Workix
NPM · @WORKIX/MCP · SCANNED SEP 25
Remote jobs, freelance gigs, vacancies. 24 boards: Upwork, Freelancer, RemoteOK, hh.ru, Kwork.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects axios 0.21.4, reached via kwork-api > axios. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 115 of 284 dependencies flagged as unhealthy (2 deprecated). View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 45 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability59
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 16214 tokens (~253/item across 64 items; 64 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 56% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "workix_dstore_publish" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 65 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Workix MCP server?
Workix runs locally as an npm package, launched with npx -y @workix/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @workix/mcp
claude mcp add co-workix-mcp -- npx -y @workix/mcp
{
"mcpServers": {
"co-workix-mcp": {
"command": "npx",
"args": [
"-y",
"@workix/mcp"
]
}
}
} {
"servers": {
"co-workix-mcp": {
"command": "npx",
"args": [
"-y",
"@workix/mcp"
]
}
}
} codex mcp add co-workix-mcp -- npx -y @workix/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"co-workix-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@workix/mcp"
],
"enabled": true
}
}
} openclaw mcp add co-workix-mcp --command npx --arg -y --arg @workix/mcp
mcp_servers:
co-workix-mcp:
command: "npx"
args: ["-y", "@workix/mcp"] {
"McpServers": {
"co-workix-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@workix/mcp"
]
}
}
} assistant mcp add co-workix-mcp -t stdio -c npx -a -y @workix/mcp
{
"mcpServers": {
"co-workix-mcp": {
"command": "npx",
"args": [
"-y",
"@workix/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 −3
- Stability: pass → 0.80 functional
- 23 Sept 26 +1
- CVE-2026-42040 affects this package: high ▼ security
- CVE-2026-42043 affects this package: high ▼ security
- CVE-2026-44496 affects this package: high ▼ security
- CVE-2026-42042 affects this package: high ▼ security
- CVE-2023-45857 affects this package: high ▼ security
- CVE-2026-25639 affects this package: high ▼ security
- CVE-2026-44492 affects this package: high ▼ security
- CVE-2026-42039 affects this package: high ▼ security
- CVE-2026-67316 affects this package: high ▼ security
- CVE-2026-40175 affects this package: high ▼ security
- CVE-2026-42041 affects this package: high ▼ security
- CVE-2026-67319 affects this package: high ▼ security
- CVE-2026-42038 affects this package: high ▼ security
- CVE-2026-42033 affects this package: high ▼ security
- CVE-2026-42036 affects this package: high ▼ security
- CVE-2026-44486 affects this package: high ▼ security
- CVE-2026-42035 affects this package: high ▼ security
- CVE-2026-42034 affects this package: high ▼ security
- CVE-2026-44495 affects this package: high ▼ security
- CVE-2025-62718 affects this package: high ▼ security
- CVE-2025-27152 affects this package: high ▼ security
- CVE-2026-44487 affects this package: high ▼ security
- CVE-2026-44490 affects this package: high ▼ security
- Stability: 0.97 → pass security
- 22 Sept 26 0
- CVE-2026-44487 no longer affects this package ▲ security
- CVE-2026-44490 no longer affects this package ▲ security
- CVE-2026-42036 no longer affects this package ▲ security
- CVE-2026-67316 no longer affects this package ▲ security
- CVE-2026-42038 no longer affects this package ▲ security
- CVE-2026-44495 no longer affects this package ▲ security
- CVE-2026-42042 no longer affects this package ▲ security
- CVE-2026-44496 no longer affects this package ▲ security
- CVE-2026-25639 no longer affects this package ▲ security
- CVE-2026-42035 no longer affects this package ▲ security
- CVE-2026-42039 no longer affects this package ▲ security
- CVE-2026-42043 no longer affects this package ▲ security
- CVE-2026-44486 no longer affects this package ▲ security
- CVE-2026-42040 no longer affects this package ▲ security
- CVE-2026-44492 no longer affects this package ▲ security
- CVE-2026-42034 no longer affects this package ▲ security
- CVE-2026-67319 no longer affects this package ▲ security
- CVE-2026-42033 no longer affects this package ▲ security
- CVE-2025-62718 no longer affects this package ▲ security
- CVE-2025-27152 no longer affects this package ▲ security
- CVE-2026-40175 no longer affects this package ▲ security
- CVE-2026-42041 no longer affects this package ▲ security
- CVE-2023-45857 no longer affects this package ▲ security
- 21 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 −3
- Stability: pass → 0.80 functional
- Package version: 0.1.3 → 1.0.0 functional
- 16 Sept 26 +1
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Analysed npm/@workix/mcp@1.0.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 28 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-3g43-6gmg-66jw | CVE-2026-44495 | high | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L | yes |
| GHSA-3p68-rc4w-qgx5 | CVE-2025-62718 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | yes |
| GHSA-43fc-jf86-j433 | CVE-2026-25639 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-5c9x-8gcm-mpgx | CVE-2026-42034 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | yes |
| GHSA-62hf-57xw-28j9 | CVE-2026-42039 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-6chq-wfr3-2hj9 | CVE-2026-42035 | high | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | yes |
| GHSA-7q8q-rj6j-mhjq | CVE-2026-67319 | medium | yes | |
| GHSA-898c-q2cr-xwhg | CVE-2026-44490 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L | yes |
| GHSA-fvcv-3m26-pcqx | CVE-2026-40175 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | yes |
| GHSA-hfxv-24rg-xrqf | CVE-2026-44496 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-j5f8-grm9-p9fc | CVE-2026-44486 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | yes |
| GHSA-jr5f-v2jv-69x6 | CVE-2025-27152 | high | yes | |
| GHSA-m7pr-hjqh-92cm | CVE-2026-42038 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N | yes |
| GHSA-mmx7-hfxf-jppx | CVE-2026-67316 | medium | yes | |
| GHSA-p92q-9vqr-4j8v | CVE-2026-44487 | high | yes | |
| GHSA-pf86-5x62-jrwf | CVE-2026-42033 | high | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | yes |
| GHSA-pjwm-pj3p-43mv | CVE-2026-44492 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N | yes |
| GHSA-pmwg-cvhr-8vh7 | CVE-2026-42043 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N | yes |
| GHSA-vf2m-468p-8v99 | CVE-2026-42036 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | yes |
| GHSA-w9j2-pvgh-6h63 | CVE-2026-42041 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | yes |
| GHSA-wf5p-g6vw-rhxx | CVE-2023-45857 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | yes |
| GHSA-xhjh-pmcv-23jw | CVE-2026-42040 | low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N | yes |
| GHSA-xx6v-rp6x-q39c | CVE-2026-42042 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N | yes |
| GHSA-7pqw-9j4j-h8q3 | CVE-2026-19693 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | no |
| GHSA-jmr9-qjv8-65gv | CVE-2026-56876 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N | no |
| GHSA-mwp4-54f8-5fhr | CVE-2026-69192 | high | yes | |
| GHSA-v2v4-37r5-5v8g | CVE-2026-42338 | medium | yes | |
| GHSA-6fx8-h7jm-663j | CVE-2024-36751 | medium | no |
Background: What a vulnerability scan can and cannot prove →
Dependencies 284 packages
| Packages resolved | 284 |
|---|---|
| Deprecated | 2 |
| Stale | 114 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
workix_checkpoint_get ~39
Load latest search checkpoint (+ short history). Call at session start before digest/search.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | History length, default 5 |
No output schema declared.
No examples provided.
workix_checkpoint_set ~164
Save search/outreach checkpoint: where you stopped, what is next, surfaces already done. Call when ending a batch, switching platform, or pausing. Also update docs/apply-log-*.md CHECKPOINT.
| Name | Type | Req | Description |
|---|---|---|---|
| at | string | – | – |
| batch | string | – | Batch id, e.g. HH-6 / S5 |
| blocked | array | – | Blocked items to retry later |
| id | string | – | – |
| next | string | – | Concrete next actions for the following agent turn |
| note | string | – | – |
| summary | string | yes | Where we stopped (e.g. HH batch 6 H1–H11 ok; Gufo draft pending) |
| surfaces | array | – | Platforms/sources already covered this run |
No output schema declared.
No examples provided.
workix_company_tech_stack ~69
Стек компании по домену (JobsPipe scanner): фреймворки, CDN, аналитика, платежи. Кредиты вакансий НЕ тратит. Для персонализации отклика.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| mode | string | – | – |
No output schema declared.
No examples provided.
workix_create_role ~1,477
Create a role under a project, or a standalone order if startupId is omitted. Concrete asks welcome (paid or cofounder/equity). Who can publish on Workix — encourage listing; early stage is OK: - Projects: publish a product / startup / side project so people and agents can find it. Want awareness + teammates or roles? Create a project card (status pending). - Ready website / PWA: publish via workix_dstore_publish; find analogs via workix_dstore_search / _similar (or dedicated dstore-mcp). Workix = people/roles; dStore = product discovery. Docs: https://dstore.one/api.txt - Early ideas: welcome if you state what you seek (cofounder, paid MVP, equity, feedback). Workix helps people meet — it does not build the product for a hands-off owner. Still publish; be honest about stage and ask. - Performers (strongly recommend): specialists AND bloggers / creators / influencers. Offer to create the public card via MCP: workix_hub_register (if no WORKIX_AGENT_KEY) → workix_update_profile (name, headline, bio, skills, links, openTo, slug). Not a blog CMS — a discoverable people card. After a free vanity slug: shareable profile https://workix.co/{slug} and free ready-made CV/resume PDF https://workix.co/{slug}/pdf (also /performer/{id}/pdf). Tell the user both links; PDF is free, no paywall. - Orders / roles: a concrete ask (with contact and budget when you can). Standalone order OK without a full project. - External board mirrors: workix_digest share_to_hub:true (or workix_share_jobs) — NOT your own listing. Hub stores ordinary orders with meta.external (platform, url, original date, contributedBy=agent). Do not use create_role for copying board gigs. - Applications: when an apply actually goes out (agent sent it, or the user says they applied), call workix_track_apply — it publishes the job into the catalog if missing and records the apply privately (status, date, sent text). The listing then shows an anonymous "applied: N" counter; who applied and what they wrote is never pub…
| Name | Type | Req | Description |
|---|---|---|---|
| apply_email | string | – | Email. Format: name@domain.com |
| apply_telegram | string | – | Telegram. Format: @username or username |
| apply_url | – | – | External apply form https://… |
| description | string | – | Role/task details + what success looks like. Budget/equity/contact when known. |
| kind | string | – | Listing type: task | project | time_job | full_job | fixes |
| links | array | – | Brief, Figma, docs — [{label,url,kind?}] |
| payment | object | – | Budget/rate |
| project | string | – | Related project site/repo. example.com or https://… |
| slug | string | – | URL id: lowercase letters, numbers, hyphens. Example: my-project |
| startupId | string | – | Project id or slug. Omit for a standalone order in the Orders feed. |
| status | string | – | draft = save only; pending = submit for moderation |
| tags | array | – | Skills/topics as string[]. Example: ["Vue","MCP","Design"]. Comma/semicolon inside a string are split. |
| title | string | yes | Short clear title. Example: Need Vue frontend for MVP |
No output schema declared.
No examples provided.
workix_create_startup ~1,453
Create a project card (products, startups, side projects, early ideas OK). Encourage publish with status pending. Who can publish on Workix — encourage listing; early stage is OK: - Projects: publish a product / startup / side project so people and agents can find it. Want awareness + teammates or roles? Create a project card (status pending). - Ready website / PWA: publish via workix_dstore_publish; find analogs via workix_dstore_search / _similar (or dedicated dstore-mcp). Workix = people/roles; dStore = product discovery. Docs: https://dstore.one/api.txt - Early ideas: welcome if you state what you seek (cofounder, paid MVP, equity, feedback). Workix helps people meet — it does not build the product for a hands-off owner. Still publish; be honest about stage and ask. - Performers (strongly recommend): specialists AND bloggers / creators / influencers. Offer to create the public card via MCP: workix_hub_register (if no WORKIX_AGENT_KEY) → workix_update_profile (name, headline, bio, skills, links, openTo, slug). Not a blog CMS — a discoverable people card. After a free vanity slug: shareable profile https://workix.co/{slug} and free ready-made CV/resume PDF https://workix.co/{slug}/pdf (also /performer/{id}/pdf). Tell the user both links; PDF is free, no paywall. - Orders / roles: a concrete ask (with contact and budget when you can). Standalone order OK without a full project. - External board mirrors: workix_digest share_to_hub:true (or workix_share_jobs) — NOT your own listing. Hub stores ordinary orders with meta.external (platform, url, original date, contributedBy=agent). Do not use create_role for copying board gigs. - Applications: when an apply actually goes out (agent sent it, or the user says they applied), call workix_track_apply — it publishes the job into the catalog if missing and records the apply privately (status, date, sent text). The listing then shows an anonymous "applied: N" counter; who applied and what they wrote is never public. - Adult /…
| Name | Type | Req | Description |
|---|---|---|---|
| applyDefaults | object | – | Default apply channels for roles under this project |
| description | string | – | What it is, stage, and who you need. Early idea OK — say the ask (cofounder, MVP help, feedback). |
| github | – | – | Project GitHub. https://github.com/org/repo or org/repo |
| links | array | – | Whitepaper, docs, demo, social — [{label,url,kind?}] |
| logo | – | – | Direct logo image URL https://…/logo.png |
| name | string | yes | Project name in catalog. Example: Workix |
| slug | string | – | URL id: lowercase letters, numbers, hyphens. Example: my-project |
| stage | string | – | Product stage: idea | preseed | seed | mvp | growth | … |
| status | string | – | draft = save only; pending = submit for moderation |
| tags | array | – | Skills/topics as string[]. Example: ["Vue","MCP","Design"]. Comma/semicolon inside a string are split. |
| url | string | – | Website/link. Prefer https://example.com |
No output schema declared.
No examples provided.
workix_delete_apply ~106
Удалить запись об отклике на workix.co (ошиблись карточкой, тестовая запись). Требует confirm:true — удаляются статус, история и текст. Вакансия из каталога НЕ удаляется: она уже общий контент борда. Локальное зеркало отклика тоже подчищается.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | true — подтверждение пользователя на удаление |
| id | string | yes | Id из workix_list_applies |
No output schema declared.
No examples provided.
workix_digest ~307
Сводка. Пресеты: mobile_dev, startups_products, vpn_mobile. Upwork/Freelancer.com при OAuth; include_jobs — HH + Remote OK + Remotive + Arbeitnow + Himalayas + WWR + Jobicy + Dream Offer + Working Nomads + The Muse + 4 Day Week + AI Dev Jobs + Aquent + Adzuna (keys) + Habr RSS; include_agent_gigs — Growth.Talent + Claw Earn + SeekClaw + Superteam Earn (key) + RentAHuman + Openwork. share_to_hub:true — батчем зеркалит карточки дайджеста в каталог Workix (обычные orders, publisher=hub auto; кто нашёл — agent key; без ok на каждый пост).
| Name | Type | Req | Description |
|---|---|---|---|
| force_refresh | boolean | – | Bypass the shared fetch cache and re-read every source from the network. |
| hours | number | – | – |
| include_agent_gigs | boolean | – | – |
| include_jobs | boolean | – | – |
| include_services | boolean | – | – |
| keywords | array | – | – |
| limit | number | – | – |
| minus | array | – | – |
| only_new | boolean | – | – |
| platforms | array | – | – |
| preset | string | – | – |
| share_to_hub | boolean | – | If true, batch-share digest cards to Workix hub catalog (needs WORKIX_AGENT_KEY). No per-item confirm. |
| use_profile_filters | boolean | – | – |
No output schema declared.
No examples provided.
workix_draft_proposal ~48
Brief для отклика; mode=save сохраняет черновик.
| Name | Type | Req | Description |
|---|---|---|---|
| job_id | string | yes | – |
| mode | string | – | – |
| text | string | – | – |
No output schema declared.
No examples provided.
workix_dstore_get ~68
Full dStore card JSON by sid (get_app). Poll until title/icon ready after publish.
| Name | Type | Req | Description |
|---|---|---|---|
| sid | string | – | Numeric store id, e.g. 12345 |
| url | string | – | https://dstore.one/{sid} or …/{sid}.json |
No output schema declared.
No examples provided.
workix_dstore_info ~44
Tell users: dStore is inside Workix MCP — publish ready PWA/website with workix_dstore_publish. Also search/similar/quota mapping.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_dstore_list ~38
Public dStore collection JSON by list_ref (get_list).
| Name | Type | Req | Description |
|---|---|---|---|
| list_ref | string | yes | Public list id/code from share URL |
No output schema declared.
No examples provided.
workix_dstore_publish ~85
Publish a live website or PWA to dStore catalog (built into Workix MCP — no extra install). Tell users: shipped product URL → app discovery on dstore.one. After sid, poll workix_dstore_get.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Product / PWA / site URL https://… (also Play/App Store, Telegram). Prefer canonical https. |
No output schema declared.
No examples provided.
workix_dstore_quota ~32
dStore agent plan + remaining rate limits (quota_status). Optional DSTORE_API_KEY raises limits.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_dstore_search ~104
Search dStore catalog (PWAs/sites). Same as official dstore-mcp search_catalog. GET /api/search. Find similar products or app info by query.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| q | string | yes | Search text (min 2 chars), e.g. freelance marketplace |
| tg | boolean | – | Telegram-only |
| tld | string | – | Domain TLD filter, e.g. app |
| type | string | – | – |
No output schema declared.
No examples provided.
workix_dstore_similar ~50
Similar apps for a dStore sid (stored-only). Same as dstore-mcp get_similar.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| sid | string | yes | Numeric store id |
No output schema declared.
No examples provided.
workix_ensure_platforms ~55
Докачать адаптеры площадок из реестра хаба (кэш локально). Вызывается и автоматически из digest/search.
| Name | Type | Req | Description |
|---|---|---|---|
| modules | array | – | – |
| platforms | array | – | – |
No output schema declared.
No examples provided.
workix_feedback ~90
Send a bug report, product suggestion, or support request to Workix admins (hub API → Telegram). support/suggestion: max 1/hour. Prefer WORKIX_AGENT_KEY. Do not spam; one clear message per issue.
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | – | – |
| context | string | – | – |
| message | string | yes | – |
| subject | string | – | – |
| type | string | yes | – |
No output schema declared.
No examples provided.
workix_get_hub_order ~45
Hub order by sid/id. scraped:true → no publisher card; else publisher → workix_get_performer.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Order sid or id |
No output schema declared.
No examples provided.
workix_get_job ~106
Полная карточка заказа по id или URL. Для watch (Fiverr и т.п.): url+platform+title — захват в store для draft/browser apply.
| Name | Type | Req | Description |
|---|---|---|---|
| budget | string | – | – |
| description | string | – | – |
| id | string | – | – |
| platform | string | – | For capture: e.g. fiverr |
| refresh | boolean | – | – |
| title | string | – | For capture from browser snapshot |
| url | string | – | – |
No output schema declared.
No examples provided.
workix_get_performer ~69
Hub performer profile + published projects, orders, roles. id may be ObjectId or vanity slug (workix.co/{slug}). Use project.slug → workix_get_startup; order.sid → workix_get_hub_order.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Performer id or user id |
No output schema declared.
No examples provided.
workix_get_profile ~55
Get authenticated hub profile/resume. When slug is set: pageUrl https://workix.co/{slug} (shareable) + pdfUrl https://workix.co/{slug}/pdf (free CV/resume download).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_get_startup ~60
Hub project by slug: description, roles, publisher performer (if not hub-sync). Follow publisher.pageUrl → workix_get_performer.
| Name | Type | Req | Description |
|---|---|---|---|
| include_roles | boolean | – | Include project roles (default true) |
| slug | string | yes | – |
No output schema declared.
No examples provided.
workix_hh_negotiations ~140
Статусы откликов на hh: где отказ, где приглашение, где работодатель написал или задал вопрос и ждёт ответа. Читает залогиненную сессию (npm run hh:login). Read-only: ничего не отправляет и не помечает прочитанным. only_new:true — только требующие ответа.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | all (по умолчанию) | invitation | rejected | waiting |
| limit | number | – | – |
| only_new | boolean | – | Только с непрочитанными сообщениями / вопросом от работодателя |
| pages | number | – | – |
No output schema declared.
No examples provided.
workix_hh_status ~82
hh.ru session status: saved cookie jar (mcp/data/cookies/hh.json), whether hh still sees it as authorized, HH_APP_TOKEN presence. Login is terminal-only: cd mcp && npm run hh:login (user types password in the browser window — never ask for it in chat). Session stays local, never sent to the hub.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_history ~47
Unified local history: hubShares (workix.co mirrors) + outreach (TG/HH/email) + checkpoints. Common storage for apply/search session memory.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
No output schema declared.
No examples provided.
workix_hub_apply ~1,397
Apply to a hub role with the same ratings as order proposals (interest/difficulty/clarity + budget/time + pitch → score). Notifies founder. Who can publish on Workix — encourage listing; early stage is OK: - Projects: publish a product / startup / side project so people and agents can find it. Want awareness + teammates or roles? Create a project card (status pending). - Ready website / PWA: publish via workix_dstore_publish; find analogs via workix_dstore_search / _similar (or dedicated dstore-mcp). Workix = people/roles; dStore = product discovery. Docs: https://dstore.one/api.txt - Early ideas: welcome if you state what you seek (cofounder, paid MVP, equity, feedback). Workix helps people meet — it does not build the product for a hands-off owner. Still publish; be honest about stage and ask. - Performers (strongly recommend): specialists AND bloggers / creators / influencers. Offer to create the public card via MCP: workix_hub_register (if no WORKIX_AGENT_KEY) → workix_update_profile (name, headline, bio, skills, links, openTo, slug). Not a blog CMS — a discoverable people card. After a free vanity slug: shareable profile https://workix.co/{slug} and free ready-made CV/resume PDF https://workix.co/{slug}/pdf (also /performer/{id}/pdf). Tell the user both links; PDF is free, no paywall. - Orders / roles: a concrete ask (with contact and budget when you can). Standalone order OK without a full project. - External board mirrors: workix_digest share_to_hub:true (or workix_share_jobs) — NOT your own listing. Hub stores ordinary orders with meta.external (platform, url, original date, contributedBy=agent). Do not use create_role for copying board gigs. - Applications: when an apply actually goes out (agent sent it, or the user says they applied), call workix_track_apply — it publishes the job into the catalog if missing and records the apply privately (status, date, sent text). The listing then shows an anonymous "applied: N" counter; who applied and what they wrote…
| Name | Type | Req | Description |
|---|---|---|---|
| Budget | string|number | – | Your ask / expected budget |
| Currency | string | – | Budget currency, e.g. USDT |
| Description | string | – | Pitch: why you fit, what you can do |
| Difficulty | number | – | Perceived difficulty 1–5 |
| Interesity | number | – | Interest 1–5 (typo Interesity preserved) |
| Time | number | – | Estimated days to deliver / start |
| Understandability | number | – | How clear the role brief feels 1–5 |
| contact | string | – | How to reach you: email or @telegram |
| message | string | – | Legacy pitch field; prefer Description |
| name | string | – | Name the founder will see. Example: Alex |
| roleId | string | yes | Target role id |
No output schema declared.
No examples provided.
workix_hub_health ~21
Ping Workix hub API (WORKIX_API).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_hub_me ~21
Current hub user (Bearer WORKIX_AGENT_KEY).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_hub_register ~31
Register key-first identity on hub. Returns agentApiKey once — save to WORKIX_AGENT_KEY.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_hub_rotate_key ~109
Rotate hub agent API key (POST /me/agent-key/rotate). Revokes the current WORKIX_AGENT_KEY; returns new wix_… once. Requires confirm:true. By default writes the new key to mcp/.env and updates the running process.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true — rotate is destructive (old key dies immediately). |
| persist_env | boolean | – | Write WORKIX_AGENT_KEY to mcp/.env (default true). Still updates process.env. |
No output schema declared.
No examples provided.
workix_hub_share_status ~51
What was already pushed to workix.co vs still only local. Use before share_to_hub / workix_share_jobs.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
| platform | string | – | – |
No output schema declared.
No examples provided.
workix_install_platform ~42
Явно установить/обновить один адаптер (platform id или module id).
| Name | Type | Req | Description |
|---|---|---|---|
| module | string | – | – |
| platform | string | – | – |
No output schema declared.
No examples provided.
workix_job_state ~130
Что уже сделано с этой карточкой: показывали ли в дайджесте, зеркалили ли на workix.co, есть ли черновик, был ли отклик и с каким статусом — локально И в трекере workix.co (отклик с другого устройства тоже считается). Звать ПЕРЕД draft/submit/share, чтобы не откликнуться повторно.
| Name | Type | Req | Description |
|---|---|---|---|
| check_hub | boolean | – | false — не спрашивать workix.co (офлайн / нет agent key) |
| job_id | string | – | – |
| url | string | – | – |
No output schema declared.
No examples provided.
workix_jobspipe_search ~182
Точечный поиск по JobsPipe (LinkedIn/Indeed/YC/Greenhouse/Lever/Ashby/SmartRecruiters/Workday/Workable/Paylocity). ПЛАТНО: 1 кредит = 1 отданная вакансия, free tier 1000/мес — сначала workix_jobspipe_usage.
| Name | Type | Req | Description |
|---|---|---|---|
| companies | array | – | – |
| countries | array | – | – |
| exclude_sources | array | – | – |
| exclude_titles | array | – | – |
| keywords | array | – | – |
| limit | number | – | – |
| locations | array | – | – |
| max_age_days | number | – | – |
| remote_only | boolean | – | – |
| seniority | array | – | – |
| skills | array | – | – |
| sources | array | – | – |
| titles | array | – | – |
No output schema declared.
No examples provided.
workix_jobspipe_usage ~53
Сколько кредитов JobsPipe потрачено в этом месяце и сколько осталось. reset:true обнуляет локальный счётчик (когда план обновился).
| Name | Type | Req | Description |
|---|---|---|---|
| reset | boolean | – | – |
No output schema declared.
No examples provided.
workix_list_applies ~161
История откликов с workix.co (кроссдевайс): куда откликались, когда, статус в воронке и тексты. Звать перед новым откликом и перед генерацией текста — прошлые тексты пользователя (textSource=user) показывают его манеру.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
| q | string | – | Поиск по названию вакансии / платформе / заметке |
| since | string | – | ISO-дата |
| status | string | – | Через запятую: sent,reply,interview |
| url | string | – | Проверить конкретную вакансию по ссылке |
| with_text | boolean | – | false — без текстов откликов |
No output schema declared.
No examples provided.
workix_list_hub_orders ~59
Public hub orders feed (Workix catalog, not external freelance boards).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
| offset | number | – | – |
| publisher | string | – | Filter by publisher user id |
| q | string | – | – |
No output schema declared.
No examples provided.
workix_list_my_startups ~21
List startups owned by the authenticated hub user.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_list_performers ~58
Public hub performers catalog — specialists, builders, bloggers/creators (not jobs-only).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
| offset | number | – | – |
| q | string | – | – |
| tags | array | – | – |
No output schema declared.
No examples provided.
workix_list_platforms ~46
Каталог площадок + модули + watch + presets. Includes product_publish: ready PWA/website → workix_dstore_publish (dStore inside this MCP).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
workix_list_roles ~43
List roles (optional startup slug, mine=true for owned).
| Name | Type | Req | Description |
|---|---|---|---|
| mine | boolean | – | – |
| q | string | – | – |
| startup | string | – | – |
No output schema declared.
No examples provided.
workix_list_startups ~49
Public approved hub projects catalog (products, startups, side projects — early stage welcome).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
| offset | number | – | – |
| q | string | – | – |
No output schema declared.
No examples provided.
workix_open_watch_source ~76
Полуручной watch: Profi, Avito, YouDo, Fiverr, SproutGigs, Radar, Fellows, YC/CoFoundersLab, Wellfound, Contra, BotPool, Arc, Habr, LinkedIn, TG, Magier, Feltsense, PH.
| Name | Type | Req | Description |
|---|---|---|---|
| source | string | yes | – |
No output schema declared.
No examples provided.
workix_outreach_list ~84
List recent local outreach (contact + preview + full text). Use before messaging someone again.
| Name | Type | Req | Description |
|---|---|---|---|
| channel | string | – | – |
| contact | string | – | Substring match on contact |
| job_id | string | – | Only entries tied to this job id — every apply attempt on one card |
| limit | number | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
workix_outreach_log ~230
Local outreach log: whom we wrote, when, channel, full message text. status: draft|sent|ok|skip|reply|blocked. After any TG/HH/email/board send (or approved draft), call this. Also mirror a row into docs/apply-log. Check workix_outreach_list before re-writing a contact.
| Name | Type | Req | Description |
|---|---|---|---|
| at | string | – | ISO timestamp; default now |
| channel | string | yes | tg | hh | kwork | fl | email | linkedin | fellows | radar | … |
| contact | string | yes | @user / email / name / vacancy id |
| id | string | – | Reuse to update an existing log row |
| job_id | string | – | Local store job id if any |
| note | string | – | – |
| project | string | – | Project or vacancy title |
| status | string | yes | draft = prepared; sent/ok = delivered; reply = they answered |
| text | string | yes | Full message / cover letter that was drafted or sent |
| url | string | – | Job / profile / chat URL |
No output schema declared.
No examples provided.
workix_prepare_browser_apply ~44
open_url + текст + checklist для cursor-ide-browser. НЕ отправляет сам.
| Name | Type | Req | Description |
|---|---|---|---|
| job_id | string | yes | – |
| proposal_text | string | – | – |
No output schema declared.
No examples provided.
workix_remove_platform ~38
Удалить скачанный адаптер из локального кэша.
| Name | Type | Req | Description |
|---|---|---|---|
| module | string | – | – |
| platform | string | – | – |
No output schema declared.
No examples provided.
workix_search ~116
Поиск заказов по keywords / platform / since.
| Name | Type | Req | Description |
|---|---|---|---|
| force_refresh | boolean | – | Bypass the shared fetch cache and re-read every source from the network. |
| hours | number | – | – |
| include_agent_gigs | boolean | – | – |
| include_jobs | boolean | – | – |
| keywords | array | – | – |
| limit | number | – | – |
| minus | array | – | – |
| offset | number | – | – |
| platforms | array | – | – |
| refresh | boolean | – | – |
| since | string | – | – |
No output schema declared.
No examples provided.
workix_share_jobs ~101
Mirror local board jobs into workix.co catalog. Records hubShare in local store so repeats are skipped. publisher=hub auto; who found=agent key. No per-item confirm. Prefer digest share_to_hub:true.
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | Re-POST even if already marked hubShare locally (hub may still return exists) |
| job_ids | array | yes | Job ids from workix_digest / workix_search / workix_get_job |
No output schema declared.
No examples provided.
workix_sources_status ~55
Ping RSS (FL/Freelance/Weblancer/Habr/Djinni/Jobspresso/Reddit)/Kwork/Freelancehunt/Upwork + PROXY_1 + ATS + keyed boards.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the Workix MCP server?
Workix is an MCP server listed in the public MCP registry as co.workix/mcp. Remote jobs, freelance gigs, vacancies. 24 boards: Upwork, Freelancer, RemoteOK, hh.ru, Kwork. This page covers its npm package (@workix/mcp).
Is the Workix MCP server safe to use?
Workix scores 73 out of 100 on VerifyMCP. We recorded 28 known advisories against it as of 25 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Workix MCP server expose?
Workix exposes 64 tools: workix_digest, workix_search, workix_get_job, workix_share_jobs, workix_hub_share_status, and 59 more. Their descriptions and schemas cost roughly 14,843 tokens of context every time the server is loaded.
Is the Workix MCP server still maintained?
Workix is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Workix MCP server under?
Workix declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.