. You never write a résumé; the code never leaves your machine — only an anonymous
vector does.
The five protocol fields
Every listing is valid schema.org/JobPosting, plus:
verified_at— last moment confirmed live on the employer's own sitesource—employer_site | ats_public_api(never a job board)ghost_score— 0–1 listing-activity signal, aged off the real posting date (lower = fresher). A noise filter, not an accusation: long-open listings are often evergreen talent pools or slow pipelines — the score simply lets agents down-rank low-activity noiseresponse_sla_days— employer's committed response window (v0.1: always null)apply_channel— always the employer's own application URL, deep-linked to the specific job
Privacy model
Résumé / PII upload | never — matching runs locally; a résumé never transits the server, and we never store one |
What the server sees | one anonymous, client-generated fingerprint + hard filters |
Repo scan | local-only · personal projects · explicit consent · opt-out anytime |
Job sources | first-party only: employer career pages + public ATS APIs (Greenhouse / Lever / Ashby) |
First-run data — the snapshot vs. fresh
ohp bootstrap (default) downloads a small public index snapshot (a GitHub Release
asset — companies + jobs only, zero user data) and then runs one incremental crawl to
refresh verified_at / delisting. --fresh skips the snapshot and crawls the public ATS from
scratch with the free offline heuristic extractor. Either way: no account, no PII.
Three rules this project will never break
Your résumé stays on your machine — it never transits the server, and we never store it.
Ranking is not for sale — it is only
f(match_quality, freshness), a locked pure function.Employers pay only for authorized, delivered outcomes — never for exposure. (v0.1 has no billing at all.)
These are enforced by CI (tests/test_privacy.py, tests/test_ranking.py,
tests/test_snapshot.py).
Development
python -m venv .venv && . .venv/Scripts/activate # Windows
pip install -e ".[dev]"
pytest # privacy red lines + ranking + snapshot must be greenSet OPENHIRE_DATABASE_URL=postgresql+psycopg://… to run against Postgres instead of the
default local SQLite file (~/.openhire/openhire.db).
Roadmap
v0.2 – v0.3 (shipped) — CN ATS adapters (北森 Beisen + Moka) · weekly auto-refreshed public snapshot ·
ghost_scorepublic beta · 139 employers across US / EU / Chinanext — Employer claim + verified badges — employers can reserve their claim today via a corporate-identity GitHub issue (zero-cost now; badges + listing-status control ship next) · response-SLA enforcement (7-day auto-delist) · redacted proof-of-fit — an anonymous, candidate-authorized match summary that travels with an application (skills overlap only; identity never included, résumés still never transit the server)
v1.0 — Open, vendor-neutral schema extension for AI-readable job postings
FAQ
Where does the job data come from?
Directly from 139 employers' own public ATS APIs (Greenhouse, Lever, Ashby, 北森 Beisen, Moka) — the
same endpoints that power their careers pages. No scraping, no third-party job boards. source is
always ats_public_api, and verified_at records the last time we confirmed each posting live.
The public index is auto-refreshed weekly, so a fresh ohp bootstrap starts from recent data.
Why should I trust ghost_score?
It's a pure, open, unpurchasable function — min(1, 0.15·relist_count + staleness) aged off the
real ATS posting date, not our crawl date. The formula lives in pipeline/ghost_score.py,
is unit-tested, and takes no money as input (red line #2). Long-open, repeatedly-relisted
postings score higher; you can always re-rank client-side. Read it as signal-to-noise, not
bad faith: plenty of high-scoring listings are legitimate evergreen talent pools. Employers
who want their listing activity represented accurately can claim their tenant (see Roadmap).
Does my résumé actually go through the server — really?
No. There is no résumé anywhere in the protocol. authorize_application has no résumé/file
parameter (it structurally cannot accept one), matching runs on your machine, and the only thing
that ever transits the server is a short anonymous fingerprint like #a3f9. This is enforced by
tests/test_privacy.py, and the published snapshot carries zero user data (tests/test_snapshot.py).
Does it support China (中国区)?
Yes — this is what sets OpenHire apart. Employers on 北森 Beisen (<tenant>.zhiye.com) and
Moka (app.mokahr.com) are indexed: 20+ autonomous-driving / robotics / embodied-AI
companies including 宇树 Unitree, 小鹏 XPeng, 优必选 UBTECH, 梅卡曼德 Mech-Mind, 速腾聚创 RoboSense,
元戎启行 DeepRoute, 星海图 Galaxea, 傅利叶 Fourier, 普渡 Pudu. Pay published as 月薪 keeps its real
period (salary_period), so a salary floor no longer silently drops Chinese roles.
飞书招聘 (Feishu Hire) is not supported and won't be: it signs its job-list requests with a
ByteDance _signature and gates them behind a captcha SDK, so its listings are not publicly
readable. We don't break anti-bot measures. Moka is on the roadmap.
How do I get a company added?
Open a Company inclusion request issue (title it with the company + its ATS URL) — this is
the best way to contribute. If you code, add it to src/openhire/seed/candidates.py (company
slug + ATS vendor/tenant) and open a PR; the seeder validates tenants against the live API.
License
MIT © OpenHire Protocol · PRs welcome.
Built by a non-coder PM-ing Claude Code — full acceptance reports in reports/.
Available Tools
5 toolsauthorize_applicationA
Record an authorized, employer-direct application. REFUSES résumés.
(Formerly apply — renamed to make explicit that this only records the user's
authorization to apply as themselves; it never submits anything on their behalf.)
This tool never accepts a résumé, file, cover letter, name, email or phone — a résumé never transits the server. It only takes a job_id, an anonymous fingerprint, and an explicit per-job authorization. On success it returns the apply_channel (the employer's own application URL) for the user to submit as themselves, plus resume_transmitted=false. Do NOT paste résumé content into any argument.
Args: job_id: the job to apply to (from search_jobs / check_watches). fingerprint: the user's anonymous fingerprint. authorized: must be true — explicit per-job consent.
| Name | Required | Description | Default |
|---|---|---|---|
| job_id | Yes | ||
| authorized | Yes | ||
| fingerprint | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It clearly discloses the side effect of recording authorization, the non-actions of never submitting and never transmitting résumés, and the success response containing apply_channel and resume_transmitted=false. It stops short of documenting error behavior or idempotency, but the core behavioral profile is transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core action and restriction, and the Args section is cleanly organized. The résumé prohibition is repeated several times for safety emphasis, which is slightly redundant but defensible for a privacy-sensitive tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Without an output schema, the description defines the return values and the intended follow-up: the user submits via the employer's apply_channel. It lacks error semantics for authorized=false and duplicate applications, but otherwise it is complete for a small three-parameter tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description compensates by explaining all three parameters: job_id provenance via search_jobs/check_watches, fingerprint as anonymous, and authorized as 'must be true' per-job consent. This adds both semantic meaning and validation guidance that the bare schema lacks.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Record an authorized, employer-direct application' and a hard exclusion 'REFUSES résumés.' It further clarifies the rename from apply, explicitly stating it records authorization and 'never submits anything on their behalf,' making it easy to distinguish from any submission-like sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states when to use it: on a job returned by search_jobs/check_watches, after receiving explicit per-job consent with authorized set to true. It also gives when-not behavior by refusing résumés and warning not to paste résumé content, and it directs the user to the apply_channel as the correct alternative path for actual submission.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_watchesA
Pull matches that are new since this fingerprint's last check.
stdio has no server push, so clients pull: call this at the start of a session. Returns the new matches per watch and advances each watch's last-notified marker.
| Name | Required | Description | Default |
|---|---|---|---|
| fingerprint | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It discloses that the call returns new matches per watch and, importantly, advances each watch's last-notified marker, which is a side effect. It does not cover error cases or auth, but the core behavior is transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences with front-loaded purpose, a clear rationale, and the behavioral result. Every sentence earns its place with no redundant filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with no output schema, the description covers when to call, what it returns, and what side effect it has. The only noticeable omission is a fuller explanation of the fingerprint value, which is a parameter-level gap rather than a tool-level one.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides only a bare 'fingerprint' string with 0% description coverage. The description adds that the fingerprint is tied to tracking the last check, which gives it semantic meaning, but it never explains what a fingerprint is or how it is obtained, leaving a gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: pull matches that are new since this fingerprint's last check. This clearly distinguishes it from siblings like search_jobs and watch_intent by focusing on polling watch results rather than searching, reading company info, or authorizing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage context: because stdio has no server push, the client should call this at the start of a session. It does not name alternative tools, but the context strongly implies this is the polling complement to watch_intent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_company_infoA
Aggregate, anonymous trust signals for one employer.
Returns ghost_score_avg, active_jobs, and index_built_at (when the index was last built). NEVER returns any individual candidate data — the server holds none.
| Name | Required | Description | Default |
|---|---|---|---|
| company_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It does this well by stating a key guarantee—'NEVER returns any individual candidate data'—and explaining why ('the server holds none'). It also clarifies the meaning of index_built_at. The read-only nature is implied through 'Returns,' though it doesn't mention potential errors or authentication needs, which are secondary for this simple info tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no wasted words. The primary purpose is front-loaded, return fields are listed concisely, and the critical negative constraint (no individual candidate data) is stated crisply. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one simple parameter, no output schema, and no annotations, the description is largely complete. It names all return fields, explains the meaning of one potentially ambiguous field (index_built_at), and discloses the privacy limitation. It could go further by mentioning error behavior or how company_id is validated, but given the low complexity, the current information is adequate for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides zero description coverage for company_id, so the description must compensate. It only weakly ties the parameter to 'one employer,' but does not explain what a company_id is, where to obtain it, or expected format. This leaves the agent with only the tool name and the generic 'Company Id' title to infer the parameter's meaning, which is insufficient given 0% schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Aggregate, anonymous trust signals for one employer,' a specific verb+resource statement that immediately identifies the tool's function. It also enumerates the return fields (ghost_score_avg, active_jobs, index_built_at), and the scope ('for one employer') clearly distinguishes it from sibling tools like search_jobs, watch_intent, and authorize_application, which operate on different resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied rather than explicit: the description says 'for one employer,' suggesting this is the tool to call when you need trust/aggregate signals for a specific company. However, it does not explicitly state when to use this tool versus alternatives, nor does it provide exclusion criteria or conditional guidance for selecting among siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_jobsA
Search the live job index by hard filters; returns ranked JobPosting[].
The server does ONLY a hard filter plus a fixed ranking of match-quality × freshness — precise re-ranking is left to you, the client, which holds the user's context. Every result includes the five protocol fields (verified_at, source, ghost_score, response_sla_days, apply_channel) plus datePosted, days_open, remote_scope and eligible_regions.
Args: skills: skill tags, ANY-overlap match (union), e.g. ["rust", "k8s"]. required_skills: skills that must ALL be present (AND), e.g. ["rust"]. remote: if true, only fully-remote roles. remote_scope: filter remote roles by reach: "worldwide" | "region_locked" | "country_locked". min_salary: salary floor. By default roles with NO stated pay are KEPT (they can't be ruled out); set require_stated_salary=true to drop them. currency: restrict to a stated-pay currency, e.g. "USD" (implies stated pay). require_stated_salary: if true, drop roles that publish no salary. role_family: coarse family filter, e.g. "engineering" (v0.1: unpopulated → no-op). limit: max results (default 20).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| remote | No | ||
| skills | No | ||
| currency | No | ||
| min_salary | No | ||
| role_family | No | ||
| remote_scope | No | ||
| required_skills | No | ||
| require_stated_salary | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it delivers: it discloses that only hard filtering is done, ranking is fixed as match-quality × freshness, roles without stated pay are kept by default, require_stated_salary changes that behavior, and role_family is currently a no-op. It also lists exactly which fields every result contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, followed by an important behavioral caveat, then a clean parameter list. Every sentence conveys necessary information without fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 9-parameter tool with no annotations and zero schema description coverage, this description is fully self-sufficient. It covers semantics, edge cases, output fields, and the server's ranking behavior, so an agent can invoke it correctly and interpret results confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must fully document all 9 parameters, and it does. It explains union vs. AND matching for skills, remote_scope enum values, the salary floor interaction with require_stated_salary, currency implying stated pay, role_family no-op status, and limit default.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Search the live job index by hard filters; returns ranked JobPosting[]'. It clearly distinguishes this as a filtering/search tool and is not confusable with the unrelated sibling tools (get_company_info, watch_intent, etc.).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly explains that the server performs only hard filtering plus a fixed ranking, and that precise re-ranking is left to the client holding user context. This gives the agent a clear sense of when this tool is appropriate. However, it does not name an alternative search-like sibling or state explicit exclusion conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
watch_intentA
Register a standing intent so new matches can be pulled later.
The caller supplies its OWN anonymous fingerprint (e.g. "#a3f9") — the client generates
and owns it; the server stores but can never recover it, so persist it client-side and
pass the identical one to check_watches. Only the fingerprint and non-PII filter keys
are stored — never a name, email, phone or résumé. Accepted filter keys mirror
search_jobs: skills (ANY-overlap), required_skills (ALL/AND — use this to keep
sales / solutions-architect roles out), remote (bool), role_family (e.g.
"engineering"), min_salary (int). Returns { watch_id, status, fingerprint,
fingerprint_notice }.
| Name | Required | Description | Default |
|---|---|---|---|
| filters | Yes | ||
| fingerprint | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, and it does well: it discloses that only the anonymous fingerprint and non-PII filter keys are stored, that the server cannot recover the fingerprint, and that the client must persist it. It also reports the return fields. It does not discuss duplicate registration behavior or idempotency, but the privacy and persistence semantics are unusually transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is thorough but not bloated. The purpose is front-loaded, and each subsequent section — fingerprint ownership, data-retention guarantees, filter-key catalog, return payload — earns its place. The structure makes the content easy to scan and act on.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations, no output schema, and a completely open filters object, the description is remarkably complete. It covers the call's side effects, the client's responsibility, filter semantics, privacy behavior, and the returned fields. An agent has enough to call this correctly and to coordinate with check_watches.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate entirely, and it does. It explains the fingerprint's ownership, persistence requirement, and relationship to check_watches, then details the accepted filter keys (skills, required_skills, remote, role_family, min_salary) with matching semantics and an example. This goes well beyond the bare schema's 'additionalProperties: true'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear verb and resource: 'Register a standing intent so new matches can be pulled later.' It establishes a distinct purpose that separates this from one-time search tools like search_jobs and from the later retrieval tool check_watches, even before reading any sibling schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly explains when to use this tool: to establish a persistent intent whose results are retrieved later. It names check_watches as the companion tool that must receive the identical fingerprint, and references search_jobs for filter-key semantics. It stops short of explicitly stating 'do not use this for one-time searches,' but the context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.3.2- First observed
authorize_application - First observed
check_watches - First observed
get_company_info - First observed
search_jobs - First observed
watch_intent
TDQS
Each tool targets a distinct action: one-off search, company signal lookup, watch registration, watch polling, and application authorization. Search and watching are related but clearly separated by one-time vs persistent intent, so there is no real ambiguity.
All tool names follow a consistent lower_snake_case verb_noun pattern: search_jobs, get_company_info, watch_intent, check_watches, authorize_application. The verbs are clear and the pairing between watch_intent and check_watches is obvious.
Five tools is well-scoped for this privacy-conscious job-search workflow. Each tool covers a distinct step—discover, research, watch, poll, authorize—without redundancy or unnecessary surface area.
The job search and application authorization flow is covered well, but the watch lifecycle is incomplete: watches can be created and polled but not listed, updated, or deleted. Company lookup and authorization are one-shot operations, so the main dead-end is stale or unmanaged watches.
Maintenance
Related MCP Connectors
AI job search MCP — fact-checked jobs, application tracker, alerts. ChatGPT, Claude, Cursor.
Public MCP server for discovering open jobs. Search, filter, and get application links.
Search live startup jobs from Claude, Cursor, or ChatGPT via MCP. Free, no account needed.
MCP for 8,700+ current AI jobs. 13 tools: search, match, salaries, companies, commerce quotes.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAn MCP server that enables AI-assisted job search workflows including job discovery, application tracking, resume evaluation, and cover letter generation, with support for multiple job sources and scheduled scraping.181AGPL 3.0
- AlicenseNot gradedqualityAmaintenanceA local-first, open-source MCP server that analyzes jobs, matches your CV, tailors documents, and tracks applications — all on your machine with no data uploaded.AGPL 3.0
- AlicenseNot gradedqualityCmaintenanceAn MCP server that exposes job-search and application-management capabilities to compatible AI clients, enabling discovery of vacancies, drafting of tailored application materials, and coordinated human-approved submissions.MIT
- FlicenseNot gradedqualityCmaintenanceMCP server that enables AI assistants to search LinkedIn for job posts, save them locally, and manage them via a React dashboard.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/gzchenhao/openhire'
If you have feedback or need assistance with the MCP directory API, please join our Discord server