Yardstick ATS

by yardstick.team · remote · no sign-in to list tools · v0.6.11 · published by team.yardstick

Manage hiring in Yardstick's ATS: jobs, candidates, applications, interviews, and scorecards.

Deletes · 85Final · 2Changes · 62

Compare Registry entry

212 tools: 85 can delete or cancel things, 2 do something that can't be undone, 62 change things and 63 only read.

Scanned Oct 21, 2026

Deletes or cancels85Claude Code: deny: see these tools
Can't be undone2Claude Code: ask: see these tools
Changes things62Claude Code: ask: see these tools
Only reads63Claude Code: allow: see these tools

22 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http yardstick https://api.yardstick.team/mcp

Findings

Matches of fixed checks, with the text they matched.

22 warn

Warnyardstick_prospect_imports_read
The server marks "yardstick_prospect_imports_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_prospect_imports_read" says "import": a word for a change.
What this check looks for
Warnyardstick_ats_imports_read
The server marks "yardstick_ats_imports_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_ats_imports_read" says "import": a word for a change.
What this check looks for
Warnyardstick_source_links_list
The server marks "yardstick_source_links_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_source_links_list" says "link": a word for a change.
What this check looks for
Warnyardstick_source_links_read
The server marks "yardstick_source_links_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_source_links_read" says "link": a word for a change.
What this check looks for
Warnyardstick_applications_transition_preview
The server marks "yardstick_applications_transition_preview" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_transition_preview" says "preview": a word for reading.
What this check looks for
Warnyardstick_applications_archive_preview
The server marks "yardstick_applications_archive_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_archive_preview" says "archive": a word for removing or ending something.
What this check looks for

Show 16 more findings

Warnyardstick_applications_status_email_poc_preview
The server marks "yardstick_applications_status_email_poc_preview" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_status_email_poc_preview" says "status": a word for reading.
What this check looks for
Warnyardstick_applications_status_email_poc_bind
The server marks "yardstick_applications_status_email_poc_bind" destructive (destructiveHint: true), and its name says "status", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_status_email_poc_bind" says "status": a word for reading.
What this check looks for
Warnyardstick_applications_email_decision_preview
The server marks "yardstick_applications_email_decision_preview" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_email_decision_preview" says "preview": a word for reading.
What this check looks for
Warnyardstick_email_templates_preview
The server marks "yardstick_email_templates_preview" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_preview" says "preview": a word for reading.
What this check looks for
Warnyardstick_email_templates_validate
The server marks "yardstick_email_templates_validate" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_validate" says "validate": a word for reading.
What this check looks for
Warnyardstick_email_templates_preview_customization
The server marks "yardstick_email_templates_preview_customization" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_preview_customization" says "preview": a word for reading.
What this check looks for
Warnyardstick_opportunities_next_action
The server marks "yardstick_opportunities_next_action" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "read": a word for reading.
What this check looks for
Warnyardstick_pipelines_stages_delete_preview
The server marks "yardstick_pipelines_stages_delete_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_pipelines_stages_delete_preview" says "delete": a word for removing or ending something.
What this check looks for
Warnyardstick_pipelines_assign_to_job_preview
The server marks "yardstick_pipelines_assign_to_job_preview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_pipelines_assign_to_job_preview" says "assign": a word for a change.
What this check looks for
Warnyardstick_automation_runs_list
The server marks "yardstick_automation_runs_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_automation_runs_list" says "run": a word for a change.
What this check looks for
Warnyardstick_built_in_agents_runs
The server marks "yardstick_built_in_agents_runs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_built_in_agents_runs" says "run": a word for a change.
What this check looks for
Warnyardstick_built_in_agents_configure_preview
The server marks "yardstick_built_in_agents_configure_preview" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_built_in_agents_configure_preview" says "preview": a word for reading.
What this check looks for
Warnyardstick_job_postings_validate
The server marks "yardstick_job_postings_validate" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_job_postings_validate" says "validate": a word for reading.
What this check looks for
Warnyardstick_job_postings_archive_preview
The server marks "yardstick_job_postings_archive_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_job_postings_archive_preview" says "archive": a word for removing or ending something.
What this check looks for
Warnyardstick_interview_plan_drafts_validate
The server marks "yardstick_interview_plan_drafts_validate" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_interview_plan_drafts_validate" says "validate": a word for reading.
What this check looks for
Warnyardstick_interview_sessions_readiness
The server marks "yardstick_interview_sessions_readiness" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "read": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

212 tools

Deletes or cancels 85Removes, cancels or revokes something.Claude Code: deny

yardstick_access_grants_revokeRevoke an explicit access grant with optional reason text.No findings
Why it is in this group
- The name "yardstick_access_grants_revoke" says "revoke": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Revoke an explicit access grant with optional reason text.
Annotations the server declares
- title: Revoke an access grant (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_applications_admit_candidateMove one reviewed application to Candidates.No findings
Why it is in this group
- The description's first verb is "move": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Move one reviewed application to Candidates. Does not schedule interviews or send email.
Annotations the server declares
- title: Move an application to Candidates
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_archive_bindBind an already-previewed application archive with explicit approval metadata and matching idempotency key.No findings
Why it is in this group
- The name "yardstick_applications_archive_bind" says "archive": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an already-previewed application archive with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and archive an application
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_archive_previewPreview application archive approval requirements only; bind fields are rejected.1 finding
Why it is in this group
- The name "yardstick_applications_archive_preview" says "archive": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_applications_archive_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_archive_preview" says "archive": a word for removing or ending something.
  What this check looks for
Description, as the server wrote it
Preview application archive approval requirements only; bind fields are rejected.
Annotations the server declares
- title: Preview archiving an application (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_decideDecide on an application without a review task.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Decide on an application without a review task. Only the job's hiring manager may decide; anyone else gets application not found. Reason codes must be system codes or your organization's. Reject disqualifies the candidate.
Annotations the server declares
- title: Decide on an application
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_email_decision_applyApply an application status-change email decision with idempotency metadata.Can send data outNo findings
Why it is in this group
- The name "yardstick_applications_email_decision_apply" says "apply": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_applications_email_decision_apply" says "apply" and "email": it writes something other people read.
Description, as the server wrote it
Apply an application status-change email decision with idempotency metadata.
Annotations the server declares
- title: Apply a status change and its candidate email
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_status_email_poc_bindBind the fixed applications-owned status/email approval POC with explicit approval metadata and a matching idempotency key.Reads private dataReads text others write1 finding
Why it is in this group
- The name "yardstick_applications_status_email_poc_bind" says "status": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- private-dataThe name "yardstick_applications_status_email_poc_bind" says "status" and "email": it reads mail.
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe name "yardstick_applications_status_email_poc_bind" says "status" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Findings
- Warn
  The server marks "yardstick_applications_status_email_poc_bind" destructive (destructiveHint: true), and its name says "status", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_status_email_poc_bind" says "status": a word for reading.
  What this check looks for
Description, as the server wrote it
Bind the fixed applications-owned status/email approval POC with explicit approval metadata and a matching idempotency key.
Annotations the server declares
- title: Confirm the Offer status change and send its candidate email
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_transition_bindBind an already-previewed application transition with explicit approval metadata and matching idempotency key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an already-previewed application transition with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and apply an application status change
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_transition_directDirectly write a non-terminal application transition; approval-only statuses are rejected.No findings
Why it is in this group
- The description's first verb is "write": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Directly write a non-terminal application transition; approval-only statuses are rejected. Optionally target a configured stage by id with pipeline_stage_id (the resolved stage is reported back).
Annotations the server declares
- title: Move an application to another status
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_undo_candidate_admissionCorrect one accidental candidate admission using its current admission ID.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Correct one accidental candidate admission using its current admission ID. No time limit; refused once candidate activity starts. Preserves history and excludes the corrected episode from admission reporting.
Annotations the server declares
- title: Undo an accidental move to Candidates
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_applications_updateUpdate one application with schema-bound public API fields.No findings
Why it is in this group
- The name "yardstick_applications_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update one application with schema-bound public API fields.
Annotations the server declares
- title: Update an application
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_bulkSwitch rules on, off or delete them.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Switch rules on, off or delete them. First use mode=preview with rule_ids or filter. Show the affected rules and skipped rules to the user and get explicit confirmation BEFORE applying. Then use mode=apply with only the exact rule_ids returned by preview; never reapply the filter. Pick a step rules are skipped when switching on. Warn that shared pipeline rules change for every job on that pipeline, including jobs outside the filter.
Annotations the server declares
- title: Confirm bulk automation rule changes
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_deleteDelete an automation rule.No findings
Why it is in this group
- The name "yardstick_automation_rules_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete an automation rule. Plain delete (no approval preview→bind): rules are inert config, so deleting unfired config moves no candidates.
Annotations the server declares
- title: Delete a stage automation rule
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_updateEdit a workflow automation rule's name, stage or step trigger, action, condition, job scope, delivery mode, timing or active state.No findings
Why it is in this group
- The name "yardstick_automation_rules_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Edit a workflow automation rule's name, stage or step trigger, action, condition, job scope, delivery mode, timing or active state.
Annotations the server declares
- title: Edit a stage automation rule
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_automation_runs_retryTry a workflow run again after fixing missing setup.No findings
Why it is in this group
- The name "yardstick_automation_runs_retry" says "run": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Try a workflow run again after fixing missing setup. Only clean refusals and active rules qualify; unknown outcomes are refused.
Annotations the server declares
- title: Try a workflow run again after fixing setup
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_automation_starters_deleteDelete an organization starter while keeping existing job copies.No findings
Why it is in this group
- The name "yardstick_automation_starters_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete an organization starter while keeping existing job copies.
Annotations the server declares
- title: Delete an automation starter
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_automation_starters_renameRename an organization starter without changing existing job copies.No findings
Why it is in this group
- The name "yardstick_automation_starters_rename" says "rename": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Rename an organization starter without changing existing job copies.
Annotations the server declares
- title: Rename an automation starter
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_configure_bindBind an approved built-in-agent configure preview (same config plus approval metadata and a matching idempotency key).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an approved built-in-agent configure preview (same config plus approval metadata and a matching idempotency key). Writes only the built-in agent's declared settings keys and records one audit row.
Annotations the server declares
- title: Confirm and save built-in-agent settings
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_enable_bindBind an approved built-in-agent enable preview with explicit approval metadata and a matching idempotency key.No findings
Why it is in this group
- The name "yardstick_built_in_agents_enable_bind" says "enable": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an approved built-in-agent enable preview with explicit approval metadata and a matching idempotency key. Writes the built-in agent's declared settings home and records one audit row.
Annotations the server declares
- title: Confirm and turn on a built-in agent
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_decision_brief_regenerateRegenerate a decision brief for an application with idempotency metadata.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Regenerate a decision brief for an application with idempotency metadata.
Annotations the server declares
- title: Regenerate a hiring decision brief
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_departments_members_removeRemove a Department member, optionally with a replacement lead.No findings
Why it is in this group
- The name "yardstick_departments_members_remove" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove a Department member, optionally with a replacement lead.
Annotations the server declares
- title: Remove a department member (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_departments_members_set_leadSet one Department member as lead.No findings
Why it is in this group
- The name "yardstick_departments_members_set_lead" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Set one Department member as lead.
Annotations the server declares
- title: Set the department lead (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_departments_updateUpdate one Department with schema-bound public API fields.No findings
Why it is in this group
- The name "yardstick_departments_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update one Department with schema-bound public API fields.
Annotations the server declares
- title: Update a department (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_automation_settings_updateUpdate candidate email automation settings.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_automation_settings_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_automation_settings_update" says "update" and "email": it writes something other people read.
Description, as the server wrote it
Update candidate email automation settings.
Annotations the server declares
- title: Update email automation settings
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_discardDiscard a pending candidate email draft without provider mutation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Discard a pending candidate email draft without provider mutation.
Annotations the server declares
- title: Discard a candidate email draft
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_sendSend a pending candidate email draft with replay protection, or reclaim a never-delivered draft and send it.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_drafts_send" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_drafts_send" says "send": it sends or publishes something to other people.
Description, as the server wrote it
Send a pending candidate email draft with replay protection, or reclaim a never-delivered draft and send it.
Annotations the server declares
- title: Send a candidate email
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_updateSave mutable candidate email draft fields or set/clear a validated sender override.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_drafts_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_drafts_update" says "update" and "email": it writes something other people read.
Description, as the server wrote it
Save mutable candidate email draft fields or set/clear a validated sender override.
Annotations the server declares
- title: Edit a candidate email draft
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_sender_defaults_setSet the default sender policy for a candidate email type.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_sender_defaults_set" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_sender_defaults_set" says "set" and "email": it writes something other people read.
Description, as the server wrote it
Set the default sender policy for a candidate email type.
Annotations the server declares
- title: Set the default sender for an email type
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_deletedelete an email.No findings
Why it is in this group
- The name "yardstick_email_templates_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
delete an email. Use email_type for a built-in type or custom template key.
Annotations the server declares
- title: Delete a custom email
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_email_templates_publishUpdate, create, duplicate, reset or delete an email.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_templates_publish" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_templates_publish" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Update, create, duplicate, reset or delete an email. Set operation; custom emails use email_type as their template key.
Annotations the server declares
- title: Publish an email version
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_email_templates_resetreset an email.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_templates_reset" says "reset": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_email_templates_reset" says "reset" and "email": it writes something other people read.
Description, as the server wrote it
reset an email. Use email_type for a built-in type or custom template key.
Annotations the server declares
- title: Reset an email to its Yardstick default
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_email_templates_rollbackRestore an email to an immutable version.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Restore an email to an immutable version.
Annotations the server declares
- title: Restore an earlier email version
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_final_recommendation_recordRecord direct final-recommendation evidence; this does not mutate application status.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Record direct final-recommendation evidence; this does not mutate application status.
Annotations the server declares
- title: Record a final hiring recommendation
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_clear_competenciesClear every competency from a draft, leaving the stage deliberately empty — deterministic, no AI generation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Clear every competency from a draft, leaving the stage deliberately empty — deterministic, no AI generation. Prunes the behavioral anchors of every cleared competency in the same write and reports the pruned ids. The emptied draft cannot be published as a new plan; bind the emptying onto an already-live plan with modify_active. Optional source_stage {stage: competencies, version} returns 409 when stale.
Annotations the server declares
- title: Clear all draft competencies, leaving the section empty
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_clear_interview_sequenceClear every interview round from a draft, leaving the stage deliberately empty — deterministic, no AI generation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Clear every interview round from a draft, leaving the stage deliberately empty — deterministic, no AI generation. Prunes the questions and directions of every cleared round in the same write and reports the pruned round ids. The emptied draft cannot be published as a new plan; bind the emptying onto an already-live plan with modify_active. Optional source_stage {stage: interview_sequence, version} returns 409 when stale.
Annotations the server declares
- title: Clear all draft interview rounds, leaving the section empty
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_clear_job_skillsClear every job skill from a draft, leaving the stage deliberately empty — deterministic, no AI generation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Clear every job skill from a draft, leaving the stage deliberately empty — deterministic, no AI generation. The item delete refuses to remove the last skill, so this is the only way to record that the section was addressed and left empty. The emptied draft cannot be published as a new plan; bind the emptying onto an already-live plan with modify_active. Optional source_stage {stage: skills, version} returns 409 when stale.
Annotations the server declares
- title: Clear all draft job skills, leaving the section empty
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_clear_outcomesClear every outcome from a draft, leaving the stage deliberately empty — deterministic, no AI generation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Clear every outcome from a draft, leaving the stage deliberately empty — deterministic, no AI generation. Outcomes have no item-level delete, and confirm_outcomes requires at least one outcome, so this is the only way to record that the section was addressed and left empty. The emptied draft cannot be published as a new plan; bind the emptying onto an already-live plan with modify_active. Optional source_stage {stage: outcomes, version} returns 409 when stale.
Annotations the server declares
- title: Clear all draft outcomes, leaving the section empty
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_confirm_outcomesConfirm draft interview-plan outcomes before generating later stages.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Confirm draft interview-plan outcomes before generating later stages.
Annotations the server declares
- title: Confirm draft hiring outcomes
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_delete_anchorsDelete behavioral-anchor entries for draft items by item id.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_delete_anchors" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete behavioral-anchor entries for draft items by item id. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Delete draft scorecard anchors
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_delete_competenciesDelete draft competencies by id.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_delete_competencies" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete draft competencies by id. Prunes each deleted competency's behavioral anchors in the same write and reports the pruned ids; the stage must keep at least one competency. Optional source_stage {stage: competencies, version} returns 409 when stale.
Annotations the server declares
- title: Delete draft competencies
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_delete_questionsDelete questions from one draft round by question id.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_delete_questions" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete questions from one draft round by question id. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Delete questions from a draft interview round
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_delete_roundsDelete draft interview rounds by id.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_delete_rounds" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete draft interview rounds by id. Prunes each deleted round's questions and directions in the same write and reports the pruned ids; the sequence must keep at least one round. Optional source_stage {stage: interview_sequence, version} returns 409 when stale.
Annotations the server declares
- title: Delete draft interview rounds
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_delete_skillsDelete draft job skills by id; the stage must keep at least one skill.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_delete_skills" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete draft job skills by id; the stage must keep at least one skill. Optional source_stage {stage: skills, version} returns 409 when stale.
Annotations the server declares
- title: Delete draft job skills
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_generate_anchorsGenerate scorecard behavioral anchors (levels 1-4) for each draft competency, or one competency when competency_id is supplied.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_anchors" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate scorecard behavioral anchors (levels 1-4) for each draft competency, or one competency when competency_id is supplied.
Annotations the server declares
- title: Generate draft scorecard anchors
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_generate_competenciesGenerate draft interview-plan competencies from confirmed outcomes.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_competencies" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate draft interview-plan competencies from confirmed outcomes.
Annotations the server declares
- title: Generate draft competencies
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_generate_outcomesGenerate draft interview-plan outcomes from explicit role context, or pass accepted_outcomes to store caller-written outcomes verbatim with no AI generation (the deterministic draf…No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_outcomes" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate draft interview-plan outcomes from explicit role context, or pass accepted_outcomes to store caller-written outcomes verbatim with no AI generation (the deterministic draft bootstrap).
Annotations the server declares
- title: Generate draft hiring outcomes
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_generate_questions_directionsGenerate interview questions and interviewer/candidate directions for each draft round, or one round when round_id is supplied.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_questions_directions" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate interview questions and interviewer/candidate directions for each draft round, or one round when round_id is supplied.
Annotations the server declares
- title: Generate draft questions and interviewer directions
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_generate_roundsGenerate draft interview-plan rounds from confirmed skills.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_rounds" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate draft interview-plan rounds from confirmed skills.
Annotations the server declares
- title: Generate draft interview rounds
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_generate_skillsGenerate draft interview-plan skills from confirmed competencies.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_generate_skills" says "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate draft interview-plan skills from confirmed competencies.
Annotations the server declares
- title: Generate draft job skills
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_update_anchorsUpsert behavioral anchors for draft items, keyed by item id with levels 1-4 — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_anchors" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Upsert behavioral anchors for draft items, keyed by item id with levels 1-4 — deterministic, no AI generation. Requires competencies; anchors keyed to unknown item ids are rejected by id. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Set draft scorecard anchors
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_update_competenciesReplace draft competencies by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_competencies" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replace draft competencies by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation. Updating in place keeps the item id. Optional source_stage {stage: competencies, version} returns 409 when stale.
Annotations the server declares
- title: Rewrite or reorder draft competencies
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_update_questionsReplace one draft round's questions by id and/or reorder them with order (a complete permutation of that round's resulting question ids) — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_questions" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replace one draft round's questions by id and/or reorder them with order (a complete permutation of that round's resulting question ids) — deterministic, no AI generation. Read the draft first: stored questions expose stable question_N ids. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Rewrite or reorder a draft round's questions
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_update_round_directionsSet one draft round's interviewer and/or candidate directions exactly as written — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_round_directions" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Set one draft round's interviewer and/or candidate directions exactly as written — deterministic, no AI generation. Provide at least one of the two direction fields. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Set a draft round's interviewer and candidate directions
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_update_roundsReplace draft interview rounds by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_rounds" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replace draft interview rounds by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation. A round updated in place keeps its id, so its questions and directions are preserved (not pruned). Optional source_stage {stage: interview_sequence, version} returns 409 when stale.
Annotations the server declares
- title: Rewrite or reorder draft interview rounds
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_update_skillsReplace draft job skills by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_update_skills" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replace draft job skills by id and/or reorder them with order (a complete permutation of resulting ids) — deterministic, no AI generation. Optional source_stage {stage: skills, version} returns 409 when stale.
Annotations the server declares
- title: Rewrite or reorder draft job skills
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_archiveArchive one interview plan.No findings
Why it is in this group
- The name "yardstick_interview_plans_archive" says "archive": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Archive one interview plan. Already-archived plans succeed without a write. A plan still attached to a job is refused — detach it from the job first.
Annotations the server declares
- title: Archive an interview plan
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_modify_active_bindBind an already-previewed interview-plan active modification with explicit approval metadata and matching idempotency key.No findings
Why it is in this group
- The name "yardstick_interview_plans_modify_active_bind" says "modify": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an already-previewed interview-plan active modification with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and edit a live interview plan
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_publish_bindBind an already-previewed interview-plan publish with explicit approval metadata and matching idempotency key.Can send data outNo findings
Why it is in this group
- The name "yardstick_interview_plans_publish_bind" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_interview_plans_publish_bind" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Bind an already-previewed interview-plan publish with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and publish an interview plan
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_cancelCancel a scheduled interview session, releasing the provider booking and invalidating its scheduling links.No findings
Why it is in this group
- The name "yardstick_interview_sessions_cancel" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel a scheduled interview session, releasing the provider booking and invalidating its scheduling links.
Annotations the server declares
- title: Cancel a scheduled interview
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_completeComplete an interview session for an explicit interviewer.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Complete an interview session for an explicit interviewer.
Annotations the server declares
- title: Complete an interview
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_interviewers_unassignUnassign an interviewer from an interview session.No findings
Why it is in this group
- The name "yardstick_interview_sessions_interviewers_unassign" says "unassign": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Unassign an interviewer from an interview session.
Annotations the server declares
- title: Remove an interviewer from an interview
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_scheduling_link_generateGenerate a scheduling link for an interview session.No findings
Why it is in this group
- The name "yardstick_interview_sessions_scheduling_link_generate" says "link": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Generate a scheduling link for an interview session.
Annotations the server declares
- title: Generate a candidate scheduling link
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_interview_sessions_scorecard_submitSubmit an interview-session scorecard with explicit ratings.No findings
Why it is in this group
- The name "yardstick_interview_sessions_scorecard_submit" says "submit": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Submit an interview-session scorecard with explicit ratings.
Annotations the server declares
- title: Submit an interview scorecard
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_startStart an interview session for an explicit interviewer.No findings
Why it is in this group
- The name "yardstick_interview_sessions_start" says "start": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Start an interview session for an explicit interviewer.
Annotations the server declares
- title: Start an interview
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_archive_bindBind an already-previewed job-posting archive with explicit approval metadata and matching idempotency key.No findings
Why it is in this group
- The name "yardstick_job_postings_archive_bind" says "archive": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an already-previewed job-posting archive with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and archive a job posting
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_archive_previewPreview job-posting archive approval requirements only; bind fields are rejected.1 finding
Why it is in this group
- The name "yardstick_job_postings_archive_preview" says "archive": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_job_postings_archive_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_job_postings_archive_preview" says "archive": a word for removing or ending something.
  What this check looks for
Description, as the server wrote it
Preview job-posting archive approval requirements only; bind fields are rejected.
Annotations the server declares
- title: Preview archiving a job posting (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_publish_bindBind an already-previewed job-posting publish with explicit approval metadata and matching idempotency key.Can send data outNo findings
Why it is in this group
- The name "yardstick_job_postings_publish_bind" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "yardstick_job_postings_publish_bind" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Bind an already-previewed job-posting publish with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and publish a job posting
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_updateUpdate a job posting with schema-bound public API fields.No findings
Why it is in this group
- The name "yardstick_job_postings_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update a job posting with schema-bound public API fields.
Annotations the server declares
- title: Update a job posting
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_archiveArchive one Job row only; linked job postings, applications, and interview plans are not mutated.No findings
Why it is in this group
- The name "yardstick_jobs_archive" says "archive": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Archive one Job row only; linked job postings, applications, and interview plans are not mutated.
Annotations the server declares
- title: Archive a job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_closeClose one Job row only; linked job postings, applications, and interview plans are not mutated.No findings
Why it is in this group
- The name "yardstick_jobs_close" says "close": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Close one Job row only; linked job postings, applications, and interview plans are not mutated.
Annotations the server declares
- title: Close a job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_detach_artifactClear the link between an artifact and a Job.No findings
Why it is in this group
- The name "yardstick_jobs_detach_artifact" says "detach": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Clear the link between an artifact and a Job. Idempotent when already unlinked. Requires jobs:write and the artifact's own write scope.
Annotations the server declares
- title: Unlink an item from a job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_updateUpdate one internal Job container with schema-bound public API fields.No findings
Why it is in this group
- The name "yardstick_jobs_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update one internal Job container with schema-bound public API fields.
Annotations the server declares
- title: Update a job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_people_updateUpdate one person with schema-bound public API fields.No findings
Why it is in this group
- The name "yardstick_people_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update one person with schema-bound public API fields.
Annotations the server declares
- title: Update a person
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_assign_to_jobAssign a pipeline to a job (jobs.pipeline_template_id) or clear it with pipeline_id: null.No findings
Why it is in this group
- The name "yardstick_pipelines_assign_to_job" says "assign": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Assign a pipeline to a job (jobs.pipeline_template_id) or clear it with pipeline_id: null. Pipeline validated by org; job resolved by org+mode.
Annotations the server declares
- title: Assign a hiring pipeline to a job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_reorder_stagesReorder all stages of a pipeline by supplying the complete stage id order.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Reorder all stages of a pipeline by supplying the complete stage id order. Constraint-safe; allowed for canonical stages.
Annotations the server declares
- title: Reorder hiring pipeline stages
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_stages_delete_bindBind an approved pipeline-stage delete with explicit approval metadata and a matching idempotency key.No findings
Why it is in this group
- The name "yardstick_pipelines_stages_delete_bind" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an approved pipeline-stage delete with explicit approval metadata and a matching idempotency key. Refuses while candidates remain.
Annotations the server declares
- title: Confirm and delete a hiring pipeline stage
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_stages_delete_previewPreview deleting a pipeline stage; returns the candidate-count impact and binding fields.1 finding
Why it is in this group
- The name "yardstick_pipelines_stages_delete_preview" says "delete": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_pipelines_stages_delete_preview" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_pipelines_stages_delete_preview" says "delete": a word for removing or ending something.
  What this check looks for
Description, as the server wrote it
Preview deleting a pipeline stage; returns the candidate-count impact and binding fields. Canonical default stages are rejected.
Annotations the server declares
- title: Preview deleting a hiring pipeline stage (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_stages_updateEdit a pipeline stage.No findings
Why it is in this group
- The name "yardstick_pipelines_stages_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Edit a pipeline stage. Canonical default stages allow display-name change only; slug/stage_kind/approval_scope/is_terminal are locked.
Annotations the server declares
- title: Edit a hiring pipeline stage
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_updateRename, re-describe, or toggle active for one pipeline template.No findings
Why it is in this group
- The name "yardstick_pipelines_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Rename, re-describe, or toggle active for one pipeline template.
Annotations the server declares
- title: Update a hiring pipeline
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_convert_bindBind an approved prospect conversion preview with explicit approval metadata and matching idempotency key.No findings
Why it is in this group
- The name "yardstick_prospects_convert_bind" says "convert": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Bind an approved prospect conversion preview with explicit approval metadata and matching idempotency key.
Annotations the server declares
- title: Confirm and convert a prospect into an application
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_updateUpdate bounded Talent CRM prospect relationship fields.No findings
Why it is in this group
- The name "yardstick_prospects_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update bounded Talent CRM prospect relationship fields.
Annotations the server declares
- title: Update a prospect
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_source_links_disableDisable a source/referral link so its public URL no longer stamps attribution.No findings
Why it is in this group
- The name "yardstick_source_links_disable" says "link": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Disable a source/referral link so its public URL no longer stamps attribution.
Annotations the server declares
- title: Disable a source or referral link
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
yardstick_talent_pool_members_removeRemove an active prospect membership from a Talent CRM pool.No findings
Why it is in this group
- The name "yardstick_talent_pool_members_remove" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove an active prospect membership from a Talent CRM pool.
Annotations the server declares
- title: Remove a prospect from a talent pool
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pools_updateUpdate bounded Talent CRM pool fields.No findings
Why it is in this group
- The name "yardstick_talent_pools_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update bounded Talent CRM pool fields.
Annotations the server declares
- title: Update a talent pool
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
yardstick_tasks_respondAnswer an assigned application or scorecard review.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Answer an assigned application or scorecard review. Recruiter questions require a note; send_to_recruiter shares a scorecard note with the recruiter.
Annotations the server declares
- title: Answer an assigned review task
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

yardstick_interview_plans_publish_previewPreview interview-plan publish approval requirements only; bind fields are rejected.Can send data outNo findings
Why it is in this group
- The name "yardstick_interview_plans_publish_preview" says "publish": a word for a change that another call does not undo.
What it can reach
- outboundThe name "yardstick_interview_plans_publish_preview" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Preview interview-plan publish approval requirements only; bind fields are rejected.
Annotations the server declares
- title: Preview publishing an interview plan (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_publish_previewPreview job-posting publish approval requirements only; bind fields are rejected.Can send data outNo findings
Why it is in this group
- The name "yardstick_job_postings_publish_preview" says "publish": a word for a change that another call does not undo.
What it can reach
- outboundThe name "yardstick_job_postings_publish_preview" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Preview job-posting publish approval requirements only; bind fields are rejected.
Annotations the server declares
- title: Preview publishing a job posting (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Changes things 62Creates or changes something that can be changed back.Claude Code: ask

yardstick_access_grants_createCreate a reasoned, revocable, audited access grant.No findings
Why it is in this group
- The name "yardstick_access_grants_create" says "create": a word for a change.
Description, as the server wrote it
Create a reasoned, revocable, audited access grant.
Annotations the server declares
- title: Grant someone access to a record (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_application_interview_sessions_ensureEnsure an application interview session for an explicit round id.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ensure an application interview session for an explicit round id.
Annotations the server declares
- title: Make sure an interview exists for a round
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_createCreate a recruiter or agent-sourced application for an existing person and job posting.No findings
Why it is in this group
- The name "yardstick_applications_create" says "create": a word for a change.
Description, as the server wrote it
Create a recruiter or agent-sourced application for an existing person and job posting.
Annotations the server declares
- title: Add an application
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_applications_decide_hiring_stepAdvance or hold a candidate on a step that waits on the hiring manager, or change that decision.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Advance or hold a candidate on a step that waits on the hiring manager, or change that decision. The hiring manager or a recruiter on the job may decide. Leave out interview_id to decide the latest such step. A note can go to the recruiter with send_to_recruiter.
Annotations the server declares
- title: Decide a hiring manager step
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_email_decision_previewPreview the candidate email decision for an application status change without mutating the application or drafts.Reads private dataReads text others write1 finding
Why it is in this group
- The name "yardstick_applications_email_decision_preview" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "yardstick_applications_email_decision_preview" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "yardstick_applications_email_decision_preview" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Findings
- Warn
  The server marks "yardstick_applications_email_decision_preview" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_email_decision_preview" says "preview": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview the candidate email decision for an application status change without mutating the application or drafts.
Annotations the server declares
- title: Preview the candidate email for a status change (nothing sent)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_status_email_poc_previewPreview the fixed applications-owned Interviewing to Offer status/email approval POC without mutating status or email state.Reads private dataReads text others write1 finding
Why it is in this group
- The name "yardstick_applications_status_email_poc_preview" says "status": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "yardstick_applications_status_email_poc_preview" says "status" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "yardstick_applications_status_email_poc_preview" says "status" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Findings
- Warn
  The server marks "yardstick_applications_status_email_poc_preview" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_status_email_poc_preview" says "status": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview the fixed applications-owned Interviewing to Offer status/email approval POC without mutating status or email state.
Annotations the server declares
- title: Preview the Offer status change and its candidate email (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_transition_previewPreview approval-required application transitions only; bind fields and direct-write targets are rejected.1 finding
Why it is in this group
- The name "yardstick_applications_transition_preview" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_applications_transition_preview" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_applications_transition_preview" says "preview": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview approval-required application transitions only; bind fields and direct-write targets are rejected. Optionally target a configured stage by id with pipeline_stage_id (status must match the stage's mapped status).
Annotations the server declares
- title: Preview an application status change (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_ats_imports_applyApply an approved ATS import preview with a preview_hash matching the stored dry-run.No findings
Why it is in this group
- The name "yardstick_ats_imports_apply" says "import": a word for a change.
Description, as the server wrote it
Apply an approved ATS import preview with a preview_hash matching the stored dry-run. Creates people/jobs/interview_plans(stub)/job_postings/applications with idempotent replay; never sends outreach, merges people, or deletes records.
Annotations the server declares
- title: Confirm and apply an ATS import
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_ats_imports_dry_runPreview a structured-row ATS import of candidates, jobs, and applications (source_kind: csv).No findings
Why it is in this group
- The name "yardstick_ats_imports_dry_run" says "import": a word for a change.
Description, as the server wrote it
Preview a structured-row ATS import of candidates, jobs, and applications (source_kind: csv). JSON rows only; no raw CSV/archive file reads, no application conversion side effects, and low-confidence stage/fuzzy matches require explicit apply decisions.
Annotations the server declares
- title: Preview an ATS import (no records written)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_ats_imports_readRead one ATS import dry-run/apply batch and its rows by public id.1 finding
Why it is in this group
- The name "yardstick_ats_imports_read" says "import": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_ats_imports_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_ats_imports_read" says "import": a word for a change.
  What this check looks for
Description, as the server wrote it
Read one ATS import dry-run/apply batch and its rows by public id.
Annotations the server declares
- title: Read an ATS import batch
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_copyCopy one hiring process rule to job_ids, or one pipeline rule to pipeline_ids.No findings
Why it is in this group
- The name "yardstick_automation_rules_copy" says "copy": a word for a change.
Description, as the server wrote it
Copy one hiring process rule to job_ids, or one pipeline rule to pipeline_ids. Matches steps by name or kind and position, stages by name or mapped status. Unmatched copies start off and require Pick a step or Pick a stage. Copies are independent user rules.
Annotations the server declares
- title: Copy a rule to jobs or pipelines
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_automation_rules_createCreate a named workflow automation rule with stage or step triggers, job scope, delivery mode, timing and a typed action.No findings
Why it is in this group
- The name "yardstick_automation_rules_create" says "create": a word for a change.
Description, as the server wrote it
Create a named workflow automation rule with stage or step triggers, job scope, delivery mode, timing and a typed action. Authoring executes no action.
Annotations the server declares
- title: Create a stage automation rule
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_automation_runs_listList workflow automation runs including public_state, reason, next_action, due_at and interview_session_id.1 finding
Why it is in this group
- The name "yardstick_automation_runs_list" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_automation_runs_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_automation_runs_list" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
List workflow automation runs including public_state, reason, next_action, due_at and interview_session_id. Filter by application-id or rule-id. Read-only; runs are system-written.
Annotations the server declares
- title: List stage automation runs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_starters_applyCopy reviewed rules into a job using chosen matches; keep unmatched rules off and existing rules intact.No findings
Why it is in this group
- The name "yardstick_automation_starters_apply" says "apply": a word for a change.
Description, as the server wrote it
Copy reviewed rules into a job using chosen matches; keep unmatched rules off and existing rules intact.
Annotations the server declares
- title: Copy automations into a job
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_automation_starters_createCreate a named organization starter from portable rule definitions.No findings
Why it is in this group
- The name "yardstick_automation_starters_create" says "create": a word for a change.
Description, as the server wrote it
Create a named organization starter from portable rule definitions.
Annotations the server declares
- title: Create an automation starter
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_automation_starters_save_jobSave a job’s automation rules as a named organization starter.No findings
Why it is in this group
- The name "yardstick_automation_starters_save_job" says "save": a word for a change.
Description, as the server wrote it
Save a job’s automation rules as a named organization starter.
Annotations the server declares
- title: Save job automations as a starter
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_built_in_agents_configure_previewPreview configuring a built-in agent (config is validated against the built-in agent's declared schema; enabled is a first-class key, so { enabled: false } is the off switch).1 finding
Why it is in this group
- The name "yardstick_built_in_agents_configure_preview" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_built_in_agents_configure_preview" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_built_in_agents_configure_preview" says "preview": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview configuring a built-in agent (config is validated against the built-in agent's declared schema; enabled is a first-class key, so { enabled: false } is the off switch). Side-effect free; pass config via --body-json.
Annotations the server declares
- title: Preview built-in-agent settings changes (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_enable_previewPreview enabling a built-in agent; returns the approval-required envelope stating exactly what starts happening (and what is never sent without you) plus binding fields.No findings
Why it is in this group
- The name "yardstick_built_in_agents_enable_preview" says "enable": a word for a change.
Description, as the server wrote it
Preview enabling a built-in agent; returns the approval-required envelope stating exactly what starts happening (and what is never sent without you) plus binding fields. Side-effect free.
Annotations the server declares
- title: Preview turning on a built-in agent (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_runsList the organization's built-in-agent run history as a flat work report.1 finding
Why it is in this group
- The name "yardstick_built_in_agents_runs" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_built_in_agents_runs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_built_in_agents_runs" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
List the organization's built-in-agent run history as a flat work report. Nightly screening reports scheduled-work counts and held, released, or invalidated review outputs; interview-kit preparation reports the scheduled week and count-only results. It never includes candidate, draft, recipient, kit, or provider details. delivery_unknown is not delivered and is not retried. Filterable by built-in-agent id. Read-only and mode-scoped.
Annotations the server declares
- title: List built-in-agent run history
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_departments_createCreate a Department through the public Yardstick API.No findings
Why it is in this group
- The name "yardstick_departments_create" says "create": a word for a change.
Description, as the server wrote it
Create a Department through the public Yardstick API.
Annotations the server declares
- title: Create a department (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_departments_invitations_createCreate a Department-scoped invitation without returning token material.No findings
Why it is in this group
- The name "yardstick_departments_invitations_create" says "create": a word for a change.
Description, as the server wrote it
Create a Department-scoped invitation without returning token material.
Annotations the server declares
- title: Invite someone to a department (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_departments_members_addAdd an existing person to a Department.No findings
Why it is in this group
- The name "yardstick_departments_members_add" says "add": a word for a change.
Description, as the server wrote it
Add an existing person to a Department.
Annotations the server declares
- title: Add a department member (confirm in Yardstick)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_createcreate an email.Can send data outNo findings
Why it is in this group
- The name "yardstick_email_templates_create" says "create": a word for a change.
What it can reach
- outboundThe name "yardstick_email_templates_create" says "create" and "email": it writes something other people read.
Description, as the server wrote it
create an email. Use email_type for a built-in type or custom template key.
Annotations the server declares
- title: Create a custom email
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_email_templates_duplicateduplicate an email.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
duplicate an email. Use email_type for a built-in type or custom template key.
Annotations the server declares
- title: Duplicate an email
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_email_templates_previewPreview an email for sample variables.Reads private dataReads text others write1 finding
Why it is in this group
- The name "yardstick_email_templates_preview" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "yardstick_email_templates_preview" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_templates_preview" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Findings
- Warn
  The server marks "yardstick_email_templates_preview" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_preview" says "preview": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview an email for sample variables.
Annotations the server declares
- title: Preview an email with sample data
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_preview_customizationPreview AI sample customization for an email without publishing.Reads private dataReads text others write1 finding
Why it is in this group
- The name "yardstick_email_templates_preview_customization" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "yardstick_email_templates_preview_customization" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_templates_preview_customization" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Findings
- Warn
  The server marks "yardstick_email_templates_preview_customization" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_preview_customization" says "preview": a word for reading.
  What this check looks for
Description, as the server wrote it
Preview AI sample customization for an email without publishing.
Annotations the server declares
- title: Preview AI customization for an email template (nothing published)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_validateValidate email subject, HTML, and text bodies.1 finding
Why it is in this group
- The name "yardstick_email_templates_validate" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_email_templates_validate" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_email_templates_validate" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate email subject, HTML, and text bodies.
Annotations the server declares
- title: Check an email for problems
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_add_competenciesAdd competencies to a draft exactly as written — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_add_competencies" says "add": a word for a change.
Description, as the server wrote it
Add competencies to a draft exactly as written — deterministic, no AI generation. Requires confirmed outcomes; the resulting stage must stay within 25 competencies. Optional source_stage {stage: competencies, version} returns 409 when stale.
Annotations the server declares
- title: Add competencies to an interview plan draft
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_add_questionsAdd questions to one draft round exactly as written — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_add_questions" says "add": a word for a change.
Description, as the server wrote it
Add questions to one draft round exactly as written — deterministic, no AI generation. Requires rounds; each round holds at most 50 questions. The first question edit on a round persists question_N ids for every question in that round. Optional source_stage {stage: questions_and_directions, version} returns 409 when stale.
Annotations the server declares
- title: Add questions to a draft interview round
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_add_roundsAdd interview rounds to a draft exactly as written — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_add_rounds" says "add": a word for a change.
Description, as the server wrote it
Add interview rounds to a draft exactly as written — deterministic, no AI generation. Requires skills; the resulting sequence must stay within 20 rounds. Optional source_stage {stage: interview_sequence, version} returns 409 when stale.
Annotations the server declares
- title: Add interview rounds to an interview plan draft
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_add_skillsAdd job skills to a draft exactly as written — deterministic, no AI generation.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_add_skills" says "add": a word for a change.
Description, as the server wrote it
Add job skills to a draft exactly as written — deterministic, no AI generation. Requires competencies; the resulting stage must stay within 50 skills. Optional source_stage {stage: skills, version} returns 409 when stale.
Annotations the server declares
- title: Add job skills to an interview plan draft
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_interview_plan_drafts_validateValidate an interview-plan draft without publishing it.1 finding
Why it is in this group
- The name "yardstick_interview_plan_drafts_validate" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_interview_plan_drafts_validate" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_interview_plan_drafts_validate" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate an interview-plan draft without publishing it.
Annotations the server declares
- title: Check an interview plan draft for problems
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_modify_active_previewPreview interview-plan active-modification approval requirements only; bind fields are rejected.No findings
Why it is in this group
- The name "yardstick_interview_plans_modify_active_preview" says "modify": a word for a change.
Description, as the server wrote it
Preview interview-plan active-modification approval requirements only; bind fields are rejected.
Annotations the server declares
- title: Preview editing a live interview plan (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_set_hiring_manager_decidesTurn on or off whether a plan step waits on the hiring manager's decision before the candidate moves on.No findings
Why it is in this group
- The name "yardstick_interview_plans_set_hiring_manager_decides" says "set": a word for a change.
Description, as the server wrote it
Turn on or off whether a plan step waits on the hiring manager's decision before the candidate moves on. Only workflow managers on an open job can change it.
Annotations the server declares
- title: Set whether the hiring manager decides a step
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_unarchiveRestore one archived interview plan.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Restore one archived interview plan. Plans that are already live succeed without a write. If the plan's job has since acquired another live plan, the restore is refused and names that plan.
Annotations the server declares
- title: Restore an archived interview plan
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_interviewers_assignAssign an interviewer to an interview session.No findings
Why it is in this group
- The name "yardstick_interview_sessions_interviewers_assign" says "assign": a word for a change.
Description, as the server wrote it
Assign an interviewer to an interview session. Email notification is attempted by default; set notify_interviewer to false to opt out. The response reports the safe interviewer_email outcome.
Annotations the server declares
- title: Assign an interviewer to an interview
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_readinessRead interview-session scheduling readiness.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_interview_sessions_readiness" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "read": a word for reading.
  What this check looks for
Description, as the server wrote it
Read interview-session scheduling readiness.
Annotations the server declares
- title: Check interview scheduling readiness
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_createCreate a draft job posting through the public Yardstick API.No findings
Why it is in this group
- The name "yardstick_job_postings_create" says "create": a word for a change.
Description, as the server wrote it
Create a draft job posting through the public Yardstick API.
Annotations the server declares
- title: Create a draft job posting
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_job_postings_validateValidate a draft job posting without mutating it.1 finding
Why it is in this group
- The name "yardstick_job_postings_validate" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_job_postings_validate" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_job_postings_validate" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate a draft job posting without mutating it.
Annotations the server declares
- title: Check a draft job posting for problems
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_attach_artifactLink an existing interview plan, job posting, or application to a Job.No findings
Why it is in this group
- The name "yardstick_jobs_attach_artifact" says "attach": a word for a change.
Description, as the server wrote it
Link an existing interview plan, job posting, or application to a Job. Idempotent when already linked to the same Job; conflicts when linked elsewhere. Requires jobs:write and the artifact's own write scope.
Annotations the server declares
- title: Link an item to a job
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_createCreate an internal Job container without mutating job postings, applications, or interview plans.No findings
Why it is in this group
- The name "yardstick_jobs_create" says "create": a word for a change.
Description, as the server wrote it
Create an internal Job container without mutating job postings, applications, or interview plans.
Annotations the server declares
- title: Create a job
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_opportunities_deep_linkCreate a public deep link for an opportunity workflow view.No findings
Why it is in this group
- The name "yardstick_opportunities_deep_link" says "link": a word for a change.
Description, as the server wrote it
Create a public deep link for an opportunity workflow view.
Annotations the server declares
- title: Get a link that opens an opportunity in Yardstick
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_opportunities_next_actionRead the next action state for an opportunity without mutating it.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "yardstick_opportunities_next_action" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "read": a word for reading.
  What this check looks for
Description, as the server wrote it
Read the next action state for an opportunity without mutating it.
Annotations the server declares
- title: Check the next action on an opportunity
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_people_createCreate a person through the public Yardstick API.Can send data outNo findings
Why it is in this group
- The name "yardstick_people_create" says "create": a word for a change.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Create a person through the public Yardstick API.
Annotations the server declares
- title: Add a person
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_people_documents_download_urlMint a signed download URL for one person document.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Mint a signed download URL for one person document. Read-only. The URL expires in 5 minutes and is a bearer link: do not log or share it. Takes per_ and pdoc_ display ids.
Annotations the server declares
- title: Get a person document download link
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_assign_to_job_previewPreview the job's stages in use, candidate counts and suggested same-name mapping before changing its pipeline.1 finding
Why it is in this group
- The name "yardstick_pipelines_assign_to_job_preview" says "assign": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_pipelines_assign_to_job_preview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_pipelines_assign_to_job_preview" says "assign": a word for a change.
  What this check looks for
Description, as the server wrote it
Preview the job's stages in use, candidate counts and suggested same-name mapping before changing its pipeline. Makes no changes.
Annotations the server declares
- title: Preview assigning a hiring pipeline to a job
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_cloneClone a pipeline and its stages.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Clone a pipeline and its stages. Set copy_rules to copy its workflow rules too (requires automation_rules:write). Returns rules_copied.
Annotations the server declares
- title: Clone a hiring pipeline
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_pipelines_createCreate a custom pipeline template with optional inline stages.No findings
Why it is in this group
- The name "yardstick_pipelines_create" says "create": a word for a change.
Description, as the server wrote it
Create a custom pipeline template with optional inline stages. Does not affect the org default pipeline or candidate tracking.
Annotations the server declares
- title: Create a hiring pipeline
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_pipelines_stages_createAppend (or insert at a position) a stage to a pipeline with a kind and optional approval scope.No findings
Why it is in this group
- The name "yardstick_pipelines_stages_create" says "create": a word for a change.
Description, as the server wrote it
Append (or insert at a position) a stage to a pipeline with a kind and optional approval scope.
Annotations the server declares
- title: Add a stage to a hiring pipeline
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_prospect_activities_createCreate a bounded internal prospect activity note or touchpoint.No findings
Why it is in this group
- The name "yardstick_prospect_activities_create" says "create": a word for a change.
Description, as the server wrote it
Create a bounded internal prospect activity note or touchpoint.
Annotations the server declares
- title: Log prospect activity
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_prospect_imports_applyApply an approved Prospect CRM import preview with preview_hash and explicit row decisions for advisory matches.No findings
Why it is in this group
- The name "yardstick_prospect_imports_apply" says "import": a word for a change.
Description, as the server wrote it
Apply an approved Prospect CRM import preview with preview_hash and explicit row decisions for advisory matches.
Annotations the server declares
- title: Confirm and apply a prospect import
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospect_imports_dry_runPreview a structured-row Prospect CRM import.No findings
Why it is in this group
- The name "yardstick_prospect_imports_dry_run" says "import": a word for a change.
Description, as the server wrote it
Preview a structured-row Prospect CRM import. JSON rows only; no raw CSV/resume file reads, outreach, application conversion, source ranking, or silent person merge.
Annotations the server declares
- title: Preview a prospect import (no records written)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospect_imports_readRead one Prospect CRM import dry-run/apply batch by public id.1 finding
Why it is in this group
- The name "yardstick_prospect_imports_read" says "import": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_prospect_imports_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_prospect_imports_read" says "import": a word for a change.
  What this check looks for
Description, as the server wrote it
Read one Prospect CRM import dry-run/apply batch by public id.
Annotations the server declares
- title: Read a prospect import batch
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_convert_previewPreview conversion of one Prospect into one canonical Application; bind fields are rejected and no outreach/import/merge occurs.No findings
Why it is in this group
- The name "yardstick_prospects_convert_preview" says "convert": a word for a change.
Description, as the server wrote it
Preview conversion of one Prospect into one canonical Application; bind fields are rejected and no outreach/import/merge occurs.
Annotations the server declares
- title: Preview converting a prospect into an application (nothing changed yet)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_createCreate Talent CRM prospect relationship state for an existing person.No findings
Why it is in this group
- The name "yardstick_prospects_create" says "create": a word for a change.
Description, as the server wrote it
Create Talent CRM prospect relationship state for an existing person.
Annotations the server declares
- title: Add a prospect
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_prospects_outreach_create_draftCreate a pending review prospect outreach email draft.No findings
Why it is in this group
- The name "yardstick_prospects_outreach_create_draft" says "create": a word for a change.
Description, as the server wrote it
Create a pending review prospect outreach email draft. Sending stays on email draft send and requires communications:send.
Annotations the server declares
- title: Draft a prospect outreach email for review
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_source_links_createCreate an opaque source/referral link for a published job posting.No findings
Why it is in this group
- The name "yardstick_source_links_create" says "link": a word for a change.
Description, as the server wrote it
Create an opaque source/referral link for a published job posting. Raw source_token is returned only in the create response; reads return token_hint, and active token-bearing links also return public_url.
Annotations the server declares
- title: Create a source or referral link
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_source_links_listList source/referral attribution links without raw token material or source quality ranking.1 finding
Why it is in this group
- The name "yardstick_source_links_list" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_source_links_list" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_source_links_list" says "link": a word for a change.
  What this check looks for
Description, as the server wrote it
List source/referral attribution links without raw token material or source quality ranking.
Annotations the server declares
- title: List source and referral links
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_source_links_readRead one source/referral attribution link by public id without raw token material.1 finding
Why it is in this group
- The name "yardstick_source_links_read" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "yardstick_source_links_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "yardstick_source_links_read" says "link": a word for a change.
  What this check looks for
Description, as the server wrote it
Read one source/referral attribution link by public id without raw token material.
Annotations the server declares
- title: Read a source or referral link
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pool_members_addAdd an existing prospect to a Talent CRM pool.No findings
Why it is in this group
- The name "yardstick_talent_pool_members_add" says "add": a word for a change.
Description, as the server wrote it
Add an existing prospect to a Talent CRM pool.
Annotations the server declares
- title: Add a prospect to a talent pool
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pools_createCreate a Talent CRM pool.No findings
Why it is in this group
- The name "yardstick_talent_pools_create" says "create": a word for a change.
Description, as the server wrote it
Create a Talent CRM pool.
Annotations the server declares
- title: Create a talent pool
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
yardstick_tasks_deep_linkCreate a public task deep link for a caller-supplied task id.No findings
Why it is in this group
- The name "yardstick_tasks_deep_link" says "link": a word for a change.
Description, as the server wrote it
Create a public task deep link for a caller-supplied task id.
Annotations the server declares
- title: Get a link that opens a task in Yardstick
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 63Looks things up and changes nothing.Claude Code: allow

yardstick_access_grants_listList explicit access grants visible to the current principal.No findings
Why it is in this group
- The name "yardstick_access_grants_list" says "list": a word for reading.
Description, as the server wrote it
List explicit access grants visible to the current principal.
Annotations the server declares
- title: List access grants
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_access_grants_readRead one explicit access grant by public id.No findings
Why it is in this group
- The name "yardstick_access_grants_read" says "read": a word for reading.
Description, as the server wrote it
Read one explicit access grant by public id.
Annotations the server declares
- title: Read an access grant
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_application_interview_sessions_listList interview sessions for an application.No findings
Why it is in this group
- The name "yardstick_application_interview_sessions_list" says "list": a word for reading.
Description, as the server wrote it
List interview sessions for an application.
Annotations the server declares
- title: List interviews for an application
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_hiring_step_decisionRead where the hiring manager's decision stands on the candidate's latest step that waits on one: advanced, held, waiting, or none.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read where the hiring manager's decision stands on the candidate's latest step that waits on one: advanced, held, waiting, or none.
Annotations the server declares
- title: Read the hiring manager decision
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_listList application person + Job attachments visible to the current principal.No findings
Why it is in this group
- The name "yardstick_applications_list" says "list": a word for reading.
Description, as the server wrote it
List application person + Job attachments visible to the current principal. Filter by --job-id to find candidates for a role, and by --hiring-manager-decision (advanced, held or waiting) for where the hiring manager's decision stands.
Annotations the server declares
- title: List applications
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_applications_readRead one application person + Job attachment by public id.No findings
Why it is in this group
- The name "yardstick_applications_read" says "read": a word for reading.
Description, as the server wrote it
Read one application person + Job attachment by public id.
Annotations the server declares
- title: Read an application
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_audit_log_listList public Yardstick audit log entries visible to the current principal.No findings
Why it is in this group
- The name "yardstick_audit_log_list" says "log": a word for reading.
Description, as the server wrote it
List public Yardstick audit log entries visible to the current principal.
Annotations the server declares
- title: List audit log entries
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_listList all job and pipeline rules.No findings
Why it is in this group
- The name "yardstick_automation_rules_list" says "list": a word for reading.
Description, as the server wrote it
List all job and pipeline rules. Filter by job_id (null for pipeline rules), department_id, pipeline_id, trigger, email or is_active. Job and department filters include inherited pipeline rules; pipeline filters also include hiring-step rules on jobs using that pipeline.
Annotations the server declares
- title: List stage automation rules
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_previewDry-run preview: resolve the active rules + their resolved action params for a sample application entering/leaving a stage.No findings
Why it is in this group
- The name "yardstick_automation_rules_preview" says "preview": a word for reading.
Description, as the server wrote it
Dry-run preview: resolve the active rules + their resolved action params for a sample application entering/leaving a stage. INERT — mints no scheduling link, creates no task, sends no email; executes nothing.
Annotations the server declares
- title: Preview which automations a stage change would fire (runs nothing)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_preview_rulePreview a saved workflow rule for a real application: recipients, sender, rendered email, scheduling links and missing prerequisites.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_automation_rules_preview_rule" says "preview": a word for reading.
What it can reach
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Preview a saved workflow rule for a real application: recipients, sender, rendered email, scheduling links and missing prerequisites. Executes no action.
Annotations the server declares
- title: Preview a saved workflow rule (runs nothing)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_rules_readRead one automation rule by public id (its trigger, typed action, target stage, and is_active state).No findings
Why it is in this group
- The name "yardstick_automation_rules_read" says "read": a word for reading.
Description, as the server wrote it
Read one automation rule by public id (its trigger, typed action, target stage, and is_active state).
Annotations the server declares
- title: Read a stage automation rule
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_starters_listList your organization’s saved automation starters.No findings
Why it is in this group
- The name "yardstick_automation_starters_list" says "list": a word for reading.
Description, as the server wrote it
List your organization’s saved automation starters.
Annotations the server declares
- title: List automation starters
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_automation_starters_previewPreview copying a starter or job’s rules, including step and stage matches and unmatched rules.No findings
Why it is in this group
- The name "yardstick_automation_starters_preview" says "preview": a word for reading.
Description, as the server wrote it
Preview copying a starter or job’s rules, including step and stage matches and unmatched rules.
Annotations the server declares
- title: Preview copying automations into a job
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_listList the built-in-agent catalog with each built-in agent's current status, explicit defaults or disabled state, and latest work summary.No findings
Why it is in this group
- The name "yardstick_built_in_agents_list" says "list": a word for reading.
Description, as the server wrote it
List the built-in-agent catalog with each built-in agent's current status, explicit defaults or disabled state, and latest work summary.
Annotations the server declares
- title: List built-in agents
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_built_in_agents_readRead one built-in agent by catalog id (for example scorecard-chaser, nightly-screening, or interview-kit-prep): what it does, what it never does without you, current status, and la…No findings
Why it is in this group
- The name "yardstick_built_in_agents_read" says "read": a word for reading.
Description, as the server wrote it
Read one built-in agent by catalog id (for example scorecard-chaser, nightly-screening, or interview-kit-prep): what it does, what it never does without you, current status, and latest work summary.
Annotations the server declares
- title: Read a built-in agent
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_decision_brief_readRead the decision brief for an application.No findings
Why it is in this group
- The name "yardstick_decision_brief_read" says "read": a word for reading.
Description, as the server wrote it
Read the decision brief for an application.
Annotations the server declares
- title: Read a hiring decision brief
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_departments_invitations_listList redacted Department invitation views.No findings
Why it is in this group
- The name "yardstick_departments_invitations_list" says "list": a word for reading.
Description, as the server wrote it
List redacted Department invitation views.
Annotations the server declares
- title: List department invitations
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_departments_listList Departments visible to the current principal.No findings
Why it is in this group
- The name "yardstick_departments_list" says "list": a word for reading.
Description, as the server wrote it
List Departments visible to the current principal.
Annotations the server declares
- title: List departments
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_departments_members_listList Department members for an authorized Department.No findings
Why it is in this group
- The name "yardstick_departments_members_list" says "list": a word for reading.
Description, as the server wrote it
List Department members for an authorized Department.
Annotations the server declares
- title: List department members
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_departments_readRead one Department by public id.No findings
Why it is in this group
- The name "yardstick_departments_read" says "read": a word for reading.
Description, as the server wrote it
Read one Department by public id.
Annotations the server declares
- title: Read a department
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_automation_settings_readRead candidate email automation settings.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_automation_settings_read" says "read": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_automation_settings_read" says "read" and "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_automation_settings_read" says "read" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read candidate email automation settings.
Annotations the server declares
- title: Read email automation settings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_historyRead candidate email draft history and provenance.Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_drafts_history" says "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_drafts_history" says "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read candidate email draft history and provenance.
Annotations the server declares
- title: Read candidate email draft history
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_listList candidate email drafts with optional status and email-type filters.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_drafts_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_drafts_list" says "list" and "email": it reads mail.
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_drafts_list" says "list" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List candidate email drafts with optional status and email-type filters.
Annotations the server declares
- title: List candidate email drafts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_previewRead rendered preview content for a candidate email draft.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_drafts_preview" says "preview": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_drafts_preview" says "preview" and "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_drafts_preview" says "preview" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read rendered preview content for a candidate email draft.
Annotations the server declares
- title: Preview a candidate email draft
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_drafts_readRead a redacted candidate email draft.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_drafts_read" says "read": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_drafts_read" says "read" and "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_drafts_read" says "read" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read a redacted candidate email draft.
Annotations the server declares
- title: Read a candidate email draft
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_sender_connections_listList redacted sender provider connection state.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_sender_connections_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_sender_connections_list" says "list" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_sender_connections_list" says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List redacted sender provider connection state.
Annotations the server declares
- title: List email sender connections
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_sender_defaults_listList candidate email sender defaults.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_sender_defaults_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_sender_defaults_list" says "list" and "email": it reads mail.
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_sender_defaults_list" says "list" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List candidate email sender defaults.
Annotations the server declares
- title: List default email senders
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_sender_settings_readRead redacted email sender settings with sanitized queue diagnostics.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_sender_settings_read" says "read": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_sender_settings_read" says "read" and "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_sender_settings_read" says "read" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read redacted email sender settings with sanitized queue diagnostics.
Annotations the server declares
- title: Read email sender settings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_template_versions_listList immutable email versions.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_template_versions_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_template_versions_list" says "list" and "email": it reads mail.
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_template_versions_list" says "list" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List immutable email versions.
Annotations the server declares
- title: List email template versions
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_listList Candidate and Internal emails with automation usage counts.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_templates_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_templates_list" says "list" and "email": it reads mail.
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_templates_list" says "list" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List Candidate and Internal emails with automation usage counts.
Annotations the server declares
- title: List candidate and internal emails
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_email_templates_readRead an email by built-in type or custom template key.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_email_templates_read" says "read": a word for reading.
What it can reach
- private-dataThe name "yardstick_email_templates_read" says "read" and "email": it reads mail.
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe name "yardstick_email_templates_read" says "read" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Read an email by built-in type or custom template key.
Annotations the server declares
- title: Read an email
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_events_listList public Yardstick API events visible to the current principal.No findings
Why it is in this group
- The name "yardstick_events_list" says "list": a word for reading.
Description, as the server wrote it
List public Yardstick API events visible to the current principal.
Annotations the server declares
- title: List API events
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_identityReturn the current Yardstick API principal context.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Return the current Yardstick API principal context.
Annotations the server declares
- title: Read the current API identity
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_integrations_workspace_health_readRead sanitized Workspace integration health diagnostics.No findings
Why it is in this group
- The name "yardstick_integrations_workspace_health_read" says "read": a word for reading.
Description, as the server wrote it
Read sanitized Workspace integration health diagnostics.
Annotations the server declares
- title: Check workspace integration health
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_listList interview-plan drafts, newest first.No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_list" says "list": a word for reading.
Description, as the server wrote it
List interview-plan drafts, newest first. Optional job_id narrows the list to one job and takes a job_ public display id. Use this to find an ipd_ draft id again after an interrupted builder session.
Annotations the server declares
- title: List interview plan drafts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plan_drafts_readRead one interview-plan draft in full: every stage checkpoint (outcomes, competencies, job skills, interview sequence, questions and directions), stage_versions for source_stage pr…No findings
Why it is in this group
- The name "yardstick_interview_plan_drafts_read" says "read": a word for reading.
Description, as the server wrote it
Read one interview-plan draft in full: every stage checkpoint (outcomes, competencies, job skills, interview sequence, questions and directions), stage_versions for source_stage preconditions, status, and source metadata. Question ids are always present (question_N fallback), so edits can target them directly.
Annotations the server declares
- title: Read an interview plan draft
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_listList published interview plans, newest first.No findings
Why it is in this group
- The name "yardstick_interview_plans_list" says "list": a word for reading.
Description, as the server wrote it
List published interview plans, newest first. Optional job_id narrows the list to one job and takes a job_ public display id. Use this to find an interview plan id when you only hold a job id.
Annotations the server declares
- title: List published interview plans
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_plans_readRead one interview plan by public id.No findings
Why it is in this group
- The name "yardstick_interview_plans_read" says "read": a word for reading.
Description, as the server wrote it
Read one interview plan by public id.
Annotations the server declares
- title: Read a published interview plan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_available_interviewers_listList organization members who can be assigned as interviewers, newest membership first.No findings
Why it is in this group
- The name "yardstick_interview_sessions_available_interviewers_list" says "list": a word for reading.
Description, as the server wrote it
List organization members who can be assigned as interviewers, newest membership first. Use this to pick a usr_ public display id before assigning an interviewer.
Annotations the server declares
- title: List members assignable as interviewers
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_interviewers_listList interviewers assigned to an interview session.No findings
Why it is in this group
- The name "yardstick_interview_sessions_interviewers_list" says "list": a word for reading.
Description, as the server wrote it
List interviewers assigned to an interview session.
Annotations the server declares
- title: List interviewers on an interview
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_interview_sessions_readRead one interview session by public id.No findings
Why it is in this group
- The name "yardstick_interview_sessions_read" says "read": a word for reading.
Description, as the server wrote it
Read one interview session by public id.
Annotations the server declares
- title: Read an interview
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_listList job postings visible to the current principal.No findings
Why it is in this group
- The name "yardstick_job_postings_list" says "list": a word for reading.
Description, as the server wrote it
List job postings visible to the current principal.
Annotations the server declares
- title: List job postings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_job_postings_readRead one job posting by public id.No findings
Why it is in this group
- The name "yardstick_job_postings_read" says "read": a word for reading.
Description, as the server wrote it
Read one job posting by public id.
Annotations the server declares
- title: Read a job posting
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_listList internal Job containers visible to the current principal.No findings
Why it is in this group
- The name "yardstick_jobs_list" says "list": a word for reading.
Description, as the server wrote it
List internal Job containers visible to the current principal.
Annotations the server declares
- title: List jobs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_prospect_matchesList deterministic Talent CRM prospect matches for one Job.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it
List deterministic Talent CRM prospect matches for one Job. Read-only; includes evidence, caveats, and blocked lifecycle states without outreach, conversion, import, or AI ranking.
Annotations the server declares
- title: List prospect matches for a job
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_jobs_readRead one internal Job container by public id.No findings
Why it is in this group
- The name "yardstick_jobs_read" says "read": a word for reading.
Description, as the server wrote it
Read one internal Job container by public id.
Annotations the server declares
- title: Read a job
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_opportunities_listList read-only opportunity workflow views visible to the current principal.No findings
Why it is in this group
- The name "yardstick_opportunities_list" says "list": a word for reading.
Description, as the server wrote it
List read-only opportunity workflow views visible to the current principal.
Annotations the server declares
- title: List opportunities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_opportunities_readRead one read-only opportunity workflow view by public id.No findings
Why it is in this group
- The name "yardstick_opportunities_read" says "read": a word for reading.
Description, as the server wrote it
Read one read-only opportunity workflow view by public id.
Annotations the server declares
- title: Read an opportunity
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_people_documents_listList the documents attached to a person (resumes and other files).Reads private dataNo findings
Why it is in this group
- The name "yardstick_people_documents_list" says "list": a word for reading.
What it can reach
- private-dataThe name "yardstick_people_documents_list" says "list" and "document": it reads documents.
- private-dataThe description's first sentence says "list" and "document": it reads documents.
Description, as the server wrote it
List the documents attached to a person (resumes and other files). Archived documents are excluded unless include_archived is true. Takes a per_ display id and returns pdoc_ display ids.
Annotations the server declares
- title: List documents for a person
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_people_listList people visible to the current principal.No findings
Why it is in this group
- The name "yardstick_people_list" says "list": a word for reading.
Description, as the server wrote it
List people visible to the current principal. Pass email to find the exact person behind a candidate_email_conflict.
Annotations the server declares
- title: List people
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_people_readRead one person by public id.No findings
Why it is in this group
- The name "yardstick_people_read" says "read": a word for reading.
Description, as the server wrote it
Read one person by public id.
Annotations the server declares
- title: Read a person
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_listList the organization's pipeline templates with their ordered stages.No findings
Why it is in this group
- The name "yardstick_pipelines_list" says "list": a word for reading.
Description, as the server wrote it
List the organization's pipeline templates with their ordered stages. Canonical default stages are flagged canonical_locked.
Annotations the server declares
- title: List hiring pipelines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_pipelines_readRead one pipeline template and its ordered stages by public id.No findings
Why it is in this group
- The name "yardstick_pipelines_read" says "read": a word for reading.
Description, as the server wrote it
Read one pipeline template and its ordered stages by public id.
Annotations the server declares
- title: Read a hiring pipeline
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospect_activities_listList bounded activity records for one Talent CRM prospect.No findings
Why it is in this group
- The name "yardstick_prospect_activities_list" says "list": a word for reading.
Description, as the server wrote it
List bounded activity records for one Talent CRM prospect.
Annotations the server declares
- title: List prospect activity
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_listList active Talent CRM prospects visible to the current principal.No findings
Why it is in this group
- The name "yardstick_prospects_list" says "list": a word for reading.
Description, as the server wrote it
List active Talent CRM prospects visible to the current principal.
Annotations the server declares
- title: List prospects
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_outreach_previewPreview a one-off prospect outreach draft without creating a draft, sending email, enrolling a sequence, or creating an application.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "yardstick_prospects_outreach_preview" says "preview": a word for reading.
What it can reach
- private-dataThe description's first sentence says "preview" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "preview" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Preview a one-off prospect outreach draft without creating a draft, sending email, enrolling a sequence, or creating an application.
Annotations the server declares
- title: Preview prospect outreach copy (nothing saved or sent)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_prospects_readRead one Talent CRM prospect by public id.No findings
Why it is in this group
- The name "yardstick_prospects_read" says "read": a word for reading.
Description, as the server wrote it
Read one Talent CRM prospect by public id.
Annotations the server declares
- title: Read a prospect
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_reporting_searchSearch redacted recruiting reporting summaries through the public reporting API.No findings
Why it is in this group
- The name "yardstick_reporting_search" says "search": a word for reading.
Description, as the server wrote it
Search redacted recruiting reporting summaries through the public reporting API.
Annotations the server declares
- title: Search recruiting reports
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pool_members_listList active prospect memberships for one Talent CRM pool.No findings
Why it is in this group
- The name "yardstick_talent_pool_members_list" says "list": a word for reading.
Description, as the server wrote it
List active prospect memberships for one Talent CRM pool.
Annotations the server declares
- title: List talent pool members
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pools_listList Talent CRM pools visible to the current principal.No findings
Why it is in this group
- The name "yardstick_talent_pools_list" says "list": a word for reading.
Description, as the server wrote it
List Talent CRM pools visible to the current principal. Archived pools are excluded unless include_archived is true.
Annotations the server declares
- title: List talent pools
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_pools_readRead one Talent CRM pool by public id.No findings
Why it is in this group
- The name "yardstick_talent_pools_read" says "read": a word for reading.
Description, as the server wrote it
Read one Talent CRM pool by public id.
Annotations the server declares
- title: Read a talent pool
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_talent_searchSearch all authorized recruiting records by literal keywords across names, notes, activities and current parsed résumés.Reads private dataNo findings
Why it is in this group
- The name "yardstick_talent_search" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "note": it reads notes.
Description, as the server wrote it
Search all authorized recruiting records by literal keywords across names, notes, activities and current parsed résumés. All words must match; PhD punctuation is normalized.
Annotations the server declares
- title: Search Talent
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
yardstick_tasks_listList Yardstick tasks visible to the current principal.No findings
Why it is in this group
- The name "yardstick_tasks_list" says "list": a word for reading.
Description, as the server wrote it
List Yardstick tasks visible to the current principal.
Annotations the server declares
- title: List tasks
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

4680 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 13 outbound tools breaks every one.

Reads private data20: Reads files, mail, messages, databases, secrets, calendars or repositories.; yardstick_applications_email_decision_preview
yardstick_applications_status_email_poc_bind
yardstick_applications_status_email_poc_preview
yardstick_automation_rules_preview_rule
yardstick_email_automation_settings_read
yardstick_email_drafts_history
yardstick_email_drafts_list
yardstick_email_drafts_preview
yardstick_email_drafts_read
yardstick_email_sender_connections_list
yardstick_email_sender_defaults_list
yardstick_email_sender_settings_read
and 8 more
Reads text others write18: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; yardstick_applications_email_decision_preview
yardstick_applications_status_email_poc_bind
yardstick_applications_status_email_poc_preview
yardstick_automation_rules_preview_rule
yardstick_email_automation_settings_read
yardstick_email_drafts_history
yardstick_email_drafts_list
yardstick_email_drafts_preview
yardstick_email_drafts_read
yardstick_email_sender_connections_list
yardstick_email_sender_defaults_list
yardstick_email_sender_settings_read
and 6 more
Can send data out13: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; yardstick_applications_email_decision_apply
yardstick_email_automation_settings_update
yardstick_email_drafts_send
yardstick_email_drafts_update
yardstick_email_sender_defaults_set
yardstick_email_templates_create
yardstick_email_templates_publish
yardstick_email_templates_reset
yardstick_interview_plans_publish_bind
yardstick_interview_plans_publish_preview
yardstick_job_postings_publish_bind
yardstick_job_postings_publish_preview
and 1 more

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__yardstick__yardstick_applications_email_decision_apply",
      "mcp__yardstick__yardstick_email_automation_settings_update",
      "mcp__yardstick__yardstick_email_drafts_send",
      "mcp__yardstick__yardstick_email_drafts_update",
      "mcp__yardstick__yardstick_email_sender_defaults_set",
      "mcp__yardstick__yardstick_email_templates_create",
      "mcp__yardstick__yardstick_email_templates_publish",
      "mcp__yardstick__yardstick_email_templates_reset",
      "mcp__yardstick__yardstick_interview_plans_publish_bind",
      "mcp__yardstick__yardstick_interview_plans_publish_preview",
      "mcp__yardstick__yardstick_job_postings_publish_bind",
      "mcp__yardstick__yardstick_job_postings_publish_preview",
      "mcp__yardstick__yardstick_people_create"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 15:14 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 165
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://api.yardstick.team/.well-known/oauth-protected-resource/mcp
Authorization servers: https://api.yardstick.team/api-agent-auth
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: yes

HighThe whole server
The endpoint served tools/list without credentials, and the list has 165 tools that change things (91 destructive, 5 irreversible, 69 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://api.yardstick.team/mcp: tools/list returned 236 tools to an anonymous client, including yardstick_offers_update (destructive), yardstick_offers_cancel_revision (destructive), yardstick_offers_verification_policy_update (destructive), yardstick_offers_lifecycle_policy_update (destructive), yardstick_offers_countersignature_update (destructive) and 160 more
What this check looks for

Install

Pinned to version 0.6.11. Values in angle brackets are yours to fill in.

claude mcp add --transport http yardstick https://api.yardstick.team/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__yardstick__yardstick_identity",
      "mcp__yardstick__yardstick_tasks_list",
      "mcp__yardstick__yardstick_people_list",
      "mcp__yardstick__yardstick_people_read",
      "mcp__yardstick__yardstick_people_documents_list",
      "mcp__yardstick__yardstick_talent_search",
      "mcp__yardstick__yardstick_prospects_list",
      "mcp__yardstick__yardstick_prospects_read",
      "mcp__yardstick__yardstick_prospects_outreach_preview",
      "mcp__yardstick__yardstick_prospect_activities_list",
      "mcp__yardstick__yardstick_talent_pools_list",
      "mcp__yardstick__yardstick_talent_pools_read",
      "mcp__yardstick__yardstick_talent_pool_members_list",
      "mcp__yardstick__yardstick_applications_list",
      "mcp__yardstick__yardstick_applications_read",
      "mcp__yardstick__yardstick_applications_hiring_step_decision",
      "mcp__yardstick__yardstick_decision_brief_read",
      "mcp__yardstick__yardstick_email_drafts_list",
      "mcp__yardstick__yardstick_email_drafts_read",
      "mcp__yardstick__yardstick_email_drafts_preview",
      "mcp__yardstick__yardstick_email_drafts_history",
      "mcp__yardstick__yardstick_email_automation_settings_read",
      "mcp__yardstick__yardstick_email_sender_settings_read",
      "mcp__yardstick__yardstick_email_sender_connections_list",
      "mcp__yardstick__yardstick_email_sender_defaults_list",
      "mcp__yardstick__yardstick_integrations_workspace_health_read",
      "mcp__yardstick__yardstick_email_templates_list",
      "mcp__yardstick__yardstick_email_templates_read",
      "mcp__yardstick__yardstick_email_template_versions_list",
      "mcp__yardstick__yardstick_application_interview_sessions_list",
      "mcp__yardstick__yardstick_opportunities_list",
      "mcp__yardstick__yardstick_opportunities_read",
      "mcp__yardstick__yardstick_reporting_search",
      "mcp__yardstick__yardstick_departments_list",
      "mcp__yardstick__yardstick_departments_read",
      "mcp__yardstick__yardstick_departments_members_list",
      "mcp__yardstick__yardstick_departments_invitations_list",
      "mcp__yardstick__yardstick_access_grants_list",
      "mcp__yardstick__yardstick_access_grants_read",
      "mcp__yardstick__yardstick_jobs_list",
      "mcp__yardstick__yardstick_jobs_read",
      "mcp__yardstick__yardstick_jobs_prospect_matches",
      "mcp__yardstick__yardstick_pipelines_list",
      "mcp__yardstick__yardstick_pipelines_read",
      "mcp__yardstick__yardstick_automation_rules_list",
      "mcp__yardstick__yardstick_automation_rules_read",
      "mcp__yardstick__yardstick_automation_rules_preview_rule",
      "mcp__yardstick__yardstick_automation_rules_preview",
      "mcp__yardstick__yardstick_automation_starters_list",
      "mcp__yardstick__yardstick_automation_starters_preview",
      "mcp__yardstick__yardstick_built_in_agents_list",
      "mcp__yardstick__yardstick_built_in_agents_read",
      "mcp__yardstick__yardstick_job_postings_list",
      "mcp__yardstick__yardstick_job_postings_read",
      "mcp__yardstick__yardstick_interview_plans_list",
      "mcp__yardstick__yardstick_interview_plans_read",
      "mcp__yardstick__yardstick_interview_plan_drafts_list",
      "mcp__yardstick__yardstick_interview_plan_drafts_read",
      "mcp__yardstick__yardstick_interview_sessions_read",
      "mcp__yardstick__yardstick_interview_sessions_interviewers_list",
      "mcp__yardstick__yardstick_interview_sessions_available_interviewers_list",
      "mcp__yardstick__yardstick_events_list",
      "mcp__yardstick__yardstick_audit_log_list"
    ],
    "ask": [
      "mcp__yardstick__yardstick_tasks_deep_link",
      "mcp__yardstick__yardstick_people_documents_download_url",
      "mcp__yardstick__yardstick_people_create",
      "mcp__yardstick__yardstick_prospects_create",
      "mcp__yardstick__yardstick_prospects_convert_preview",
      "mcp__yardstick__yardstick_prospects_outreach_create_draft",
      "mcp__yardstick__yardstick_prospect_imports_dry_run",
      "mcp__yardstick__yardstick_prospect_imports_read",
      "mcp__yardstick__yardstick_prospect_imports_apply",
      "mcp__yardstick__yardstick_ats_imports_dry_run",
      "mcp__yardstick__yardstick_ats_imports_read",
      "mcp__yardstick__yardstick_ats_imports_apply",
      "mcp__yardstick__yardstick_source_links_list",
      "mcp__yardstick__yardstick_source_links_read",
      "mcp__yardstick__yardstick_source_links_create",
      "mcp__yardstick__yardstick_prospect_activities_create",
      "mcp__yardstick__yardstick_talent_pools_create",
      "mcp__yardstick__yardstick_talent_pool_members_add",
      "mcp__yardstick__yardstick_applications_create",
      "mcp__yardstick__yardstick_applications_decide_hiring_step",
      "mcp__yardstick__yardstick_applications_transition_preview",
      "mcp__yardstick__yardstick_applications_status_email_poc_preview",
      "mcp__yardstick__yardstick_applications_email_decision_preview",
      "mcp__yardstick__yardstick_email_templates_preview",
      "mcp__yardstick__yardstick_email_templates_validate",
      "mcp__yardstick__yardstick_email_templates_create",
      "mcp__yardstick__yardstick_email_templates_duplicate",
      "mcp__yardstick__yardstick_email_templates_preview_customization",
      "mcp__yardstick__yardstick_application_interview_sessions_ensure",
      "mcp__yardstick__yardstick_opportunities_next_action",
      "mcp__yardstick__yardstick_opportunities_deep_link",
      "mcp__yardstick__yardstick_departments_create",
      "mcp__yardstick__yardstick_departments_members_add",
      "mcp__yardstick__yardstick_departments_invitations_create",
      "mcp__yardstick__yardstick_access_grants_create",
      "mcp__yardstick__yardstick_jobs_create",
      "mcp__yardstick__yardstick_jobs_attach_artifact",
      "mcp__yardstick__yardstick_pipelines_create",
      "mcp__yardstick__yardstick_pipelines_clone",
      "mcp__yardstick__yardstick_pipelines_stages_create",
      "mcp__yardstick__yardstick_pipelines_assign_to_job_preview",
      "mcp__yardstick__yardstick_automation_rules_copy",
      "mcp__yardstick__yardstick_automation_runs_list",
      "mcp__yardstick__yardstick_automation_rules_create",
      "mcp__yardstick__yardstick_automation_starters_create",
      "mcp__yardstick__yardstick_automation_starters_save_job",
      "mcp__yardstick__yardstick_automation_starters_apply",
      "mcp__yardstick__yardstick_built_in_agents_runs",
      "mcp__yardstick__yardstick_built_in_agents_enable_preview",
      "mcp__yardstick__yardstick_built_in_agents_configure_preview",
      "mcp__yardstick__yardstick_job_postings_validate",
      "mcp__yardstick__yardstick_job_postings_create",
      "mcp__yardstick__yardstick_job_postings_publish_preview",
      "mcp__yardstick__yardstick_interview_plans_unarchive",
      "mcp__yardstick__yardstick_interview_plans_set_hiring_manager_decides",
      "mcp__yardstick__yardstick_interview_plan_drafts_add_competencies",
      "mcp__yardstick__yardstick_interview_plan_drafts_add_skills",
      "mcp__yardstick__yardstick_interview_plan_drafts_add_rounds",
      "mcp__yardstick__yardstick_interview_plan_drafts_add_questions",
      "mcp__yardstick__yardstick_interview_plan_drafts_validate",
      "mcp__yardstick__yardstick_interview_plans_publish_preview",
      "mcp__yardstick__yardstick_interview_plans_modify_active_preview",
      "mcp__yardstick__yardstick_interview_sessions_interviewers_assign",
      "mcp__yardstick__yardstick_interview_sessions_readiness"
    ],
    "deny": [
      "mcp__yardstick__yardstick_tasks_respond",
      "mcp__yardstick__yardstick_people_update",
      "mcp__yardstick__yardstick_prospects_convert_bind",
      "mcp__yardstick__yardstick_source_links_disable",
      "mcp__yardstick__yardstick_prospects_update",
      "mcp__yardstick__yardstick_talent_pools_update",
      "mcp__yardstick__yardstick_talent_pool_members_remove",
      "mcp__yardstick__yardstick_applications_update",
      "mcp__yardstick__yardstick_applications_decide",
      "mcp__yardstick__yardstick_applications_admit_candidate",
      "mcp__yardstick__yardstick_applications_undo_candidate_admission",
      "mcp__yardstick__yardstick_applications_transition_direct",
      "mcp__yardstick__yardstick_applications_transition_bind",
      "mcp__yardstick__yardstick_applications_archive_preview",
      "mcp__yardstick__yardstick_applications_archive_bind",
      "mcp__yardstick__yardstick_applications_status_email_poc_bind",
      "mcp__yardstick__yardstick_decision_brief_regenerate",
      "mcp__yardstick__yardstick_applications_email_decision_apply",
      "mcp__yardstick__yardstick_email_drafts_update",
      "mcp__yardstick__yardstick_email_drafts_send",
      "mcp__yardstick__yardstick_email_drafts_discard",
      "mcp__yardstick__yardstick_email_automation_settings_update",
      "mcp__yardstick__yardstick_email_sender_defaults_set",
      "mcp__yardstick__yardstick_email_templates_publish",
      "mcp__yardstick__yardstick_email_templates_reset",
      "mcp__yardstick__yardstick_email_templates_delete",
      "mcp__yardstick__yardstick_email_templates_rollback",
      "mcp__yardstick__yardstick_final_recommendation_record",
      "mcp__yardstick__yardstick_departments_update",
      "mcp__yardstick__yardstick_departments_members_set_lead",
      "mcp__yardstick__yardstick_departments_members_remove",
      "mcp__yardstick__yardstick_access_grants_revoke",
      "mcp__yardstick__yardstick_jobs_update",
      "mcp__yardstick__yardstick_jobs_close",
      "mcp__yardstick__yardstick_jobs_archive",
      "mcp__yardstick__yardstick_jobs_detach_artifact",
      "mcp__yardstick__yardstick_pipelines_update",
      "mcp__yardstick__yardstick_pipelines_stages_update",
      "mcp__yardstick__yardstick_pipelines_reorder_stages",
      "mcp__yardstick__yardstick_pipelines_stages_delete_preview",
      "mcp__yardstick__yardstick_pipelines_stages_delete_bind",
      "mcp__yardstick__yardstick_pipelines_assign_to_job",
      "mcp__yardstick__yardstick_automation_rules_bulk",
      "mcp__yardstick__yardstick_automation_runs_retry",
      "mcp__yardstick__yardstick_automation_rules_update",
      "mcp__yardstick__yardstick_automation_rules_delete",
      "mcp__yardstick__yardstick_automation_starters_rename",
      "mcp__yardstick__yardstick_automation_starters_delete",
      "mcp__yardstick__yardstick_built_in_agents_enable_bind",
      "mcp__yardstick__yardstick_built_in_agents_configure_bind",
      "mcp__yardstick__yardstick_job_postings_update",
      "mcp__yardstick__yardstick_job_postings_publish_bind",
      "mcp__yardstick__yardstick_job_postings_archive_preview",
      "mcp__yardstick__yardstick_job_postings_archive_bind",
      "mcp__yardstick__yardstick_interview_plans_archive",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_outcomes",
      "mcp__yardstick__yardstick_interview_plan_drafts_confirm_outcomes",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_competencies",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_skills",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_rounds",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_anchors",
      "mcp__yardstick__yardstick_interview_plan_drafts_generate_questions_directions",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_competencies",
      "mcp__yardstick__yardstick_interview_plan_drafts_delete_competencies",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_skills",
      "mcp__yardstick__yardstick_interview_plan_drafts_delete_skills",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_rounds",
      "mcp__yardstick__yardstick_interview_plan_drafts_delete_rounds",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_questions",
      "mcp__yardstick__yardstick_interview_plan_drafts_delete_questions",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_round_directions",
      "mcp__yardstick__yardstick_interview_plan_drafts_update_anchors",
      "mcp__yardstick__yardstick_interview_plan_drafts_delete_anchors",
      "mcp__yardstick__yardstick_interview_plan_drafts_clear_outcomes",
      "mcp__yardstick__yardstick_interview_plan_drafts_clear_competencies",
      "mcp__yardstick__yardstick_interview_plan_drafts_clear_job_skills",
      "mcp__yardstick__yardstick_interview_plan_drafts_clear_interview_sequence",
      "mcp__yardstick__yardstick_interview_plans_publish_bind",
      "mcp__yardstick__yardstick_interview_plans_modify_active_bind",
      "mcp__yardstick__yardstick_interview_sessions_interviewers_unassign",
      "mcp__yardstick__yardstick_interview_sessions_start",
      "mcp__yardstick__yardstick_interview_sessions_complete",
      "mcp__yardstick__yardstick_interview_sessions_scorecard_submit",
      "mcp__yardstick__yardstick_interview_sessions_scheduling_link_generate",
      "mcp__yardstick__yardstick_interview_sessions_cancel"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as yardstick. Review it before you use it.

Capability tags behind 33 rules

mcp__yardstick__yardstick_people_documents_list private-data
mcp__yardstick__yardstick_people_create outbound
mcp__yardstick__yardstick_talent_search private-data
mcp__yardstick__yardstick_prospects_outreach_preview private-data, untrusted-input
mcp__yardstick__yardstick_applications_status_email_poc_preview private-data, untrusted-input
mcp__yardstick__yardstick_applications_status_email_poc_bind private-data, untrusted-input
mcp__yardstick__yardstick_applications_email_decision_preview private-data, untrusted-input
mcp__yardstick__yardstick_applications_email_decision_apply outbound
mcp__yardstick__yardstick_email_drafts_list private-data, untrusted-input
mcp__yardstick__yardstick_email_drafts_read private-data, untrusted-input
mcp__yardstick__yardstick_email_drafts_preview private-data, untrusted-input
mcp__yardstick__yardstick_email_drafts_history private-data, untrusted-input
mcp__yardstick__yardstick_email_drafts_update outbound
mcp__yardstick__yardstick_email_drafts_send outbound
mcp__yardstick__yardstick_email_automation_settings_read private-data, untrusted-input
mcp__yardstick__yardstick_email_automation_settings_update outbound
mcp__yardstick__yardstick_email_sender_settings_read private-data, untrusted-input
mcp__yardstick__yardstick_email_sender_connections_list private-data, untrusted-input
mcp__yardstick__yardstick_email_sender_defaults_list private-data, untrusted-input
mcp__yardstick__yardstick_email_sender_defaults_set outbound
mcp__yardstick__yardstick_email_templates_list private-data, untrusted-input
mcp__yardstick__yardstick_email_templates_read private-data, untrusted-input
mcp__yardstick__yardstick_email_templates_preview private-data, untrusted-input
mcp__yardstick__yardstick_email_templates_publish outbound
mcp__yardstick__yardstick_email_templates_create outbound
mcp__yardstick__yardstick_email_templates_reset outbound
mcp__yardstick__yardstick_email_template_versions_list private-data, untrusted-input
mcp__yardstick__yardstick_email_templates_preview_customization private-data, untrusted-input
mcp__yardstick__yardstick_automation_rules_preview_rule private-data, untrusted-input
mcp__yardstick__yardstick_job_postings_publish_preview outbound
mcp__yardstick__yardstick_job_postings_publish_bind outbound
mcp__yardstick__yardstick_interview_plans_publish_preview outbound
mcp__yardstick__yardstick_interview_plans_publish_bind outbound

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/team.yardstick/yardstick/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

149 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:55 UTC.

For agents: Markdown · JSON · report this listing