io.github.devag7/linkedin-mcp
NPM · LINKEDIN-MCP-TOOLS
Unofficial local LinkedIn research and opt-in alpha writes; live compatibility is unverified.
Available components
Last scanned (8 hours ago)
Scores higher than 98% of npm servers
Category CRM and Sales
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to devag7/linkedin-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 6 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability75
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2510 tokens (~104/item across 24 items; 24 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 93% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Package version: 3.1.0 → 4.4.0 functional
- 3 Nov 26 +1
- Stability: 0.97 → pass security
- 2 Nov 26 −1
- Stability: pass → 0.97 functional
- 30 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 29 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: pass → fail ▼ functional
- Package version: 4.2.0 → 4.4.0 functional
- Package version: 3.1.0 → 4.3.0 functional
- 28 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 27 Oct 26 +1
- Malware scan: unverified → pass ▲ security
- Stability: 0.97 → pass security
- Package version: 4.1.2 → 4.2.0 functional
- 26 Oct 26 −11
- Malware scan: pass → unverified ▼ security
- CVE-2023-54404 no longer affects this package ▲ security
- Known CVEs: fail → pass ▲ security
- Stability: pass → 0.97 functional
- Package version: 4.1.1 → 4.1.2 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/linkedin-mcp-tools@4.4.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | devag7/linkedin-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/devag7/linkedin-mcp/.github/workflows/release.yml@refs/heads/main |
| Rekor log index | 3574080869 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:a35830fd104fa7effa474576b26b7071be4f21dec2ffbf56b8fe5cfda239e0b242002e9ecf4ac59159568caef9c2d88084d027542a3d23d9a2cdea059 |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
close_session Close browser session ~26
Close Chrome while retaining this runtime’s profile ownership. Stop the server to release the profile.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
comment_on_post Comment on post ~217
[ALPHA, write] Comment on a post. Gated: requires confirm:true. Returns a structured status.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to actually execute. Omit/false = refuse (safety). |
| operation_id | string | – | Caller-generated unique ID (8-128 letters, digits, _ or -). Reuse the same ID and inputs to retrieve the stored outcome without resubmitting, including after a timeout. If omitted for a preview, the… |
| post_urn | string | yes | The post ACTIVITY urn, e.g. urn:li:activity:7472… (not the share urn) |
| preview_hash | string | – | Hash returned by the reviewed preview. Rejects changed target/content before any browser action. |
| preview_token | string | – | Server-issued, five-minute preview token. Required for a new submission together with its operation_id. Not required for a journal lookup. |
| text | string | yes | Comment text |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
connect_with_person Connect with person ~240
[ALPHA, write] Send a connection request. Gated: requires confirm:true. Returns a structured status (ok | duplicate | already_connected | restricted | quota_exhausted | failed | unknown). Counts against the daily connect cap.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to actually execute. Omit/false = refuse (safety). |
| message | string | – | Optional note (max 300 chars) |
| operation_id | string | – | Caller-generated unique ID (8-128 letters, digits, _ or -). Reuse the same ID and inputs to retrieve the stored outcome without resubmitting, including after a timeout. If omitted for a preview, the… |
| preview_hash | string | – | Hash returned by the reviewed preview. Rejects changed target/content before any browser action. |
| preview_token | string | – | Server-issued, five-minute preview token. Required for a new submission together with its operation_id. Not required for a journal lookup. |
| profile_id | string | yes | The fsd_profile id (the ACoAA… part of the profile URN) |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
create_post Create post ~195
[ALPHA, write] Publish a text post to your feed. Gated: requires confirm:true. Returns a structured status.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to actually execute. Omit/false = refuse (safety). |
| operation_id | string | – | Caller-generated unique ID (8-128 letters, digits, _ or -). Reuse the same ID and inputs to retrieve the stored outcome without resubmitting, including after a timeout. If omitted for a preview, the… |
| preview_hash | string | – | Hash returned by the reviewed preview. Rejects changed target/content before any browser action. |
| preview_token | string | – | Server-issued, five-minute preview token. Required for a new submission together with its operation_id. Not required for a journal lookup. |
| text | string | yes | Post text |
| visibility | string | – | Audience |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
export_application_tracker Export application tracker ~109
Format up to 50 application statuses that you enter into a CSV. Optionally classify follow-up dates against your explicit as_of time; no notifications are scheduled. It does not inspect LinkedIn, infer submission, or save data. A receipt-verified status requires your explicit confirmation.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Explicit UTC reference time; required only with include_follow_up_plan:true. No current date is inferred. |
| include_follow_up_plan | boolean | – | – |
| records | array | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_company Get company ~58
Get a company by its LinkedIn URL slug (e.g. "google", "microsoft"). Returns name, description, website, industry, size, HQ.
| Name | Type | Req | Description |
|---|---|---|---|
| universal_name | string | yes | Company URL slug, e.g. "google" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_company_employees Get company employees ~76
List employees LinkedIn surfaces for a company (by URL slug). Returns name, headline, and public identifier (feed the slug to get_profile). Prospecting core.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Employees to return (default 10) |
| universal_name | string | yes | Company URL slug, e.g. "anthropicresearch" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_company_posts Get company posts ~67
Get a company's recent posts by its LinkedIn URL slug (e.g. "google"). Returns post text + a short meta line.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Posts to return (default 10) |
| universal_name | string | yes | Company URL slug, e.g. "google" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_conversation Get conversation ~72
Read a bounded page of messages by the conversation URN from get_inbox, sorted oldest-first with sender attribution when present. Continuation is not verified.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_urn | string | yes | Full urn:li:msg_conversation:(...) from a get_inbox result |
| count | integer | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_feed Get feed ~84
Get recent posts from your LinkedIn home feed (author + post text).
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Number of posts (default 10) |
| cursor | string | – | Opaque nextCursor from the same tool, query and count. Do not combine with offset. |
| offset | integer | – | Explicit zero-based offset; maximum 1000. One provider page per call. |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_inbox Get inbox ~39
List a bounded first page of recent conversations with participant names, headlines and profile links. Continuation is not verified.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_job_details Get job details ~58
Get full details for a job posting by its numeric id (the digits in /jobs/view/<id> or from search_jobs jobUrn).
| Name | Type | Req | Description |
|---|---|---|---|
| job_id | string | yes | Numeric job id, e.g. "4423697734" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_my_profile Get my profile ~26
Get the authenticated user's own LinkedIn profile (experience, education, headline, summary).
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_notifications Get notifications ~83
Get your recent LinkedIn notifications (headline, time, read state).
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Number of notifications (default 20) |
| cursor | string | – | Opaque nextCursor from the same tool, query and count. Do not combine with offset. |
| offset | integer | – | Explicit zero-based offset; maximum 1000. One provider page per call. |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_pending_invitations Get pending invitations ~68
List your pending connection invitations — received (inbound, with the urn/sharedSecret to accept later) and sent (outbound). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Max per direction (default 50) |
| direction | string | – | Which queue to return (default both) |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
get_profile Get a profile ~56
Get a LinkedIn profile by public identifier (the slug in the profile URL, e.g. "satyanadella").
| Name | Type | Req | Description |
|---|---|---|---|
| username | string | yes | LinkedIn public identifier / vanity slug, e.g. "williamhgates" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
health_check Check LinkedIn session health ~53
Deep health check: cookie login state, a LIVE Voyager probe (confirms the API actually answers, not just that a cookie exists), and today's safety-budget headroom (per-action used/cap/remaining + pending invites).
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
prepare_job_application Prepare application worksheet and drafts ~212
Create a local, unsaved application worksheet with optional reusable evidence, resume/cover-letter drafts and interview practice when supported by the input schema. Only explicitly selected user-supplied evidence is used; nothing is fetched, filled, uploaded, submitted, sent or stored. Verify every claim and the current listing yourself.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | – | Optional company copied from the listing |
| evidence_library | array | – | Up to 30 user-provided facts; only referenced facts are selected |
| include_drafts | boolean | – | Default false: include deterministic, unverified plain-text drafts only when true |
| include_interview_prep | boolean | – | Default false: optional offline practice questions, blank STAR worksheets and an unsent fill-in follow-up template; no interview is verified |
| job_id | string | yes | Numeric LinkedIn job ID |
| job_title | string | yes | Title copied from the selected listing; not verified here |
| requirements | array | yes | At most 20 requirements and your matching evidence |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
react_to_post React to post ~215
[ALPHA, write] React to a post. Gated: requires confirm:true. Returns a structured status.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to actually execute. Omit/false = refuse (safety). |
| operation_id | string | – | Caller-generated unique ID (8-128 letters, digits, _ or -). Reuse the same ID and inputs to retrieve the stored outcome without resubmitting, including after a timeout. If omitted for a preview, the… |
| post_urn | string | yes | The post ACTIVITY urn, e.g. urn:li:activity:7472… (not the share urn) |
| preview_hash | string | – | Hash returned by the reviewed preview. Rejects changed target/content before any browser action. |
| preview_token | string | – | Server-issued, five-minute preview token. Required for a new submission together with its operation_id. Not required for a journal lookup. |
| reaction | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
search_companies Search companies ~62
Search LinkedIn companies by keywords. Returns name + universalName slug (pass that to get_company for full details).
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results (default 10) |
| keywords | string | yes | Search keywords, e.g. "fintech bangalore" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
search_jobs Search jobs ~123
Search LinkedIn jobs by keywords (and optional location). Returns title, location, posted time.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results (default 10) |
| cursor | string | – | Opaque nextCursor from the same tool, query and count. Do not combine with offset. |
| keywords | string | yes | Job search keywords, e.g. "software engineer" |
| location_geo_id | string | – | Optional LinkedIn geo URN id to scope the location |
| offset | integer | – | Explicit zero-based offset; maximum 1000. One provider page per call. |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
search_people Search people ~66
Search LinkedIn people by keywords. Returns name, headline, location, and public identifier (pass that to get_profile for full details).
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results (default 10) |
| keywords | string | yes | Search keywords, e.g. "recruiter at Google" |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
send_message Send message ~286
[ALPHA, write] Send a message. Pass thread_id / conversation_urn to REPLY into an existing conversation; new threads require a separate experimental opt-in and lack current live success evidence. Gated: requires confirm:true. Returns a structured status. Counts against the daily message cap.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to actually execute. Omit/false = refuse (safety). |
| message | string | yes | Message body (multiline supported) |
| operation_id | string | – | Caller-generated unique ID (8-128 letters, digits, _ or -). Reuse the same ID and inputs to retrieve the stored outcome without resubmitting, including after a timeout. If omitted for a preview, the… |
| preview_hash | string | – | Hash returned by the reviewed preview. Rejects changed target/content before any browser action. |
| preview_token | string | – | Server-issued, five-minute preview token. Required for a new submission together with its operation_id. Not required for a journal lookup. |
| recipient_urn | string | – | Recipient member URN (urn:li:fsd_profile:ACoAA…). Required when starting a NEW thread. |
| thread_id | string | – | Existing thread id (2-…) or full msg_conversation urn to reply into (preferred over recipient_urn). |
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
whoami Inspect local session ~19
Report server version, browser/login status, and capabilities.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | – |
| data | – | yes | – |
| error | string | – | – |
| hint | string | – | – |
| meta | object | yes | – |
| tool | string | – | – |
No examples provided.
How do I install the io.github.devag7/linkedin-mcp server?
io.github.devag7/linkedin-mcp runs locally as an npm package, launched with npx -y linkedin-mcp-tools. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · linkedin-mcp-tools
claude mcp add devag7-linkedin-mcp -- npx -y linkedin-mcp-tools
What is the io.github.devag7/linkedin-mcp server?
io.github.devag7/linkedin-mcp is listed in the public MCP registry as io.github.devag7/linkedin-mcp. Unofficial local LinkedIn research and opt-in alpha writes; live compatibility is unverified. This page covers its npm package (linkedin-mcp-tools).
Is the io.github.devag7/linkedin-mcp server safe to use?
io.github.devag7/linkedin-mcp scores 95 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.devag7/linkedin-mcp server expose?
io.github.devag7/linkedin-mcp exposes 24 tools: whoami, health_check, close_session, get_my_profile, get_profile, and 19 more. Their descriptions and schemas cost roughly 2,510 tokens of context every time the server is loaded.
Is the io.github.devag7/linkedin-mcp server still maintained?
io.github.devag7/linkedin-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.devag7/linkedin-mcp server under?
io.github.devag7/linkedin-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.