Back to Browse

Freehire MCP Server

Developer ToolsUse Caution4.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

freehire.me: search 3.3M+ IT jobs from 294K company boards, track applications, tailor CVs.

About

freehire.me: search 3.3M+ IT jobs from 294K company boards, track applications, tailor CVs.

Remote endpoints: streamable-http: https://freehire.me/api/v1/mcp

Security Report

4.5
Use Caution4.5High Risk

Valid MCP server (2 strong, 3 medium validity signals). 7 known CVEs in dependencies (0 critical, 4 high severity) Package registry verified. Imported from the Official MCP Registry.

11 tools verified · Open access · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

A freehire personal API key (freehire.me -> account menu -> API keys). Optional: if omitted, the server reads the key the freehire CLI stored in ~/.freehire/creds.json.Required

Environment variable: FREEHIRE_TOKEN

Override the API base URL. Defaults to https://freehire.me.Optional

Environment variable: FREEHIRE_API_URL

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

freehire MCP server

LightNow capabilities

An MCP server over the freehire job API. It lets any MCP host — Claude Desktop, Claude Code, or a compatible agent — search, filter, and apply to IT jobs without a browser, authenticating with a personal API key. Postings are crawled straight from company career boards — 3.3M+ open roles across 294K companies, normalized into one schema and tagged with stack, seniority, region and work mode (live figures).

It mirrors the freehire CLI: same API, same credentials, exposed as MCP tools instead of shell commands.

Install

Hosted endpoint (no install, no key)

The read-only job search tools are also served remotely at https://freehire.me/api/v1/mcp (Streamable HTTP). In Claude Code, install it as a plugin:

/plugin install freehire --marketplace strelov1/freehire-mcp

In other hosts, add the URL as a custom remote connector.

Local server (npm)

No global install needed — the host runs it via npx. Add it to your host's MCP configuration (Claude Desktop → Settings → Developer → Edit config, or ~/.claude.json for Claude Code):

{
  "mcpServers": {
    "freehire": {
      "command": "npx",
      "args": ["-y", "freehire-mcp"],
      "env": { "FREEHIRE_TOKEN": "fhk_xxxxxxxx" }
    }
  }
}

Create the fhk_… key in the web app (freehire.me → account menu → API keys). If you already use the freehire CLI (freehire auth login), you can omit env — the server reads the same ~/.freehire/creds.json.

Authentication

The token and API base URL resolve with precedence env → ~/.freehire/creds.json → default https://freehire.me:

WhatSources
TokenFREEHIRE_TOKEN → creds file
API base URLFREEHIRE_API_URL → creds file → https://freehire.me

The server only reads the credentials file (it never writes it — logging in stays the CLI's job). If no token is configured, tools return a clear "not authenticated" error rather than the server failing to start.

Tools

ToolPurpose
whoamiAuthenticated user (verify the key).
profileThe candidate's saved job-search profile (skills, preferences, contact-free CV).
facetsThe filter/skill vocabulary: every facet's live values with counts. Call first.
searchKeyword + facet job search; returns jobs with their full description as markdown and the total match count.
market_fitScore a skill list against live market demand (coverage + gaps).
jobA single job's full content by slug.
check_jobs_openWhether postings are still open (up to 50 slugs). Run it on a shortlist before presenting it.
similar_jobsPostings most similar to one posting.
salary_statsSalary percentiles by role family, seniority and country, with sample sizes.
job_market_statsHow many open postings match a set of filters, and what they ask for.
list_filter_valuesThe values one filter accepts, with counts (golang finds go).
companyA company and its open jobs by slug.
applyMark a job applied.
save / unsaveBookmark / remove a bookmark.
stageSet the application stage (server-validated).
noteAttach a free-text note.
myThe caller's tracked jobs (all/viewed/saved/applied) with stage + note.
subscribeCreate a job alert: a saved search delivered by email, Telegram, the app or a webhook.
list_subscriptionsThe caller's job alerts with every setting.
update_subscriptionChange an alert's name, search, channels, or pause it.
unsubscribeStop an alert on every channel or one.
subscription_updatesThe new postings the caller's alerts have matched.
cv_tailorStart (or reopen) tailoring for a vacancy; returns the CV id the other cv_* tools take.
cv_listThe caller's tailored CVs with the vacancy each was written for.
cv_contextThe fit analysis a tailored CV should reframe toward (missing_have vs missing_gap).
cv_getA tailored CV's full document.
cv_editApply a batch of path-addressed edits to a tailored CV, atomically (server-validated; uncited claims are refused).
cv_renderRender a tailored CV to a PDF, returned as a base64 application/pdf resource.
experience_listThe candidate's experience bank, with each achievement's provenance. cv_edit's evidence_id comes from here.
experience_add_employment / experience_add_achievementRecord a place, or one piece of evidence.
experience_update_employment / experience_update_achievementCorrect one. Field-level: what you do not name is kept.
experience_remove_employment / experience_remove_achievementDelete one. No undo; a place must be empty first.
submitSubmit a vacancy for moderation.
my_submissionsThe caller's submissions with status.
contributeHand over a vacancy or company career board link to the catalogue intake.
my_contributionsThe caller's contributed links and boards with ingestion status.
jobs_add / jobs_editModerator: author / edit a job (403 without the role).
submissions_pendingModerator: the review queue.
submission_approve / submission_rejectModerator: decide on a submission.

Filters. search, market_fit, and facets share the same market-filter parameters: remote, region, country, city, company, category, role, seniority, employment_type, english_level, exclude_skill, salary_min, visa, plus a generic facets map ({"source": "greenhouse"}) for any other facet in the vocabulary. Discover valid values with the facets tool — do not invent them. In search, skills is a filter; in market_fit, skills is the measured set.

Geography widens. region, country and city are ONE OR-group: region: ["eu"] with country: ["IT"] means "in Europe or in Italy" and returns everything the region alone would. To search a single country, pass country and omit region. The three name a single concept — where — so picking two places reads as "either", which is what makes region: ["eu"] with country: ["BR"] ("Europe or Brazil") useful. There is no AND to switch on: _mode=and does not apply to geography.

Unknown values are named, not guessed. A filter value the API does not recognise (a misspelt skill such as golangg) is reported in ignored_values, e.g. {"skills": ["golangg"]}, beside total in search and in the {data, ignored_values} wrapper of facets and market_fit. Unlike an unread param it still narrows — to nothing — so a 0 beside it is a typo, not an empty market. Skill aliases resolve server-side (golang searches go); list_filter_values names the real value.

Unread params are ignored, not refused. A filter key the API does not recognize does not fail the request, it widens it. Such keys come back in the result's ignored list, with did_you_mean when only the grammatical number was wrong. search reports it alongside total; facets and market_fit answer a single object, so they wrap it as {data, ignored} — and only then, leaving a clean call's shape untouched. Any number from a result carrying ignored answers a broader question than the one asked — retry with the suggested name before reporting it.

Forwarded tools. check_jobs_open, similar_jobs, salary_stats, job_market_stats and list_filter_values have no REST route, so they are forwarded to freehire's anonymous hosted MCP server (/api/v1/mcp, no key sent). The five job-alert tools are forwarded to the signed-in one (/api/v1/mcp/account) with your API key, so an alert made here is exactly the website's — the same saved search, channel rule and match ledger, not a second implementation of them. Their answers arrive in the hosted server's own words. Automatic applications (auto_apply_*) stay on the OAuth-signed-in endpoint and are not offered to an API key.

Searching well. Join a role's two or three names with an uppercase OR (title:SRE OR title:"site reliability"), put location, work mode, seniority and skills in filters rather than the query, loosen one constraint at a time when few results come back, shortlist from the search results and run check_jobs_open before presenting.

Descriptions. search reads the API's agent endpoint, so every hit already carries the posting's full description rendered as markdown — a host can screen a result set without a job call per hit. Descriptions are long, so keep limit modest.

The evidence rule. Every achievement in the bank records who asserted it. cv_import, stated_in_chat and manual mean the candidate did, and may be cited on a CV; agent_inferred means a model read it into the record, and may not. cv_edit refuses any claim about the candidate without an evidence_id pointing at a citable one, which is why experience_list is the tool that makes cv_edit usable at all.

Correcting an achievement does not move that label: an agent_inferred one stays uncitable however it is reworded. The only way it becomes citable is to ask the candidate, then record what they say with experience_add_achievement.

Removing is final — the bank has no undo. A place must be emptied before it can go, because deleting one would take every achievement under it. Folding two achievements into one, keeping the numbers from both, is on the site.

Each tool returns the raw API data as JSON text; an API error becomes an isError result carrying the HTTP status (a 401 adds an auth hint).

Develop

npm install
npm test        # vitest: config, client (mock server), facets, tool dispatch
npm run build   # tsc → dist/

License

MIT — see LICENSE. The freehire backend and CLI are MIT too.

Reviews

No reviews yet

Be the first to review this server!