HopeHire
in.hopehire/mcphopehire.instreamable-httpv1.0.0Scanned
Tailor resumes, score ATS fit, find hiring leads, and send cold outreach, from your agent.
165 tools: 12 can delete or cancel things, 10 do something that can't be undone, 69 change things and 74 only read.
- Reads private data · 20
- Reads text others write · 24
- Can send data out · 61
- No findings
Anlyon alternative
91 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
165 tools
Deletes or cancels 12Claude Code: deny
cancel_outreach_batch_api_outreach_batches__batch_id__cancel_postCancel Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "cancel_outreach_batch_api_outreach_batches__batch_id__cancel_post" says "cancel": a word for removing or ending something.
Description, as the server wrote it Cancel Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
cancel_pending_auto_reply_api_auto_replies__reply_id__deleteCancel Pending Auto Reply Cancel a pending auto-reply before it fires.No findings
Why it is in this group
- The name "cancel_pending_auto_reply_api_auto_replies__reply_id__delete" says "cancel": a word for removing or ending something.
Description, as the server wrote it Cancel Pending Auto Reply Cancel a pending auto-reply before it fires. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
clear_job_matches_api_job_matches_deleteClear Job Matches Clear all job matches for a user Requires authentication.No findings
Why it is in this group
- The name "clear_job_matches_api_job_matches_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Clear Job Matches Clear all job matches for a user Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
delete_key_api_api_keys__key_id__deleteDelete Key ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "delete_key_api_api_keys__key_id__delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete Key ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
delete_notification_api_notifications__notification_id__deleteDelete Notification Delete a notification.No findings
Why it is in this group
- The name "delete_notification_api_notifications__notification_id__delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete Notification Delete a notification. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
delete_preferences_api_job_preferences_deleteDelete Preferences Delete the user's job preferences Requires authentication.No findings
Why it is in this group
- The name "delete_preferences_api_job_preferences_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete Preferences Delete the user's job preferences Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
delete_remembered_field_answer_api_user_memory__user_id__remembered_field_deleteDelete Remembered Field Answer Forgets one remembered application-field answer (memory-bank UI delete action).No findings
Why it is in this group
- The name "delete_remembered_field_answer_api_user_memory__user_id__remembered_field_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete Remembered Field Answer Forgets one remembered application-field answer (memory-bank UI delete action). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
delete_resume_api_resume_deleteDelete Resume Delete the user's resume and cleanup associated resources.No findings
Why it is in this group
- The name "delete_resume_api_resume_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete Resume Delete the user's resume and cleanup associated resources. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
delete_user_memory_api_user_memory__user_id__deleteDelete User Memory Delete (deactivate) user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "su…No findings
Why it is in this group
- The name "delete_user_memory_api_user_memory__user_id__delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete User Memory Delete (deactivate) user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
disconnect_app_api_tools_connect__app_name__deleteDisconnect App Revoke the user's Composio connection for a specific app.No findings
Why it is in this group
- The name "disconnect_app_api_tools_connect__app_name__delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Disconnect App Revoke the user's Composio connection for a specific app. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
remove_student_api_orgs_me_students__user_id__deleteRemove Student ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "remove_student_api_orgs_me_students__user_id__delete" says "remove": a word for removing or ending something.
Description, as the server wrote it Remove Student ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
revoke_invite_api_orgs_me_invites__invite_id__deleteRevoke Invite ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "revoke_invite_api_orgs_me_invites__invite_id__delete" says "revoke": a word for removing or ending something.
Description, as the server wrote it Revoke Invite ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
Can't be undone 10Claude Code: ask
bulk_send_outreach_api_linkedin_leads_bulk_outreach_postBulk Send Outreach Send outreach emails to multiple leads in one call.Can send data outNo findings
Why it is in this group
- The name "bulk_send_outreach_api_linkedin_leads_bulk_outreach_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "bulk_send_outreach_api_linkedin_leads_bulk_outreach_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Bulk Send Outreach Send outreach emails to multiple leads in one call. Each lead must have an email address. Leads without emails are skipped. Returns per-lead results so the frontend can show success/fail per contact. Rate-limited to 20 leads per request to protect Gmail sending quotas. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
create_invites_api_orgs_me_invites_postCreate Invites ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "create_invites_api_orgs_me_invites_post" says "create": a word for a change.
- The name "create_invites_api_orgs_me_invites_post" also says "invite": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "create_invites_api_orgs_me_invites_post" says "invite": it sends or publishes something to other people.
Description, as the server wrote it Create Invites ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
invite_info_api_orgs_invites__token__getInvite Info Public (pre-login) details for the join page.Can send data outNo findings
Why it is in this group
- The name "invite_info_api_orgs_invites__token__get" says "invite": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "invite_info_api_orgs_invites__token__get" says "invite": it sends or publishes something to other people.
Description, as the server wrote it Invite Info Public (pre-login) details for the join page. Unknown, used and expired all look the same. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
send_cold_email_api_cold_email_postSend Cold Email Send a cold email with a pre-generated message.Can send data outNo findings
Why it is in this group
- The name "send_cold_email_api_cold_email_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_cold_email_api_cold_email_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Cold Email Send a cold email with a pre-generated message. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "user_id": "User Id", "recruiter_email": "Recruiter Email", "company_name": "Company Name", "sent_at": "2023-01-01T00:00:00Z", "status": "Status", "followup_interval_hours": 1, "followup_count": 1, "replied": true, "message": "Message", "opened": true, "open_count": 1, "auto_draft_generated": true } ```
send_cold_email_to_hr_api_cold_email_send_to_hr_postSend Cold Email To Hr Send a cold email to a specific HR contact.Can send data outNo findings
Why it is in this group
- The name "send_cold_email_to_hr_api_cold_email_send_to_hr_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_cold_email_to_hr_api_cold_email_send_to_hr_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Cold Email To Hr Send a cold email to a specific HR contact. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
send_email_via_pool_api_email_sender_pool_send_email_postSend Email Via Pool Send an email using the email sender pool (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example R…Can send data outNo findings
Why it is in this group
- The name "send_email_via_pool_api_email_sender_pool_send_email_post" says "send": a word for sending, and what is sent cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe name "send_email_via_pool_api_email_sender_pool_send_email_post" says "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it Send Email Via Pool Send an email using the email sender pool (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
send_manual_message_api_email_conversations__conversation_id__message_postSend Manual Message Send a manual message in the conversation, overriding the AI.Can send data outNo findings
Why it is in this group
- The name "send_manual_message_api_email_conversations__conversation_id__message_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_manual_message_api_email_conversations__conversation_id__message_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Manual Message Send a manual message in the conversation, overriding the AI. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_postSend Outreach From Lead Generate and send a cold outreach email directly from a LinkedIn lead.Can send data outNo findings
Why it is in this group
- The name "send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Outreach From Lead Generate and send a cold outreach email directly from a LinkedIn lead. Flow: 1. Fetch the lead — must have an email address. 2. Load the authenticated user's resume/profile from MongoDB. 3. Call send_and_track_cold_email() to generate (or use custom_message) and send the email via the user's connected Gmail. 4. Record the outreach status on the lead (status='sent') with a back- reference to the cold_email_id. 5. Sync the company HR contact (idempotent — already done on scrape, but update lastContactedAt now). Returns the cold_email_id so the frontend can link to the email thread. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
send_product_update_broadcast_api_newsletter_send_postSend Product Update Broadcast Manually trigger a one-off product-update broadcast to all subscribed users.Can send data outNo findings
Why it is in this group
- The name "send_product_update_broadcast_api_newsletter_send_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_product_update_broadcast_api_newsletter_send_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Product Update Broadcast Manually trigger a one-off product-update broadcast to all subscribed users. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
send_unified_cold_email_api_cold_email_unified_postSend Unified Cold Email Unified cold email endpoint that handles: 1.Can send data outNo findings
Why it is in this group
- The name "send_unified_cold_email_api_cold_email_unified_post" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_unified_cold_email_api_cold_email_unified_post" says "send": it sends or publishes something to other people.
Description, as the server wrote it Send Unified Cold Email Unified cold email endpoint that handles: 1. Company creation if it doesn't exist 2. HR email auto-selection if not provided 3. HR contact addition to company 4. Email sending with tracking Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true, "cold_email": { "user_id": "User Id", "recruiter_email": "Recruiter Email", "company_name": "Company Name", "sent_at": "2023-01-01T00:00:00Z", "status": "Status", "followup_interval_hours": 1, "followup_count": 1, "replied": true, "message": "Message", "opened": true, "open_count": 1, "auto_draft_generated": true }, "hr_email_used": "Hr Email Used", "company_created": true, "hr_added": true } ```
Changes things 69Claude Code: ask
add_account_api_linkedin_leads_accounts_postAdd Account Add a LinkedIn scraper account to the pool.Can send data outNo findings
Why it is in this group
- The name "add_account_api_linkedin_leads_accounts_post" says "add": a word for a change.
What it can reach
- outboundThe name "add_account_api_linkedin_leads_accounts_post" says "add" and "post": it writes something other people read.
Description, as the server wrote it Add Account Add a LinkedIn scraper account to the pool. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
add_ai_interaction_context_api_user_memory__user_id__context_postAdd Ai Interaction Context Add AI interaction context to user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Respons…Can send data outNo findings
Why it is in this group
- The name "add_ai_interaction_context_api_user_memory__user_id__context_post" says "add": a word for a change.
What it can reach
- outboundThe name "add_ai_interaction_context_api_user_memory__user_id__context_post" says "add" and "post": it writes something other people read.
Description, as the server wrote it Add Ai Interaction Context Add AI interaction context to user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
add_hr_contact_endpoint_api_companies__company_id__hr_contacts_postAdd Hr Contact Endpoint ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "name": "Name" } ```Can send data outNo findings
Why it is in this group
- The name "add_hr_contact_endpoint_api_companies__company_id__hr_contacts_post" says "add": a word for a change.
What it can reach
- outboundThe name "add_hr_contact_endpoint_api_companies__company_id__hr_contacts_post" says "add" and "post": it writes something other people read.
Description, as the server wrote it Add Hr Contact Endpoint ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "name": "Name" } ```
agent_step_api_extension_agent_step_postAgent Step Tier 4: one step of an agentic fallback loop for pages where tiers 1-3 (coded adapters, universal field matcher, batched AI field-answering) found nothing to work with.Can send data outNo findings
Why it is in this group
- The name "agent_step_api_extension_agent_step_post" says "post": a word for a change.
What it can reach
- outboundThe name "agent_step_api_extension_agent_step_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Agent Step Tier 4: one step of an agentic fallback loop for pages where tiers 1-3 (coded adapters, universal field matcher, batched AI field-answering) found nothing to work with. The extension sends a snapshot of every visible interactive element on the page; this returns exactly one action to take next. Never raises on a bad/failed model response - degrades to "blocked" so the client loop just stops rather than crashing the fill. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "action": "Action" } ```
answer_fields_api_extension_answer_fields_postAnswer Fields AI fallback for job-application form fields the extension's coded/heuristic fill pass could not confidently answer.Can send data outNo findings
Why it is in this group
- The name "answer_fields_api_extension_answer_fields_post" says "post": a word for a change.
What it can reach
- outboundThe name "answer_fields_api_extension_answer_fields_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Answer Fields AI fallback for job-application form fields the extension's coded/heuristic fill pass could not confidently answer. Batched per application (not per field) to control latency and cost. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "answers": [ { "field_id": "Field Id", "confidence": "Confidence", "source": "Source" } ] } ```
apify_webhook_api_linkedin_leads_webhook_apify_postApify Webhook Receives push notifications from Apify when a scraper run completes.Can send data outNo findings
Why it is in this group
- The name "apify_webhook_api_linkedin_leads_webhook_apify_post" says "post": a word for a change.
What it can reach
- outboundThe name "apify_webhook_api_linkedin_leads_webhook_apify_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Apify Webhook Receives push notifications from Apify when a scraper run completes. No authentication required (Apify calls this endpoint). Apify includes a secret token in the URL for verification in production. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
apply_memory_suggestion_api_user_memory_apply_suggestion_postApply Memory Suggestion Apply a specific memory update suggested by the AI.Can send data outNo findings
Why it is in this group
- The name "apply_memory_suggestion_api_user_memory_apply_suggestion_post" says "apply": a word for a change.
What it can reach
- outboundThe name "apply_memory_suggestion_api_user_memory_apply_suggestion_post" says "apply" and "post": it writes something other people read.
Description, as the server wrote it Apply Memory Suggestion Apply a specific memory update suggested by the AI. Body: { user_id, suggestion } ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
apply_suggestions_api_resume_apply_suggestions_postApply Suggestions Apply improvement suggestions to YAML and regenerate PDF ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "apply_suggestions_api_resume_apply_suggestions_post" says "apply": a word for a change.
What it can reach
- outboundThe name "apply_suggestions_api_resume_apply_suggestions_post" says "apply" and "post": it writes something other people read.
Description, as the server wrote it Apply Suggestions Apply improvement suggestions to YAML and regenerate PDF ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
approve_outreach_item_api_outreach_queue__item_id__approve_postApprove Outreach Item Approve a queue item and send the cold email.Can send data outNo findings
Why it is in this group
- The name "approve_outreach_item_api_outreach_queue__item_id__approve_post" says "approve": a word for a change.
What it can reach
- outboundThe name "approve_outreach_item_api_outreach_queue__item_id__approve_post" says "approve" and "post": it writes something other people read.
Description, as the server wrote it Approve Outreach Item Approve a queue item and send the cold email. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
claim_referral_code_api_referrals_claim_postClaim Referral Code Claim a referral code.Can send data outNo findings
Why it is in this group
- The name "claim_referral_code_api_referrals_claim_post" says "post": a word for a change.
What it can reach
- outboundThe name "claim_referral_code_api_referrals_claim_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Claim Referral Code Claim a referral code. Awards 10 credits to both the claimer and the referrer. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
create_application_api_applications_postCreate Application Track a newly-submitted job application (called by the extension after a user submits).Can send data outNo findings
Why it is in this group
- The name "create_application_api_applications_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_application_api_applications_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Application Track a newly-submitted job application (called by the extension after a user submits). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "user_id": "User Id", "company_name": "Company Name", "job_title": "Job Title", "job_url": "Job Url", "platform": "Platform", "status": "ApplicationStatus", "applied_at": "2023-01-01T00:00:00Z", "status_history": [ { "status": "ApplicationStatus", "changed_at": "2023-01-01T00:00:00Z" } ], "source": "Source" } ```
create_company_endpoint_api_companies_postCreate Company Endpoint ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "hrContacts": [ { "email": "Em…Can send data outNo findings
Why it is in this group
- The name "create_company_endpoint_api_companies_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_company_endpoint_api_companies_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Company Endpoint ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "hrContacts": [ { "email": "Email" } ], "hrContactCount": 1 } ```
create_key_api_api_keys_postCreate Key Create a new API key.Can send data outNo findings
Why it is in this group
- The name "create_key_api_api_keys_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_key_api_api_keys_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Key Create a new API key. The raw key is only ever returned here -- store it now. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
create_outreach_batch_api_outreach_batches_postCreate Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "create_outreach_batch_api_outreach_batches_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_outreach_batch_api_outreach_batches_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
create_preferences_api_job_preferences_postCreate Preferences Create the user's job preferences Requires authentication.Can send data outNo findings
Why it is in this group
- The name "create_preferences_api_job_preferences_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_preferences_api_job_preferences_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Preferences Create the user's job preferences Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
create_resume_from_linkedin_api_resume_from_linkedin_postCreate Resume From Linkedin Create a resume from LinkedIn profile URL using Apify API.Can send data outNo findings
Why it is in this group
- The name "create_resume_from_linkedin_api_resume_from_linkedin_post" says "create": a word for a change.
What it can reach
- outboundThe name "create_resume_from_linkedin_api_resume_from_linkedin_post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create Resume From Linkedin Create a resume from LinkedIn profile URL using Apify API. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
create_user_memory_api_user_memory__user_id__postCreate User Memory Create new user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": t…Can send data outNo findings
Why it is in this group
- The name "create_user_memory_api_user_memory__user_id__post" says "create": a word for a change.
What it can reach
- outboundThe name "create_user_memory_api_user_memory__user_id__post" says "create" and "post": it writes something other people read.
Description, as the server wrote it Create User Memory Create new user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_postDisable User Monitoring Disable email monitoring for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_post" says "disable": a word for a change.
What it can reach
- outboundThe name "disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_post" says "disable" and "post": it writes something other people read.
Description, as the server wrote it Disable User Monitoring Disable email monitoring for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
dismiss_outreach_item_api_outreach_queue__item_id__deleteDismiss Outreach Item Dismiss an outreach queue item.No findings
Why it is in this group
- The name "dismiss_outreach_item_api_outreach_queue__item_id__delete" says "dismiss": a word for a change.
Description, as the server wrote it Dismiss Outreach Item Dismiss an outreach queue item. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_postEnable User Monitoring Enable email monitoring for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_post" says "enable": a word for a change.
What it can reach
- outboundThe name "enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_post" says "enable" and "post": it writes something other people read.
Description, as the server wrote it Enable User Monitoring Enable email monitoring for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
execute_tool_api_tools_execute_postExecute Tool Executes a tool by name with provided arguments.Can send data outNo findings
Why it is in this group
- The name "execute_tool_api_tools_execute_post" says "execute": a word for a change.
What it can reach
- outboundThe name "execute_tool_api_tools_execute_post" says "execute" and "post": it writes something other people read.
Description, as the server wrote it Execute Tool Executes a tool by name with provided arguments. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
extension_apply_api_extension_apply_postExtension Apply Orchestrator called by the extension right after a user submits a job application: tracks the application, then immediately attempts the same credit-gated cold-outr…Can send data outNo findings
Why it is in this group
- The name "extension_apply_api_extension_apply_post" says "apply": a word for a change.
What it can reach
- outboundThe name "extension_apply_api_extension_apply_post" says "apply" and "post": it writes something other people read.
Description, as the server wrote it Extension Apply Orchestrator called by the extension right after a user submits a job application: tracks the application, then immediately attempts the same credit-gated cold-outreach send the daily cron would eventually do, triggered on-demand instead. Outreach is best-effort: if there is no known contact for the company or the user is out of credits, the application is still tracked and the response says why outreach was skipped rather than failing the request. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
generate_complete_resume_api_resume_generate_complete_postGenerate Complete Resume Generate a complete, enhanced resume with additional relevant content using AI.Can send data outNo findings
Why it is in this group
- The name "generate_complete_resume_api_resume_generate_complete_post" says "generate": a word for a change.
What it can reach
- outboundThe name "generate_complete_resume_api_resume_generate_complete_post" says "generate" and "post": it writes something other people read.
Description, as the server wrote it Generate Complete Resume Generate a complete, enhanced resume with additional relevant content using AI. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_postGenerate Linkedin Message Generate a short LinkedIn outreach message (≤280 chars) personalised to this lead.Can send data outNo findings
Why it is in this group
- The name "generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_post" says "generate": a word for a change.
What it can reach
- outboundThe name "generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_post" says "generate" and "message": it writes something other people read.
Description, as the server wrote it Generate Linkedin Message Generate a short LinkedIn outreach message (≤280 chars) personalised to this lead. The frontend copies it to clipboard and opens the recruiter's LinkedIn profile so the user can paste-and-send in one step. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
generate_yaml_version_api_resume_generate_yaml_postGenerate Yaml Version Generate YAML version and RenderCV PDF for existing resume ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "generate_yaml_version_api_resume_generate_yaml_post" says "generate": a word for a change.
What it can reach
- outboundThe name "generate_yaml_version_api_resume_generate_yaml_post" says "generate" and "post": it writes something other people read.
Description, as the server wrote it Generate Yaml Version Generate YAML version and RenderCV PDF for existing resume ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
mark_all_notifications_as_read_api_notifications_read_all_postMark All Notifications As Read Mark every unread notification as read (not just the page the client loaded).Can send data outNo findings
Why it is in this group
- The name "mark_all_notifications_as_read_api_notifications_read_all_post" says "mark": a word for a change.
What it can reach
- outboundThe name "mark_all_notifications_as_read_api_notifications_read_all_post" says "mark" and "post": it writes something other people read.
Description, as the server wrote it Mark All Notifications As Read Mark every unread notification as read (not just the page the client loaded). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_postMark Improvement Suggestions Invalid Replace improvement suggestions with the provided valid_suggestions list.Can send data outNo findings
Why it is in this group
- The name "mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_post" says "mark": a word for a change.
What it can reach
- outboundThe name "mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_post" says "mark" and "post": it writes something other people read.
Description, as the server wrote it Mark Improvement Suggestions Invalid Replace improvement suggestions with the provided valid_suggestions list. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
mark_notification_as_read_api_notifications__notification_id__read_patchMark Notification As Read Mark a notification as read.No findings
Why it is in this group
- The name "mark_notification_as_read_api_notifications__notification_id__read_patch" says "mark": a word for a change.
Description, as the server wrote it Mark Notification As Read Mark a notification as read. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
match_score_api_extension_match_score_postMatch Score Ad-hoc resume<->job-description match score for a posting the extension is looking at, which isn't (and doesn't need to be) a job stored in the DB.Can send data outNo findings
Why it is in this group
- The name "match_score_api_extension_match_score_post" says "post": a word for a change.
What it can reach
- outboundThe name "match_score_api_extension_match_score_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Match Score Ad-hoc resume<->job-description match score for a posting the extension is looking at, which isn't (and doesn't need to be) a job stored in the DB. Uses the pure heuristic matcher (no embeddings/DB lookups needed). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "match_score": 1.0, "summary": "Summary", "missing_skills": [ "string" ] } ```
pause_conversation_api_email_conversations__conversation_id__pause_postPause Conversation Pause an ongoing conversation to stop automatic follow-ups.Can send data outNo findings
Why it is in this group
- The name "pause_conversation_api_email_conversations__conversation_id__pause_post" says "post": a word for a change.
What it can reach
- outboundThe name "pause_conversation_api_email_conversations__conversation_id__pause_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Pause Conversation Pause an ongoing conversation to stop automatic follow-ups. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
refresh_ats_score_api_resume_ats_score_refresh_postRefresh Ats Score Recalculate the ATS score from the current resume and persist it.Can send data outNo findings
Why it is in this group
- The name "refresh_ats_score_api_resume_ats_score_refresh_post" says "post": a word for a change.
What it can reach
- outboundThe name "refresh_ats_score_api_resume_ats_score_refresh_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Refresh Ats Score Recalculate the ATS score from the current resume and persist it. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
regenerate_templates_api_email_templates_regenerate_postRegenerate Templates Delete all existing templates and generate a fresh one via AI.Can send data outNo findings
Why it is in this group
- The name "regenerate_templates_api_email_templates_regenerate_post" says "post": a word for a change.
What it can reach
- outboundThe name "regenerate_templates_api_email_templates_regenerate_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Regenerate Templates Delete all existing templates and generate a fresh one via AI. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "id": "Id", "name": "Name", "subject": "Subject", "body": "Body", "usage_count": 1, "reply_count": 1, "reply_rate": 1.0 } ] ```
remember_field_answer_api_extension_remember_field_answer_postRemember Field Answer Durable, cross-device, cross-site memory of one field answer the extension learned - either a confirmed AI answer or a user's correction, fired on every blur/…Can send data outNo findings
Why it is in this group
- The name "remember_field_answer_api_extension_remember_field_answer_post" says "post": a word for a change.
What it can reach
- outboundThe name "remember_field_answer_api_extension_remember_field_answer_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Remember Field Answer Durable, cross-device, cross-site memory of one field answer the extension learned - either a confirmed AI answer or a user's correction, fired on every blur/selection of a field the extension filled. Grounds future /answer-fields calls (see get_remembered_field_answers above) so the same question doesn't need asking again on the next application, anywhere. Requires extension_field_memory_consent - the extension's own UI should already gate whether it ever sends this request, but a consent decision this sensitive (can include EEO/self-identification answers the user typed themselves) shouldn't rely on client-side gating alone. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
render_raw_yaml_api_resume_render_raw_yaml_postRender Raw Yaml Hot-reload: Generate PDF from raw YAML content ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "render_raw_yaml_api_resume_render_raw_yaml_post" says "post": a word for a change.
What it can reach
- outboundThe name "render_raw_yaml_api_resume_render_raw_yaml_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Render Raw Yaml Hot-reload: Generate PDF from raw YAML content ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
reset_campaign_config_api_config_campaign__campaign_id__deleteReset Campaign Config Reset campaign configuration to defaults ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "reset_campaign_config_api_config_campaign__campaign_id__delete" says "reset": a word for a change.
Description, as the server wrote it Reset Campaign Config Reset campaign configuration to defaults ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
reset_user_config_api_config_user__user_id__deleteReset User Config Reset user configuration to defaults ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "reset_user_config_api_config_user__user_id__delete" says "reset": a word for a change.
Description, as the server wrote it Reset User Config Reset user configuration to defaults ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
resume_ai_chat_api_resume_ai_chat_postResume Ai Chat Stream an AI response that helps the user interactively improve their resume.Can send data outNo findings
Why it is in this group
- The name "resume_ai_chat_api_resume_ai_chat_post" says "post": a word for a change.
What it can reach
- outboundThe name "resume_ai_chat_api_resume_ai_chat_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Resume Ai Chat Stream an AI response that helps the user interactively improve their resume. Body: user_id (str) — authenticated user's ID message (str) — latest user message conversation_history (list) — [{role: "user"|"assistant", content: str}] ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
resume_conversation_api_email_conversations__conversation_id__resume_postResume Conversation Resume a paused conversation.Can send data outNo findings
Why it is in this group
- The name "resume_conversation_api_email_conversations__conversation_id__resume_post" says "post": a word for a change.
What it can reach
- outboundThe name "resume_conversation_api_email_conversations__conversation_id__resume_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Resume Conversation Resume a paused conversation. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
resume_outreach_endpoint_api_autopilot_resume_outreach_postResume Outreach Endpoint User-initiated: clear the bounce circuit breaker's paused state.Can send data outNo findings
Why it is in this group
- The name "resume_outreach_endpoint_api_autopilot_resume_outreach_post" says "post": a word for a change.
What it can reach
- outboundThe name "resume_outreach_endpoint_api_autopilot_resume_outreach_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Resume Outreach Endpoint User-initiated: clear the bounce circuit breaker's paused state. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "daily_outreach_enabled": true, "outreach_timezone": "Outreach Timezone", "daily_outreach_batch_size": 1, "credit_balance": 1, "autopilot_enabled": true, "outreach_paused": true } ```
save_resume_yaml_api_resume_save_yaml_postSave Resume Yaml Save raw YAML content to the user's resume.Can send data outNo findings
Why it is in this group
- The name "save_resume_yaml_api_resume_save_yaml_post" says "save": a word for a change.
What it can reach
- outboundThe name "save_resume_yaml_api_resume_save_yaml_post" says "save" and "post": it writes something other people read.
Description, as the server wrote it Save Resume Yaml Save raw YAML content to the user's resume. YAML is treated as the source of truth: the structured resume fields (personalInfo, experience, education, projects, skills, certifications) are parsed from the YAML and written back to the database so that every other part of the application (resume overview, AI chat, job matching …) always reflects the latest YAML edits. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
set_cold_email_resume_source_api_resume_cold_email_source_putSet Cold Email Resume Source Set which resume file cold outreach should use: the originally uploaded file ("uploaded", the default) or HopeHire's RenderCV-generated PDF ("generated…Can send data outNo findings
Why it is in this group
- The name "set_cold_email_resume_source_api_resume_cold_email_source_put" says "set": a word for a change.
What it can reach
- outboundThe name "set_cold_email_resume_source_api_resume_cold_email_source_put" says "set" and "email": it writes something other people read.
Description, as the server wrote it Set Cold Email Resume Source Set which resume file cold outreach should use: the originally uploaded file ("uploaded", the default) or HopeHire's RenderCV-generated PDF ("generated"). A lightweight sibling to the full manual-edit PUT above — this only flips one field and doesn't trigger PDF/YAML regeneration. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
start_auto_apply_api_auto_apply_postStart auto-apply process Launches an automated job application process that finds contacts, generates personalized messages, and sends emails with resume attachments.Can send data outNo findings
Why it is in this group
- The name "start_auto_apply_api_auto_apply_post" says "start": a word for a change.
What it can reach
- outboundThe name "start_auto_apply_api_auto_apply_post" says "start" and "post": it writes something other people read.
Description, as the server wrote it Start auto-apply process Launches an automated job application process that finds contacts, generates personalized messages, and sends emails with resume attachments. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "task_id": "Task Id", "status": "AutoApplyStatus" } ```
start_conversation_api_auto_apply_start_conversation_postStart Conversation Start a new conversation using the shared auto-apply service logic.Can send data outNo findings
Why it is in this group
- The name "start_conversation_api_auto_apply_start_conversation_post" says "start": a word for a change.
What it can reach
- outboundThe name "start_conversation_api_auto_apply_start_conversation_post" says "start" and "post": it writes something other people read.
Description, as the server wrote it Start Conversation Start a new conversation using the shared auto-apply service logic. ### Responses: **201**: Successful Response (Success Response) Content-Type: application/json
start_conversation_api_email_conversations_start_conversation_postStart Conversation Start a new email conversation.Can send data outNo findings
Why it is in this group
- The name "start_conversation_api_email_conversations_start_conversation_post" says "start": a word for a change.
What it can reach
- outboundThe name "start_conversation_api_email_conversations_start_conversation_post" says "start" and "email": it writes something other people read.
Description, as the server wrote it Start Conversation Start a new email conversation. ### Responses: **201**: Successful Response (Success Response) Content-Type: application/json
start_job_matching_api_job_matches_start_postStart Job Matching Start an asynchronous job matching process Requires authentication.Can send data outNo findings
Why it is in this group
- The name "start_job_matching_api_job_matches_start_post" says "start": a word for a change.
What it can reach
- outboundThe name "start_job_matching_api_job_matches_start_post" says "start" and "post": it writes something other people read.
Description, as the server wrote it Start Job Matching Start an asynchronous job matching process Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
submit_feedback_api_feedback_postSubmit Feedback ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "submit_feedback_api_feedback_post" says "submit": a word for a change.
What it can reach
- outboundThe name "submit_feedback_api_feedback_post" says "submit" and "post": it writes something other people read.
Description, as the server wrote it Submit Feedback ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
tailor_resume_api_extension_tailor_resume_postTailor Resume Generates a one-off resume PDF reworded toward a specific job description, for the extension to swap into a file-upload field before submitting that one application.Can send data outNo findings
Why it is in this group
- The name "tailor_resume_api_extension_tailor_resume_post" says "post": a word for a change.
What it can reach
- outboundThe name "tailor_resume_api_extension_tailor_resume_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it Tailor Resume Generates a one-off resume PDF reworded toward a specific job description, for the extension to swap into a file-upload field before submitting that one application. Never persisted to the user's profile/canonical resume. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "pdf_base64": "Pdf Base64", "file_name": "File Name" } ```
trigger_scrape_api_linkedin_leads_trigger_postTrigger Scrape Manually kick off a LinkedIn scrape run.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "trigger_scrape_api_linkedin_leads_trigger_post" says "trigger": a word for a change.
What it can reach
- untrusted-inputThe name "trigger_scrape_api_linkedin_leads_trigger_post" says "scrape": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
- outboundThe name "trigger_scrape_api_linkedin_leads_trigger_post" says "trigger" and "post": it writes something other people read.
Description, as the server wrote it Trigger Scrape Manually kick off a LinkedIn scrape run. Admin only: each run spends metered Apify credits and accepts arbitrary search queries. Strategy (tried in order): 1. Publish to the linkedin_scrape_queue via RabbitMQ (if running). 2. If RabbitMQ is unavailable or times out, run the scrape directly as a FastAPI BackgroundTask so this endpoint always returns fast. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_postTrigger User Discovery Manually trigger user discovery process ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_post" says "trigger": a word for a change.
What it can reach
- outboundThe name "trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_post" says "trigger" and "post": it writes something other people read.
Description, as the server wrote it Trigger User Discovery Manually trigger user discovery process ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
unsubscribe_api_newsletter_unsubscribe_getUnsubscribe Public link clicked from a newsletter email - no auth, verified by HMAC signature.No findings
Why it is in this group
- The name "unsubscribe_api_newsletter_unsubscribe_get" says "unsubscribe": a word for a change.
Description, as the server wrote it Unsubscribe Public link clicked from a newsletter email - no auth, verified by HMAC signature. ### Responses: **200**: Successful Response (Success Response) Content-Type: text/html **Example Response:** ```json "string" ```
update_account_status_api_linkedin_leads_accounts__account_id__status_patchUpdate Account Status Update the status of a LinkedIn account (active / cooldown / banned).No findings
Why it is in this group
- The name "update_account_status_api_linkedin_leads_accounts__account_id__status_patch" says "update": a word for a change.
Description, as the server wrote it Update Account Status Update the status of a LinkedIn account (active / cooldown / banned). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
update_application_status_api_applications__application_id__status_patchUpdate Application Status Manually update an application's status (e.g.No findings
Why it is in this group
- The name "update_application_status_api_applications__application_id__status_patch" says "update": a word for a change.
Description, as the server wrote it Update Application Status Manually update an application's status (e.g. marking Interview/Offer/Rejected). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "user_id": "User Id", "company_name": "Company Name", "job_title": "Job Title", "job_url": "Job Url", "platform": "Platform", "status": "ApplicationStatus", "applied_at": "2023-01-01T00:00:00Z", "status_history": [ { "status": "ApplicationStatus", "changed_at": "2023-01-01T00:00:00Z" } ], "source": "Source" } ```
update_campaign_config_api_config_campaign__campaign_id__putUpdate Campaign Config Update configuration for a specific campaign ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "update_campaign_config_api_config_campaign__campaign_id__put" says "update": a word for a change.
Description, as the server wrote it Update Campaign Config Update configuration for a specific campaign ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
update_daily_outreach_settings_api_autopilot_settings_patchUpdate Daily Outreach Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "daily_outreach_enabled…No findings
Why it is in this group
- The name "update_daily_outreach_settings_api_autopilot_settings_patch" says "update": a word for a change.
Description, as the server wrote it Update Daily Outreach Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "daily_outreach_enabled": true, "outreach_timezone": "Outreach Timezone", "daily_outreach_batch_size": 1, "credit_balance": 1, "autopilot_enabled": true, "outreach_paused": true } ```
update_extension_settings_api_extension_settings_patchUpdate Extension Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "recruiter_comms_consent": t…No findings
Why it is in this group
- The name "update_extension_settings_api_extension_settings_patch" says "update": a word for a change.
Description, as the server wrote it Update Extension Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "recruiter_comms_consent": true, "field_memory_consent": true, "credit_balance": 1 } ```
update_legacy_autopilot_settings_api_autopilot_legacy_settings_patchUpdate Legacy Autopilot Settings Legacy job-board autopilot — not available when daily outreach is enabled.No findings
Why it is in this group
- The name "update_legacy_autopilot_settings_api_autopilot_legacy_settings_patch" says "update": a word for a change.
Description, as the server wrote it Update Legacy Autopilot Settings Legacy job-board autopilot — not available when daily outreach is enabled. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "autopilot_enabled": true, "autopilot_min_match_score": 1.0 } ```
update_outreach_status_api_linkedin_leads__lead_id__outreach_patchUpdate Outreach Status Update the current user's outreach status for a given lead.No findings
Why it is in this group
- The name "update_outreach_status_api_linkedin_leads__lead_id__outreach_patch" says "update": a word for a change.
Description, as the server wrote it Update Outreach Status Update the current user's outreach status for a given lead. Use this after sending a cold email so the lead is marked as contacted. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
update_preferences_api_job_preferences_putUpdate Preferences Update the user's job preferences Requires authentication.No findings
Why it is in this group
- The name "update_preferences_api_job_preferences_put" says "update": a word for a change.
Description, as the server wrote it Update Preferences Update the user's job preferences Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
update_remembered_field_answer_api_user_memory__user_id__remembered_field_putUpdate Remembered Field Answer Edit one remembered application-field answer from the memory-bank UI.No findings
Why it is in this group
- The name "update_remembered_field_answer_api_user_memory__user_id__remembered_field_put" says "update": a word for a change.
Description, as the server wrote it Update Remembered Field Answer Edit one remembered application-field answer from the memory-bank UI. Same durable store the extension writes to (interaction_history, keyed by normalized label) - this just lets the user correct it directly instead of waiting to be asked the question again on some future form. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
update_resume_manual_api_resume_putUpdate Resume Manual Update a user's resume manually and trigger PDF generation.No findings
Why it is in this group
- The name "update_resume_manual_api_resume_put" says "update": a word for a change.
Description, as the server wrote it Update Resume Manual Update a user's resume manually and trigger PDF generation. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
update_template_api_email_templates__template_id__putUpdate Template Edit a template's subject, body, or name.Can send data outNo findings
Why it is in this group
- The name "update_template_api_email_templates__template_id__put" says "update": a word for a change.
What it can reach
- outboundThe name "update_template_api_email_templates__template_id__put" says "update" and "email": it writes something other people read.
Description, as the server wrote it Update Template Edit a template's subject, body, or name. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "id": "Id", "name": "Name", "subject": "Subject", "body": "Body", "usage_count": 1, "reply_count": 1, "reply_rate": 1.0 } ```
update_user_config_api_config_user__user_id__putUpdate User Config Update configuration for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "update_user_config_api_config_user__user_id__put" says "update": a word for a change.
Description, as the server wrote it Update User Config Update configuration for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
update_user_memory_api_user_memory__user_id__putUpdate User Memory Update existing user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "succes…No findings
Why it is in this group
- The name "update_user_memory_api_user_memory__user_id__put" says "update": a word for a change.
Description, as the server wrote it Update User Memory Update existing user memory ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
update_user_monitoring_config_api_multi_tenant_monitoring_users__user_id__config_putUpdate User Monitoring Config Update email monitoring configuration for a user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "update_user_monitoring_config_api_multi_tenant_monitoring_users__user_id__config_put" says "update": a word for a change.
Description, as the server wrote it Update User Monitoring Config Update email monitoring configuration for a user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
upload_resume_api_resume_postUpload Resume Upload and process a resume file.Can send data outNo findings
Why it is in this group
- The name "upload_resume_api_resume_post" says "upload": a word for a change.
What it can reach
- outboundThe name "upload_resume_api_resume_post" says "upload" and "post": it writes something other people read.
Description, as the server wrote it Upload Resume Upload and process a resume file. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
user_memory_ai_chat_api_user_memory_ai_chat_postUser Memory Ai Chat ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonCan send data outNo findings
Why it is in this group
- The name "user_memory_ai_chat_api_user_memory_ai_chat_post" says "post": a word for a change.
What it can reach
- outboundThe name "user_memory_ai_chat_api_user_memory_ai_chat_post" says "post": it sends or publishes something to other people.
Description, as the server wrote it User Memory Ai Chat ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
Only reads 74Show 74 read-only tools
debug_pdf_api_resume_debug_pdf_getDebug Pdf Get debugging information about a PDF file.Reads private dataNo findings
Why it is in this group
- The name "debug_pdf_api_resume_debug_pdf_get" says "get": a word for reading.
What it can reach
- private-dataThe input names a file (input.file_path), and the tool reads: it reads files.
Description, as the server wrote it Debug Pdf Get debugging information about a PDF file. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
download_resume_api_resume_download_getDownload Resume Download the user's resume.No findings
Why it is in this group
- The name "download_resume_api_resume_download_get" says "get": a word for reading.
Description, as the server wrote it Download Resume Download the user's resume. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_active_outreach_batch_api_outreach_batches_active_getGet Active Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_active_outreach_batch_api_outreach_batches_active_get" says "get": a word for reading.
Description, as the server wrote it Get Active Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_active_users_api_multi_tenant_monitoring_users_active_getGet Active Users Get list of active users with email monitoring enabled ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Resp…No findings
Why it is in this group
- The name "get_active_users_api_multi_tenant_monitoring_users_active_get" says "get": a word for reading.
Description, as the server wrote it Get Active Users Get list of active users with email monitoring enabled ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ {} ] ```
get_all_campaign_configs_api_config_admin_campaigns_getGet All Campaign Configs Get all campaign configurations (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_all_campaign_configs_api_config_admin_campaigns_get" says "get": a word for reading.
Description, as the server wrote it Get All Campaign Configs Get all campaign configurations (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_all_leads_admin_api_linkedin_leads_all_getGet All Leads Admin Admin view: return all leads regardless of outreach status.No findings
Why it is in this group
- The name "get_all_leads_admin_api_linkedin_leads_all_get" says "get": a word for reading.
Description, as the server wrote it Get All Leads Admin Admin view: return all leads regardless of outreach status. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_all_user_configs_api_config_admin_users_getGet All User Configs Get all user configurations (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_all_user_configs_api_config_admin_users_get" says "get": a word for reading.
Description, as the server wrote it Get All User Configs Get all user configurations (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_ats_score_api_resume_ats_score_getGet Ats Score Return the most recently calculated ATS score for the user's resume.No findings
Why it is in this group
- The name "get_ats_score_api_resume_ats_score_get" says "get": a word for reading.
Description, as the server wrote it Get Ats Score Return the most recently calculated ATS score for the user's resume. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_auto_apply_status_api_auto_apply__task_id__getCheck auto-apply status Retrieves the current status and results of an auto-apply task.No findings
Why it is in this group
- The name "get_auto_apply_status_api_auto_apply__task_id__get" says "get": a word for reading.
Description, as the server wrote it Check auto-apply status Retrieves the current status and results of an auto-apply task. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "task_id": "Task Id", "status": "AutoApplyStatus" } ```
get_auto_apply_status_by_task_id_api_auto_apply_status__task_id__getGet Auto Apply Status By Task Id Get status of an auto-apply task by task_id (conversationId).No findings
Why it is in this group
- The name "get_auto_apply_status_by_task_id_api_auto_apply_status__task_id__get" says "get": a word for reading.
Description, as the server wrote it Get Auto Apply Status By Task Id Get status of an auto-apply task by task_id (conversationId). Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "task_id": "Task Id", "status": "AutoApplyStatus" } ```
get_auto_apply_tasks_api_auto_apply_getGet all auto-apply tasks for a user Get all auto-apply tasks for a given user.No findings
Why it is in this group
- The name "get_auto_apply_tasks_api_auto_apply_get" says "get": a word for reading.
Description, as the server wrote it Get all auto-apply tasks for a user Get all auto-apply tasks for a given user. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_autopilot_settings_api_autopilot_settings_getGet Autopilot Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "daily_outreach_enabled": true,…No findings
Why it is in this group
- The name "get_autopilot_settings_api_autopilot_settings_get" says "get": a word for reading.
Description, as the server wrote it Get Autopilot Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "daily_outreach_enabled": true, "outreach_timezone": "Outreach Timezone", "daily_outreach_batch_size": 1, "credit_balance": 1, "autopilot_enabled": true, "outreach_paused": true } ```
get_available_leads_api_linkedin_leads_getGet Available Leads Return leads for the authenticated user, filtered by outreach status.No findings
Why it is in this group
- The name "get_available_leads_api_linkedin_leads_get" says "get": a word for reading.
Description, as the server wrote it Get Available Leads Return leads for the authenticated user, filtered by outreach status. status=fresh — leads not yet contacted (default); AI-ranked status=queued — leads the user has queued for outreach status=contacted — leads the user has already emailed ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_available_senders_api_email_sender_pool_senders_getGet Available Senders Get all available email senders (admin only — exposes other senders' PII and quotas) ### Responses: **200**: Successful Response (Success Response) Content-Ty…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_available_senders_api_email_sender_pool_senders_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_available_senders_api_email_sender_pool_senders_get" says "get" and "email": it reads mail.
- untrusted-inputThe name "get_available_senders_api_email_sender_pool_senders_get" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Available Senders Get all available email senders (admin only — exposes other senders' PII and quotas) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_campaign_config_api_config_campaign__campaign_id__getGet Campaign Config Get configuration for a specific campaign ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_campaign_config_api_config_campaign__campaign_id__get" says "get": a word for reading.
Description, as the server wrote it Get Campaign Config Get configuration for a specific campaign ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_cold_email_api_cold_email_getGet Cold Email Get cold emails for a user with pagination.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_cold_email_api_cold_email_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_cold_email_api_cold_email_get" says "get" and "email": it reads mail.
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe name "get_cold_email_api_cold_email_get" says "get" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Cold Email Get cold emails for a user with pagination. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "cold_emails": [ { "user_id": "User Id", "recruiter_email": "Recruiter Email", "company_name": "Company Name", "sent_at": "2023-01-01T00:00:00Z", "status": "Status", "followup_interval_hours": 1, "followup_count": 1, "replied": true, "message": "Message", "opened": true, "open_count": 1, "auto_draft_generated": true } ], "offset": 1, "pagination": 1, "has_more": true } ```
get_cold_email_replies_api_cold_email__cold_email_id__replies_getGet Cold Email Replies Get replies for a specific cold email using its ID.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_cold_email_replies_api_cold_email__cold_email_id__replies_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_cold_email_replies_api_cold_email__cold_email_id__replies_get" says "get" and "email": it reads mail.
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe name "get_cold_email_replies_api_cold_email__cold_email_id__replies_get" says "get" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Cold Email Replies Get replies for a specific cold email using its ID. This checks both the cold_emails collection and email_conversations collection. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_getGet Cold Email Replies By Message Id Get replies for a cold email using its Gmail message_id.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get" says "get" and "email": it reads mail.
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe name "get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get" says "get" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Cold Email Replies By Message Id Get replies for a cold email using its Gmail message_id. This is useful when you have the message_id from the cold email response. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_connection_url_api_tools_connect__app_name__getGet Connection Url Get the authorization URL for a specific Composio app.Reads text others writeNo findings
Why it is in this group
- The name "get_connection_url_api_tools_connect__app_name__get" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_connection_url_api_tools_connect__app_name__get" says "get" and "url": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it Get Connection Url Get the authorization URL for a specific Composio app. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_conversation_details_api_email_conversations__conversation_id__getGet Conversation Details Get details of a specific conversation.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_conversation_details_api_email_conversations__conversation_id__get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_conversation_details_api_email_conversations__conversation_id__get" says "get" and "conversation": it reads messages.
- private-dataThe description's first sentence says "get" and "conversation": it reads messages.
- untrusted-inputThe name "get_conversation_details_api_email_conversations__conversation_id__get" says "get" and "conversation": it reads messages, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "conversation": it reads messages, which other people can write.
Description, as the server wrote it Get Conversation Details Get details of a specific conversation. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "id": "Id", "contact_email": "Contact Email", "status": "ConversationStatus", "intent": "ConversationIntent", "subject_line": "Subject Line", "message_count": 1, "last_updated": "2023-01-01T00:00:00Z", "messages": [ {} ], "context_data": {} } ```
get_conversations_api_email_conversations_getGet Conversations Get all conversations for the authenticated user.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_conversations_api_email_conversations_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_conversations_api_email_conversations_get" says "get" and "conversation": it reads messages.
- private-dataThe description's first sentence says "get" and "conversation": it reads messages.
- untrusted-inputThe name "get_conversations_api_email_conversations_get" says "get" and "conversation": it reads messages, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "conversation": it reads messages, which other people can write.
Description, as the server wrote it Get Conversations Get all conversations for the authenticated user. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "id": "Id", "contact_email": "Contact Email", "status": "ConversationStatus", "intent": "ConversationIntent", "subject_line": "Subject Line", "message_count": 1, "last_updated": "2023-01-01T00:00:00Z" } ] ```
get_default_config_api_config_defaults_getGet Default Config Get default configuration values ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_default_config_api_config_defaults_get" says "get": a word for reading.
Description, as the server wrote it Get Default Config Get default configuration values ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_effective_config_api_config_effective__user_id__getGet Effective Config Get effective configuration combining user and campaign settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_effective_config_api_config_effective__user_id__get" says "get": a word for reading.
Description, as the server wrote it Get Effective Config Get effective configuration combining user and campaign settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_email_analytics_report_api_reports__user_id___duration__getGet Email Analytics Report Get email analytics report for a user over a specific duration.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_email_analytics_report_api_reports__user_id___duration__get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_email_analytics_report_api_reports__user_id___duration__get" says "get" and "email": it reads mail.
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe name "get_email_analytics_report_api_reports__user_id___duration__get" says "get" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Email Analytics Report Get email analytics report for a user over a specific duration. Duration options: - 7d: Last 7 days - 30d: Last 30 days - 90d: Last 90 days - 1y: Last year - all: All time ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_email_analytics_summary_api_reports__user_id__summary_getGet Email Analytics Summary Get a quick summary of email analytics for the last 30 days.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_email_analytics_summary_api_reports__user_id__summary_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_email_analytics_summary_api_reports__user_id__summary_get" says "get" and "email": it reads mail.
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe name "get_email_analytics_summary_api_reports__user_id__summary_get" says "get" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Email Analytics Summary Get a quick summary of email analytics for the last 30 days. This is a lightweight endpoint for dashboard widgets. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_extension_settings_api_extension_settings_getGet Extension Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "recruiter_comms_consent": true…No findings
Why it is in this group
- The name "get_extension_settings_api_extension_settings_get" says "get": a word for reading.
Description, as the server wrote it Get Extension Settings ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "recruiter_comms_consent": true, "field_memory_consent": true, "credit_balance": 1 } ```
get_fallback_sender_api_email_sender_pool_fallback_sender_getGet Fallback Sender Get a fallback email sender, excluding the specified user (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_fallback_sender_api_email_sender_pool_fallback_sender_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_fallback_sender_api_email_sender_pool_fallback_sender_get" says "get" and "email": it reads mail.
- untrusted-inputThe name "get_fallback_sender_api_email_sender_pool_fallback_sender_get" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Fallback Sender Get a fallback email sender, excluding the specified user (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_filtered_jobs_api_job_matches_getGet Filtered Jobs Get filtered job matches for a user Requires authentication.No findings
Why it is in this group
- The name "get_filtered_jobs_api_job_matches_get" says "get": a word for reading.
Description, as the server wrote it Get Filtered Jobs Get filtered job matches for a user Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_integration_status_api_tools_status_getGet Integration Status Get the connection status for key integrations across all providers.No findings
Why it is in this group
- The name "get_integration_status_api_tools_status_get" says "get": a word for reading.
Description, as the server wrote it Get Integration Status Get the connection status for key integrations across all providers. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_job_detail_api_v1_jobs__job_id__getGet Job Detail Get a detailed job listing by ID ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "succe…No findings
Why it is in this group
- The name "get_job_detail_api_v1_jobs__job_id__get" says "get": a word for reading.
Description, as the server wrote it Get Job Detail Get a detailed job listing by ID ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_job_details_api_v1_jobs_getGet Job Details Get detailed job listings with advanced filters and pagination ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Examp…No findings
Why it is in this group
- The name "get_job_details_api_v1_jobs_get" says "get": a word for reading.
Description, as the server wrote it Get Job Details Get detailed job listings with advanced filters and pagination ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true, "personalized": true } ```
get_lead_api_linkedin_leads__lead_id__getGet Lead Fetch a single lead by its ID.No findings
Why it is in this group
- The name "get_lead_api_linkedin_leads__lead_id__get" says "get": a word for reading.
Description, as the server wrote it Get Lead Fetch a single lead by its ID. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_lead_outreach_history_api_linkedin_leads__lead_id__history_getGet Lead Outreach History Return the outreach thread for this lead for the current user.No findings
Why it is in this group
- The name "get_lead_outreach_history_api_linkedin_leads__lead_id__history_get" says "get": a word for reading.
Description, as the server wrote it Get Lead Outreach History Return the outreach thread for this lead for the current user. Returns a chronological list of events: - type=sent — initial cold email - type=follow_up — follow-up email - type=reply — recruiter reply ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_lead_stats_api_linkedin_leads_stats_getGet Lead Stats Return summary statistics for the lead database.No findings
Why it is in this group
- The name "get_lead_stats_api_linkedin_leads_stats_get" says "get": a word for reading.
Description, as the server wrote it Get Lead Stats Return summary statistics for the lead database. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_least_contacted_hr_api_cold_email_least_contacted_hr_getGet Least Contacted Hr Get the least contacted HR email for a specific company.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_least_contacted_hr_api_cold_email_least_contacted_hr_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_least_contacted_hr_api_cold_email_least_contacted_hr_get" says "get" and "email": it reads mail.
- untrusted-inputThe name "get_least_contacted_hr_api_cold_email_least_contacted_hr_get" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Least Contacted Hr Get the least contacted HR email for a specific company. This endpoint uses the same logic as the unified email flow to select the best HR contact. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true, "hr_email": "Hr Email", "company_name": "Company Name", "total_contacts": 1 } ```
get_least_used_sender_api_email_sender_pool_least_used_sender_getGet Least Used Sender Get the least used email sender for load balancing, considering company contact history (admin only) ### Responses: **200**: Successful Response (Success Resp…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_least_used_sender_api_email_sender_pool_least_used_sender_get" says "get": a word for reading.
What it can reach
- private-dataThe name "get_least_used_sender_api_email_sender_pool_least_used_sender_get" says "get" and "email": it reads mail.
- untrusted-inputThe name "get_least_used_sender_api_email_sender_pool_least_used_sender_get" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Get Least Used Sender Get the least used email sender for load balancing, considering company contact history (admin only) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_notifications_api_notifications_getGet Notifications Fetch notifications for the current user.No findings
Why it is in this group
- The name "get_notifications_api_notifications_get" says "get": a word for reading.
Description, as the server wrote it Get Notifications Fetch notifications for the current user. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ {} ] ```
get_outreach_batch_api_outreach_batches__batch_id__getGet Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_outreach_batch_api_outreach_batches__batch_id__get" says "get": a word for reading.
Description, as the server wrote it Get Outreach Batch ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_outreach_queue_api_outreach_queue_getGet Outreach Queue Get pending outreach queue items for the current user.No findings
Why it is in this group
- The name "get_outreach_queue_api_outreach_queue_get" says "get": a word for reading.
Description, as the server wrote it Get Outreach Queue Get pending outreach queue items for the current user. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ {} ] ```
get_pending_auto_replies_api_auto_replies_getGet Pending Auto Replies List pending auto-replies the user can still cancel.Reads text others writeNo findings
Why it is in this group
- The name "get_pending_auto_replies_api_auto_replies_get" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_pending_auto_replies_api_auto_replies_get" says "get" and "reply": it reads comments, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "reply": it reads comments, which other people can write.
Description, as the server wrote it Get Pending Auto Replies List pending auto-replies the user can still cancel. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ {} ] ```
get_preferences_api_job_preferences_getGet Preferences Get the user's job preferences Requires authentication.No findings
Why it is in this group
- The name "get_preferences_api_job_preferences_get" says "get": a word for reading.
Description, as the server wrote it Get Preferences Get the user's job preferences Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_referral_code_api_referrals_code_getGet Referral Code Return the user's referral code, generating one if it doesn't exist yet.No findings
Why it is in this group
- The name "get_referral_code_api_referrals_code_get" says "get": a word for reading.
Description, as the server wrote it Get Referral Code Return the user's referral code, generating one if it doesn't exist yet. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_rendercv_pdf_api_resume_rendercv_pdf_getGet Rendercv Pdf Get RenderCV PDF download URL for the user's resume.No findings
Why it is in this group
- The name "get_rendercv_pdf_api_resume_rendercv_pdf_get" says "get": a word for reading.
Description, as the server wrote it Get Rendercv Pdf Get RenderCV PDF download URL for the user's resume. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_rendercv_pdf_download_api_resume_rendercv_pdf_download_getGet Rendercv Pdf Download Return a presigned URL with Content-Disposition: attachment so the browser downloads the resume PDF instead of opening it inline.No findings
Why it is in this group
- The name "get_rendercv_pdf_download_api_resume_rendercv_pdf_download_get" says "get": a word for reading.
Description, as the server wrote it Get Rendercv Pdf Download Return a presigned URL with Content-Disposition: attachment so the browser downloads the resume PDF instead of opening it inline. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_resume_api_resume_getGet Resume Get the user's resume.No findings
Why it is in this group
- The name "get_resume_api_resume_get" says "get": a word for reading.
Description, as the server wrote it Get Resume Get the user's resume. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_system_stats_api_multi_tenant_monitoring_stats_getGet System Stats Get overall system statistics ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "worker…No findings
Why it is in this group
- The name "get_system_stats_api_multi_tenant_monitoring_stats_get" says "get": a word for reading.
Description, as the server wrote it Get System Stats Get overall system statistics ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "workers": [ {} ], "total_active_users": 1, "system_status": "System Status" } ```
get_tools_schema_api_tools_schema_getGet Tools Schema Returns the JSON schema for all available tools.No findings
Why it is in this group
- The name "get_tools_schema_api_tools_schema_get" says "get": a word for reading.
Description, as the server wrote it Get Tools Schema Returns the JSON schema for all available tools. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_user_config_api_config_user__user_id__getGet User Config Get configuration for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_user_config_api_config_user__user_id__get" says "get": a word for reading.
Description, as the server wrote it Get User Config Get configuration for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_user_credits_api_referrals_credits_getGet User Credits Return the current user's credit balance, referral code, and total referrals.No findings
Why it is in this group
- The name "get_user_credits_api_referrals_credits_get" says "get": a word for reading.
Description, as the server wrote it Get User Credits Return the current user's credit balance, referral code, and total referrals. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_user_memory_api_user_memory__user_id__getGet User Memory Get user memory by user ID ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": …No findings
Why it is in this group
- The name "get_user_memory_api_user_memory__user_id__get" says "get": a word for reading.
Description, as the server wrote it Get User Memory Get user memory by user ID ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
get_user_memory_history_api_user_memory__user_id__history_getGet User Memory History Get user memory history (all versions) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** `…No findings
Why it is in this group
- The name "get_user_memory_history_api_user_memory__user_id__history_get" says "get": a word for reading.
Description, as the server wrote it Get User Memory History Get user memory history (all versions) ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true, "total": 1, "page": 1, "limit": 1 } ```
get_user_monitoring_status_api_multi_tenant_monitoring_users__user_id__status_getGet User Monitoring Status Get monitoring status for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "get_user_monitoring_status_api_multi_tenant_monitoring_users__user_id__status_get" says "get": a word for reading.
Description, as the server wrote it Get User Monitoring Status Get monitoring status for a specific user ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
get_yaml_suggestions_api_resume_yaml_suggestions_postGet Yaml Suggestions Generate YAML-based improvement suggestions ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonReads text others writeNo findings
Why it is in this group
- The name "get_yaml_suggestions_api_resume_yaml_suggestions_post" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_yaml_suggestions_api_resume_yaml_suggestions_post" says "get" and "post": it reads posts, which other people can write.
Description, as the server wrote it Get Yaml Suggestions Generate YAML-based improvement suggestions ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_accounts_api_linkedin_leads_accounts_getList Accounts List all LinkedIn scraper accounts in the pool (passwords masked).No findings
Why it is in this group
- The name "list_accounts_api_linkedin_leads_accounts_get" says "list": a word for reading.
Description, as the server wrote it List Accounts List all LinkedIn scraper accounts in the pool (passwords masked). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_applications_api_applications_getList Applications List the current user's tracked applications, most recent first.No findings
Why it is in this group
- The name "list_applications_api_applications_get" says "list": a word for reading.
Description, as the server wrote it List Applications List the current user's tracked applications, most recent first. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "user_id": "User Id", "company_name": "Company Name", "job_title": "Job Title", "job_url": "Job Url", "platform": "Platform", "status": "ApplicationStatus", "applied_at": "2023-01-01T00:00:00Z", "status_history": [ { "status": "ApplicationStatus", "changed_at": "2023-01-01T00:00:00Z" } ], "source": "Source" } ] ```
list_companies_api_companies_getList Companies ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "hrContacts": [ { "email": "Email" } …No findings
Why it is in this group
- The name "list_companies_api_companies_get" says "list": a word for reading.
Description, as the server wrote it List Companies ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "hrContacts": [ { "email": "Email" } ], "hrContactCount": 1 } ] ```
list_connections_api_tools_connections_getList Connections List all active connections for the user in Composio.No findings
Why it is in this group
- The name "list_connections_api_tools_connections_get" says "list": a word for reading.
Description, as the server wrote it List Connections List all active connections for the user in Composio. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_invites_api_orgs_me_invites_getList Invites ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "list_invites_api_orgs_me_invites_get" says "list": a word for reading.
Description, as the server wrote it List Invites ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_keys_api_api_keys_getList Keys ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "list_keys_api_api_keys_get" says "list": a word for reading.
Description, as the server wrote it List Keys ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_scrape_runs_api_linkedin_leads_scrape_runs_getList Scrape Runs List recent scrape run records for audit / dashboard (admin only: they hold platform-wide queries and volumes).Reads text others writeNo findings
Why it is in this group
- The name "list_scrape_runs_api_linkedin_leads_scrape_runs_get" says "list": a word for reading.
What it can reach
- untrusted-inputThe name "list_scrape_runs_api_linkedin_leads_scrape_runs_get" says "scrape": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
Description, as the server wrote it List Scrape Runs List recent scrape run records for audit / dashboard (admin only: they hold platform-wide queries and volumes). ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
list_templates_api_email_templates_getList Templates Return the user's email templates, generating them if none exist yet.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_templates_api_email_templates_get" says "list": a word for reading.
What it can reach
- private-dataThe name "list_templates_api_email_templates_get" says "list" and "email": it reads mail.
- untrusted-inputThe name "list_templates_api_email_templates_get" says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List Templates Return the user's email templates, generating them if none exist yet. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json [ { "id": "Id", "name": "Name", "subject": "Subject", "body": "Body", "usage_count": 1, "reply_count": 1, "reply_rate": 1.0 } ] ```
my_org_api_orgs_me_getMy Org ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "my_org_api_orgs_me_get" says "get": a word for reading.
Description, as the server wrote it My Org ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
my_org_summary_api_orgs_me_summary_getMy Org Summary ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "my_org_summary_api_orgs_me_summary_get" says "get": a word for reading.
Description, as the server wrote it My Org Summary ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
my_students_api_orgs_me_students_getMy Students ### Responses: **200**: Successful Response (Success Response) Content-Type: application/jsonNo findings
Why it is in this group
- The name "my_students_api_orgs_me_students_get" says "get": a word for reading.
Description, as the server wrote it My Students ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
preview_cold_email_api_cold_email_preview_postPreview Cold Email Generate a preview of a cold email without sending it.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "preview_cold_email_api_cold_email_preview_post" says "preview": a word for reading.
What it can reach
- private-dataThe name "preview_cold_email_api_cold_email_preview_post" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "preview_cold_email_api_cold_email_preview_post" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Preview Cold Email Generate a preview of a cold email without sending it. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "message": "Message", "subject": "Subject" } ```
preview_unified_cold_email_api_cold_email_unified_preview_postPreview Unified Cold Email Generate a preview for unified cold email flow.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "preview_unified_cold_email_api_cold_email_unified_preview_post" says "preview": a word for reading.
What it can reach
- private-dataThe name "preview_unified_cold_email_api_cold_email_unified_preview_post" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "preview_unified_cold_email_api_cold_email_unified_preview_post" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Preview Unified Cold Email Generate a preview for unified cold email flow. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "message": "Message", "subject": "Subject" } ```
public_resume_api_resume_public_getPublic Resume Resume link embedded in cold emails: no login, but only links we signed will open.No findings
Why it is in this group
- The name "public_resume_api_resume_public_get" says "get": a word for reading.
Description, as the server wrote it Public Resume Resume link embedded in cold emails: no login, but only links we signed will open. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
resolve_protocol_api_email_conversations__conversation_id__resolve_postResolve Protocol Resolve a human-intervention protocol by sending a manual reply and marking the associated notification as read.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "resolve_protocol_api_email_conversations__conversation_id__resolve_post" says "resolve": a word for reading.
What it can reach
- private-dataThe name "resolve_protocol_api_email_conversations__conversation_id__resolve_post" says "resolve" and "email": it reads mail.
- untrusted-inputThe name "resolve_protocol_api_email_conversations__conversation_id__resolve_post" says "resolve" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Resolve Protocol Resolve a human-intervention protocol by sending a manual reply and marking the associated notification as read. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
show_resume_api_resume__resume_id__getShow Resume Show the resume via redirect to presigned S3 URL.No findings
Why it is in this group
- The name "show_resume_api_resume__resume_id__get" says "show": a word for reading.
Description, as the server wrote it Show Resume Show the resume via redirect to presigned S3 URL. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json **Example Response:** ```json { "success": true } ```
test_pdf_generation_api_resume_test_pdf_generation_getTest Pdf Generation Test PDF generation to debug PDF issues.No findings
Why it is in this group
- The name "test_pdf_generation_api_resume_test_pdf_generation_get" says "get": a word for reading.
Description, as the server wrote it Test Pdf Generation Test PDF generation to debug PDF issues. Requires authentication. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
tracking_pixel_api_tracking_pixel__email_id__png_getTracking Pixel Endpoint for the email tracking pixel.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "tracking_pixel_api_tracking_pixel__email_id__png_get" says "get": a word for reading.
What it can reach
- private-dataThe name "tracking_pixel_api_tracking_pixel__email_id__png_get" says "get" and "email": it reads mail.
- untrusted-inputThe name "tracking_pixel_api_tracking_pixel__email_id__png_get" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Tracking Pixel Endpoint for the email tracking pixel. When loaded, it updates the corresponding email record as opened. ### Responses: **200**: Successful Response (Success Response) Content-Type: application/json
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
29280 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 20 private-data tools breaks every one.
- Reads private data20
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- debug_pdf_api_resume_debug_pdf_get
- get_available_senders_api_email_sender_pool_senders_get
- get_cold_email_api_cold_email_get
- get_cold_email_replies_api_cold_email__cold_email_id__replies_get
- get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get
- get_conversation_details_api_email_conversations__conversation_id__get
- get_conversations_api_email_conversations_get
- get_email_analytics_report_api_reports__user_id___duration__get
- get_email_analytics_summary_api_reports__user_id__summary_get
- get_email_footer_api_email_footer__user_id__get
- get_fallback_sender_api_email_sender_pool_fallback_sender_get
- get_formatted_footer_api_email_footer__user_id__formatted_get
- and 8 more
- Reads text others write24
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- get_available_senders_api_email_sender_pool_senders_get
- get_cold_email_api_cold_email_get
- get_cold_email_replies_api_cold_email__cold_email_id__replies_get
- get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get
- get_connection_url_api_tools_connect__app_name__get
- get_conversation_details_api_email_conversations__conversation_id__get
- get_conversations_api_email_conversations_get
- get_email_analytics_report_api_reports__user_id___duration__get
- get_email_analytics_summary_api_reports__user_id__summary_get
- get_email_footer_api_email_footer__user_id__get
- get_fallback_sender_api_email_sender_pool_fallback_sender_get
- get_formatted_footer_api_email_footer__user_id__formatted_get
- and 12 more
- Can send data out61
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
- add_account_api_linkedin_leads_accounts_post
- add_ai_interaction_context_api_user_memory__user_id__context_post
- add_hr_contact_endpoint_api_companies__company_id__hr_contacts_post
- agent_step_api_extension_agent_step_post
- answer_fields_api_extension_answer_fields_post
- apify_webhook_api_linkedin_leads_webhook_apify_post
- apply_memory_suggestion_api_user_memory_apply_suggestion_post
- apply_suggestions_api_resume_apply_suggestions_post
- approve_outreach_item_api_outreach_queue__item_id__approve_post
- bulk_send_outreach_api_linkedin_leads_bulk_outreach_post
- claim_referral_code_api_referrals_claim_post
- create_application_api_applications_post
- and 49 more
{
"permissions": {
"deny": [
"mcp__hopehire__debug_pdf_api_resume_debug_pdf_get",
"mcp__hopehire__get_available_senders_api_email_sender_pool_senders_get",
"mcp__hopehire__get_cold_email_api_cold_email_get",
"mcp__hopehire__get_cold_email_replies_api_cold_email__cold_email_id__replies_get",
"mcp__hopehire__get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get",
"mcp__hopehire__get_conversation_details_api_email_conversations__conversation_id__get",
"mcp__hopehire__get_conversations_api_email_conversations_get",
"mcp__hopehire__get_email_analytics_report_api_reports__user_id___duration__get",
"mcp__hopehire__get_email_analytics_summary_api_reports__user_id__summary_get",
"mcp__hopehire__get_email_footer_api_email_footer__user_id__get",
"mcp__hopehire__get_fallback_sender_api_email_sender_pool_fallback_sender_get",
"mcp__hopehire__get_formatted_footer_api_email_footer__user_id__formatted_get",
"mcp__hopehire__get_least_contacted_hr_api_cold_email_least_contacted_hr_get",
"mcp__hopehire__get_least_used_sender_api_email_sender_pool_least_used_sender_get",
"mcp__hopehire__get_my_footer_api_email_footer_me_get",
"mcp__hopehire__list_templates_api_email_templates_get",
"mcp__hopehire__preview_cold_email_api_cold_email_preview_post",
"mcp__hopehire__preview_unified_cold_email_api_cold_email_unified_preview_post",
"mcp__hopehire__resolve_protocol_api_email_conversations__conversation_id__resolve_post",
"mcp__hopehire__tracking_pixel_api_tracking_pixel__email_id__png_get"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http hopehire https://hopehire.in/mcp --header 'Authorization: <your-authorization>'claude mcp add --transport http hopehire https://hopehire.in/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__hopehire__get_notifications_api_notifications_get",
"mcp__hopehire__get_ats_score_api_resume_ats_score_get",
"mcp__hopehire__get_yaml_suggestions_api_resume_yaml_suggestions_post",
"mcp__hopehire__get_rendercv_pdf_api_resume_rendercv_pdf_get",
"mcp__hopehire__get_rendercv_pdf_download_api_resume_rendercv_pdf_download_get",
"mcp__hopehire__test_pdf_generation_api_resume_test_pdf_generation_get",
"mcp__hopehire__debug_pdf_api_resume_debug_pdf_get",
"mcp__hopehire__download_resume_api_resume_download_get",
"mcp__hopehire__public_resume_api_resume_public_get",
"mcp__hopehire__show_resume_api_resume__resume_id__get",
"mcp__hopehire__get_resume_api_resume_get",
"mcp__hopehire__get_preferences_api_job_preferences_get",
"mcp__hopehire__get_filtered_jobs_api_job_matches_get",
"mcp__hopehire__get_auto_apply_tasks_api_auto_apply_get",
"mcp__hopehire__get_auto_apply_status_api_auto_apply__task_id__get",
"mcp__hopehire__get_auto_apply_status_by_task_id_api_auto_apply_status__task_id__get",
"mcp__hopehire__get_conversations_api_email_conversations_get",
"mcp__hopehire__get_conversation_details_api_email_conversations__conversation_id__get",
"mcp__hopehire__resolve_protocol_api_email_conversations__conversation_id__resolve_post",
"mcp__hopehire__get_system_stats_api_multi_tenant_monitoring_stats_get",
"mcp__hopehire__get_active_users_api_multi_tenant_monitoring_users_active_get",
"mcp__hopehire__get_user_monitoring_status_api_multi_tenant_monitoring_users__user_id__status_get",
"mcp__hopehire__get_email_analytics_report_api_reports__user_id___duration__get",
"mcp__hopehire__get_email_analytics_summary_api_reports__user_id__summary_get",
"mcp__hopehire__get_user_memory_api_user_memory__user_id__get",
"mcp__hopehire__get_user_memory_history_api_user_memory__user_id__history_get",
"mcp__hopehire__get_available_senders_api_email_sender_pool_senders_get",
"mcp__hopehire__get_least_used_sender_api_email_sender_pool_least_used_sender_get",
"mcp__hopehire__get_fallback_sender_api_email_sender_pool_fallback_sender_get",
"mcp__hopehire__get_my_footer_api_email_footer_me_get",
"mcp__hopehire__get_email_footer_api_email_footer__user_id__get",
"mcp__hopehire__get_formatted_footer_api_email_footer__user_id__formatted_get",
"mcp__hopehire__get_user_config_api_config_user__user_id__get",
"mcp__hopehire__get_campaign_config_api_config_campaign__campaign_id__get",
"mcp__hopehire__get_effective_config_api_config_effective__user_id__get",
"mcp__hopehire__get_default_config_api_config_defaults_get",
"mcp__hopehire__get_all_user_configs_api_config_admin_users_get",
"mcp__hopehire__get_all_campaign_configs_api_config_admin_campaigns_get",
"mcp__hopehire__get_available_leads_api_linkedin_leads_get",
"mcp__hopehire__get_all_leads_admin_api_linkedin_leads_all_get",
"mcp__hopehire__get_lead_stats_api_linkedin_leads_stats_get",
"mcp__hopehire__list_accounts_api_linkedin_leads_accounts_get",
"mcp__hopehire__list_scrape_runs_api_linkedin_leads_scrape_runs_get",
"mcp__hopehire__get_lead_outreach_history_api_linkedin_leads__lead_id__history_get",
"mcp__hopehire__get_lead_api_linkedin_leads__lead_id__get",
"mcp__hopehire__list_templates_api_email_templates_get",
"mcp__hopehire__get_tools_schema_api_tools_schema_get",
"mcp__hopehire__get_connection_url_api_tools_connect__app_name__get",
"mcp__hopehire__list_connections_api_tools_connections_get",
"mcp__hopehire__get_integration_status_api_tools_status_get",
"mcp__hopehire__get_user_credits_api_referrals_credits_get",
"mcp__hopehire__get_referral_code_api_referrals_code_get",
"mcp__hopehire__get_outreach_queue_api_outreach_queue_get",
"mcp__hopehire__get_autopilot_settings_api_autopilot_settings_get",
"mcp__hopehire__get_active_outreach_batch_api_outreach_batches_active_get",
"mcp__hopehire__get_outreach_batch_api_outreach_batches__batch_id__get",
"mcp__hopehire__get_pending_auto_replies_api_auto_replies_get",
"mcp__hopehire__list_applications_api_applications_get",
"mcp__hopehire__get_extension_settings_api_extension_settings_get",
"mcp__hopehire__list_keys_api_api_keys_get",
"mcp__hopehire__my_org_api_orgs_me_get",
"mcp__hopehire__my_org_summary_api_orgs_me_summary_get",
"mcp__hopehire__my_students_api_orgs_me_students_get",
"mcp__hopehire__list_invites_api_orgs_me_invites_get",
"mcp__hopehire__get_least_contacted_hr_api_cold_email_least_contacted_hr_get",
"mcp__hopehire__get_cold_email_api_cold_email_get",
"mcp__hopehire__preview_cold_email_api_cold_email_preview_post",
"mcp__hopehire__preview_unified_cold_email_api_cold_email_unified_preview_post",
"mcp__hopehire__get_cold_email_replies_api_cold_email__cold_email_id__replies_get",
"mcp__hopehire__get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get",
"mcp__hopehire__list_companies_api_companies_get",
"mcp__hopehire__tracking_pixel_api_tracking_pixel__email_id__png_get",
"mcp__hopehire__get_job_details_api_v1_jobs_get",
"mcp__hopehire__get_job_detail_api_v1_jobs__job_id__get"
],
"ask": [
"mcp__hopehire__mark_all_notifications_as_read_api_notifications_read_all_post",
"mcp__hopehire__mark_notification_as_read_api_notifications__notification_id__read_patch",
"mcp__hopehire__refresh_ats_score_api_resume_ats_score_refresh_post",
"mcp__hopehire__resume_ai_chat_api_resume_ai_chat_post",
"mcp__hopehire__mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_post",
"mcp__hopehire__generate_yaml_version_api_resume_generate_yaml_post",
"mcp__hopehire__apply_suggestions_api_resume_apply_suggestions_post",
"mcp__hopehire__generate_complete_resume_api_resume_generate_complete_post",
"mcp__hopehire__render_raw_yaml_api_resume_render_raw_yaml_post",
"mcp__hopehire__save_resume_yaml_api_resume_save_yaml_post",
"mcp__hopehire__create_resume_from_linkedin_api_resume_from_linkedin_post",
"mcp__hopehire__upload_resume_api_resume_post",
"mcp__hopehire__update_resume_manual_api_resume_put",
"mcp__hopehire__set_cold_email_resume_source_api_resume_cold_email_source_put",
"mcp__hopehire__create_preferences_api_job_preferences_post",
"mcp__hopehire__update_preferences_api_job_preferences_put",
"mcp__hopehire__start_job_matching_api_job_matches_start_post",
"mcp__hopehire__start_conversation_api_auto_apply_start_conversation_post",
"mcp__hopehire__start_auto_apply_api_auto_apply_post",
"mcp__hopehire__start_conversation_api_email_conversations_start_conversation_post",
"mcp__hopehire__pause_conversation_api_email_conversations__conversation_id__pause_post",
"mcp__hopehire__resume_conversation_api_email_conversations__conversation_id__resume_post",
"mcp__hopehire__send_manual_message_api_email_conversations__conversation_id__message_post",
"mcp__hopehire__enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_post",
"mcp__hopehire__disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_post",
"mcp__hopehire__update_user_monitoring_config_api_multi_tenant_monitoring_users__user_id__config_put",
"mcp__hopehire__trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_post",
"mcp__hopehire__create_user_memory_api_user_memory__user_id__post",
"mcp__hopehire__update_user_memory_api_user_memory__user_id__put",
"mcp__hopehire__add_ai_interaction_context_api_user_memory__user_id__context_post",
"mcp__hopehire__update_remembered_field_answer_api_user_memory__user_id__remembered_field_put",
"mcp__hopehire__apply_memory_suggestion_api_user_memory_apply_suggestion_post",
"mcp__hopehire__user_memory_ai_chat_api_user_memory_ai_chat_post",
"mcp__hopehire__send_email_via_pool_api_email_sender_pool_send_email_post",
"mcp__hopehire__update_my_footer_api_email_footer_me_put",
"mcp__hopehire__update_email_footer_api_email_footer__user_id__put",
"mcp__hopehire__generate_footer_from_resume_api_email_footer__user_id__generate_from_resume_post",
"mcp__hopehire__update_user_config_api_config_user__user_id__put",
"mcp__hopehire__reset_user_config_api_config_user__user_id__delete",
"mcp__hopehire__update_campaign_config_api_config_campaign__campaign_id__put",
"mcp__hopehire__reset_campaign_config_api_config_campaign__campaign_id__delete",
"mcp__hopehire__add_account_api_linkedin_leads_accounts_post",
"mcp__hopehire__update_account_status_api_linkedin_leads_accounts__account_id__status_patch",
"mcp__hopehire__update_outreach_status_api_linkedin_leads__lead_id__outreach_patch",
"mcp__hopehire__send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_post",
"mcp__hopehire__generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_post",
"mcp__hopehire__bulk_send_outreach_api_linkedin_leads_bulk_outreach_post",
"mcp__hopehire__trigger_scrape_api_linkedin_leads_trigger_post",
"mcp__hopehire__apify_webhook_api_linkedin_leads_webhook_apify_post",
"mcp__hopehire__update_template_api_email_templates__template_id__put",
"mcp__hopehire__regenerate_templates_api_email_templates_regenerate_post",
"mcp__hopehire__execute_tool_api_tools_execute_post",
"mcp__hopehire__claim_referral_code_api_referrals_claim_post",
"mcp__hopehire__approve_outreach_item_api_outreach_queue__item_id__approve_post",
"mcp__hopehire__dismiss_outreach_item_api_outreach_queue__item_id__delete",
"mcp__hopehire__update_daily_outreach_settings_api_autopilot_settings_patch",
"mcp__hopehire__resume_outreach_endpoint_api_autopilot_resume_outreach_post",
"mcp__hopehire__update_legacy_autopilot_settings_api_autopilot_legacy_settings_patch",
"mcp__hopehire__create_outreach_batch_api_outreach_batches_post",
"mcp__hopehire__create_application_api_applications_post",
"mcp__hopehire__update_application_status_api_applications__application_id__status_patch",
"mcp__hopehire__answer_fields_api_extension_answer_fields_post",
"mcp__hopehire__agent_step_api_extension_agent_step_post",
"mcp__hopehire__remember_field_answer_api_extension_remember_field_answer_post",
"mcp__hopehire__tailor_resume_api_extension_tailor_resume_post",
"mcp__hopehire__match_score_api_extension_match_score_post",
"mcp__hopehire__update_extension_settings_api_extension_settings_patch",
"mcp__hopehire__extension_apply_api_extension_apply_post",
"mcp__hopehire__send_product_update_broadcast_api_newsletter_send_post",
"mcp__hopehire__unsubscribe_api_newsletter_unsubscribe_get",
"mcp__hopehire__submit_feedback_api_feedback_post",
"mcp__hopehire__create_key_api_api_keys_post",
"mcp__hopehire__invite_info_api_orgs_invites__token__get",
"mcp__hopehire__create_invites_api_orgs_me_invites_post",
"mcp__hopehire__send_cold_email_api_cold_email_post",
"mcp__hopehire__send_cold_email_to_hr_api_cold_email_send_to_hr_post",
"mcp__hopehire__send_unified_cold_email_api_cold_email_unified_post",
"mcp__hopehire__create_company_endpoint_api_companies_post",
"mcp__hopehire__add_hr_contact_endpoint_api_companies__company_id__hr_contacts_post"
],
"deny": [
"mcp__hopehire__delete_notification_api_notifications__notification_id__delete",
"mcp__hopehire__delete_resume_api_resume_delete",
"mcp__hopehire__delete_preferences_api_job_preferences_delete",
"mcp__hopehire__clear_job_matches_api_job_matches_delete",
"mcp__hopehire__delete_user_memory_api_user_memory__user_id__delete",
"mcp__hopehire__delete_remembered_field_answer_api_user_memory__user_id__remembered_field_delete",
"mcp__hopehire__disconnect_app_api_tools_connect__app_name__delete",
"mcp__hopehire__cancel_outreach_batch_api_outreach_batches__batch_id__cancel_post",
"mcp__hopehire__cancel_pending_auto_reply_api_auto_replies__reply_id__delete",
"mcp__hopehire__delete_key_api_api_keys__key_id__delete",
"mcp__hopehire__remove_student_api_orgs_me_students__user_id__delete",
"mcp__hopehire__revoke_invite_api_orgs_me_invites__invite_id__delete"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as hopehire. Review it before you use it.
Capability tags behind 85 rules
- mcp__hopehire__mark_all_notifications_as_read_api_notifications_read_all_post outbound
- mcp__hopehire__refresh_ats_score_api_resume_ats_score_refresh_post outbound
- mcp__hopehire__resume_ai_chat_api_resume_ai_chat_post outbound
- mcp__hopehire__mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_post outbound
- mcp__hopehire__generate_yaml_version_api_resume_generate_yaml_post outbound
- mcp__hopehire__apply_suggestions_api_resume_apply_suggestions_post outbound
- mcp__hopehire__get_yaml_suggestions_api_resume_yaml_suggestions_post untrusted-input
- mcp__hopehire__generate_complete_resume_api_resume_generate_complete_post outbound
- mcp__hopehire__render_raw_yaml_api_resume_render_raw_yaml_post outbound
- mcp__hopehire__save_resume_yaml_api_resume_save_yaml_post outbound
- mcp__hopehire__create_resume_from_linkedin_api_resume_from_linkedin_post outbound
- mcp__hopehire__debug_pdf_api_resume_debug_pdf_get private-data
- mcp__hopehire__upload_resume_api_resume_post outbound
- mcp__hopehire__set_cold_email_resume_source_api_resume_cold_email_source_put outbound
- mcp__hopehire__create_preferences_api_job_preferences_post outbound
- mcp__hopehire__start_job_matching_api_job_matches_start_post outbound
- mcp__hopehire__start_conversation_api_auto_apply_start_conversation_post outbound
- mcp__hopehire__start_auto_apply_api_auto_apply_post outbound
- mcp__hopehire__start_conversation_api_email_conversations_start_conversation_post outbound
- mcp__hopehire__get_conversations_api_email_conversations_get private-data, untrusted-input
- mcp__hopehire__get_conversation_details_api_email_conversations__conversation_id__get private-data, untrusted-input
- mcp__hopehire__pause_conversation_api_email_conversations__conversation_id__pause_post outbound
- mcp__hopehire__resume_conversation_api_email_conversations__conversation_id__resume_post outbound
- mcp__hopehire__send_manual_message_api_email_conversations__conversation_id__message_post outbound
- mcp__hopehire__resolve_protocol_api_email_conversations__conversation_id__resolve_post private-data, untrusted-input
- mcp__hopehire__enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_post outbound
- mcp__hopehire__disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_post outbound
- mcp__hopehire__trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_post outbound
- mcp__hopehire__get_email_analytics_report_api_reports__user_id___duration__get private-data, untrusted-input
- mcp__hopehire__get_email_analytics_summary_api_reports__user_id__summary_get private-data, untrusted-input
- mcp__hopehire__create_user_memory_api_user_memory__user_id__post outbound
- mcp__hopehire__add_ai_interaction_context_api_user_memory__user_id__context_post outbound
- mcp__hopehire__apply_memory_suggestion_api_user_memory_apply_suggestion_post outbound
- mcp__hopehire__user_memory_ai_chat_api_user_memory_ai_chat_post outbound
- mcp__hopehire__get_available_senders_api_email_sender_pool_senders_get private-data, untrusted-input
- mcp__hopehire__get_least_used_sender_api_email_sender_pool_least_used_sender_get private-data, untrusted-input
- mcp__hopehire__get_fallback_sender_api_email_sender_pool_fallback_sender_get private-data, untrusted-input
- mcp__hopehire__send_email_via_pool_api_email_sender_pool_send_email_post outbound
- mcp__hopehire__get_my_footer_api_email_footer_me_get private-data, untrusted-input
- mcp__hopehire__update_my_footer_api_email_footer_me_put outbound
- mcp__hopehire__get_email_footer_api_email_footer__user_id__get private-data, untrusted-input
- mcp__hopehire__update_email_footer_api_email_footer__user_id__put outbound
- mcp__hopehire__get_formatted_footer_api_email_footer__user_id__formatted_get private-data, untrusted-input
- mcp__hopehire__generate_footer_from_resume_api_email_footer__user_id__generate_from_resume_post outbound
- mcp__hopehire__add_account_api_linkedin_leads_accounts_post outbound
- mcp__hopehire__list_scrape_runs_api_linkedin_leads_scrape_runs_get untrusted-input
- mcp__hopehire__send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_post outbound
- mcp__hopehire__generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_post outbound
- mcp__hopehire__bulk_send_outreach_api_linkedin_leads_bulk_outreach_post outbound
- mcp__hopehire__trigger_scrape_api_linkedin_leads_trigger_post untrusted-input, outbound
- mcp__hopehire__apify_webhook_api_linkedin_leads_webhook_apify_post outbound
- mcp__hopehire__list_templates_api_email_templates_get private-data, untrusted-input
- mcp__hopehire__update_template_api_email_templates__template_id__put outbound
- mcp__hopehire__regenerate_templates_api_email_templates_regenerate_post outbound
- mcp__hopehire__execute_tool_api_tools_execute_post outbound
- mcp__hopehire__get_connection_url_api_tools_connect__app_name__get untrusted-input
- mcp__hopehire__claim_referral_code_api_referrals_claim_post outbound
- mcp__hopehire__approve_outreach_item_api_outreach_queue__item_id__approve_post outbound
- mcp__hopehire__resume_outreach_endpoint_api_autopilot_resume_outreach_post outbound
- mcp__hopehire__create_outreach_batch_api_outreach_batches_post outbound
- mcp__hopehire__get_pending_auto_replies_api_auto_replies_get untrusted-input
- mcp__hopehire__create_application_api_applications_post outbound
- mcp__hopehire__answer_fields_api_extension_answer_fields_post outbound
- mcp__hopehire__agent_step_api_extension_agent_step_post outbound
- mcp__hopehire__remember_field_answer_api_extension_remember_field_answer_post outbound
- mcp__hopehire__tailor_resume_api_extension_tailor_resume_post outbound
- mcp__hopehire__match_score_api_extension_match_score_post outbound
- mcp__hopehire__extension_apply_api_extension_apply_post outbound
- mcp__hopehire__send_product_update_broadcast_api_newsletter_send_post outbound
- mcp__hopehire__submit_feedback_api_feedback_post outbound
- mcp__hopehire__create_key_api_api_keys_post outbound
- mcp__hopehire__invite_info_api_orgs_invites__token__get outbound
- mcp__hopehire__create_invites_api_orgs_me_invites_post outbound
- mcp__hopehire__get_least_contacted_hr_api_cold_email_least_contacted_hr_get private-data, untrusted-input
- mcp__hopehire__get_cold_email_api_cold_email_get private-data, untrusted-input
- mcp__hopehire__send_cold_email_api_cold_email_post outbound
- mcp__hopehire__preview_cold_email_api_cold_email_preview_post private-data, untrusted-input
- mcp__hopehire__send_cold_email_to_hr_api_cold_email_send_to_hr_post outbound
- mcp__hopehire__send_unified_cold_email_api_cold_email_unified_post outbound
- mcp__hopehire__preview_unified_cold_email_api_cold_email_unified_preview_post private-data, untrusted-input
- mcp__hopehire__get_cold_email_replies_api_cold_email__cold_email_id__replies_get private-data, untrusted-input
- mcp__hopehire__get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_get private-data, untrusted-input
- mcp__hopehire__create_company_endpoint_api_companies_post outbound
- mcp__hopehire__add_hr_contact_endpoint_api_companies__company_id__hr_contacts_post outbound
- mcp__hopehire__tracking_pixel_api_tracking_pixel__email_id__png_get private-data, untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/in.hopehire/mcp/verify?hash=759019bd5786278cc9e530203f43e19f34c543c79ebdf90583a330f47ed21df6" | jq -e '.changed == false'Pinned hash 759019bd5786, from Oct 23, 2026, 19:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/in.hopehire/mcp/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/in.hopehire/mcp)Source: MCP Registry. Synced Oct 23, 2026, 19:17 UTC.