Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Trackly CLI

NPM · TRACKLY-CLI · 2 COMPONENTS

Search Thousands of jobs, Thousands of companies. MCP for Claude, ChatGPT, Codex and Cursor.

−11 this week 82 Trust /100

Last scanned (6 hours ago)

Scores higher than 72% of npm servers

Category CRM and Sales

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security63
  • No malware found by supply-chain analysis.Pass
  • Known CVEs could not be checked: the version this server declares is not published in its registry.Unverified
  • No install/post-install scripts declared.Pass
  • Dependency health could not be checked: the version this server declares is not published in its registry.Unverified
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to trackly-app/trackly-cli). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability76
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 8611 tokens (~145/item across 59 items; 58 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
  • Stability check failed: the tool surface changed between 0.18.6 and 0.25.0: 0 tool removals, 3 breaking changes, 0 additions. See how to fix → Fail
Tool Coverage77
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 32% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 58 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 59 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 −11
    • Stability: fail → unverified ▼ security
    • Known CVEs: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Schema quality: 100 → unverified ▼ functional
    • Dependency health: 0.88 → unverified ▼ functional
    • Package version: 0.24.0 → 0.25.0 functional
  • 4 Nov 26 +11
    • Known CVEs: unverified → pass ▲ security
    • Dependency health: unverified → 0.88 ▲ functional
  • 3 Nov 26 −11
    • Known CVEs: pass → unverified ▼ security
    • Dependency health: 0.88 → unverified ▼ functional
    • Package version: 0.23.0 → 0.24.0 functional
  • 29 Oct 26 +15
    • Stability: fail → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Malware scan: unverified → pass ▲ security
    • Tool coverage: 100 → unverified ▼ functional
    • Capabilities: pass → unverified ▼ functional
    • Schema quality: 100 → unverified ▼ functional
    • Package version: 0.22.3 → 0.23.0 functional
  • 28 Oct 26 −15
    • Malware scan: pass → unverified ▼ security
    • Package version: 0.22.2 → 0.22.3 functional
  • 26 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 91 to 94.

  • 25 Oct 26 +14
    • Malware scan: unverified → pass ▲ security
  • 24 Oct 26 −12
    • CVE-2026-110095 affects this package: high ▼ security
    • CVE-2026-110306 affects this package: high ▼ security
    • CVE-2023-54404 affects this package: high ▼ security
    • CVE-2026-110725 affects this package: high ▼ security
    • CVE-2026-110180 affects this package: high ▼ security
    • Malware scan: pass → unverified ▼ security
    • CVE-2026-109955 no longer affects this package ▲ security
    • CVE-2026-111997 no longer affects this package ▲ security
    • Known CVEs: fail → pass ▲ security
    • Package version: 0.22.1 → 0.22.2 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/trackly-cli@0.25.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo trackly-app/trackly-cli
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/trackly-app/trackly-cli/.github/workflows/publish.yml@refs/heads/main
Rekor log index 3692559617
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:4e4721bd215eede80ce08a58456a3282fdc92f3bd67c26c3f4a1508b7d453fd0e5d0d30021b8f7b2599dc0e490bd27267006847abc35fb6d823957f6e

Background: How many MCP packages publish verified provenance →

MCP tools · 58 exposed · ~8,594 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_more_tools ~110

Report a capability Trackly does not currently provide. Use structured categories; context is optional and is classified but never stored as raw text.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
requestedActionstring––
requestedCapabilitystring––
requestedDestinationstring––
requestedResourcestring––

No output schema declared.

No examples provided.

trackly_advance_apply_execution ~157

Advance an execution transactionally for the current browser surface. Returns the immutable proposedWave with frozen accessKnowledge receipts and never opens a browser. Same-key replay returns the same members, order, and rationale. Optional hash-bound accessReviewApproval probes the exact proposed job IDs only after personal deferments are cleared.

NameTypeReqDescription
accessReviewApprovalobject––
browserSurfacestringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–
expectedRevisionintegeryes–
idempotencyKeystringyes–

No output schema declared.

No examples provided.

trackly_approve_apply_batch_resume ~184

Record one explicit content approval for the exact default-resume identity and complete current eligible frozen run set. This does not upload the file; every actual attachment still requires immediate path/hash verification.

NameTypeReqDescription
batchIdintegeryes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
expiresAtstringyes–
idempotencyKeystringyes–
leaseTokenstringyes–
memberRunsarrayyes–
membershipHashstringyes–
profileRevisionintegeryes–
resumeFilenamestringyes–
resumeIdintegeryes–
resumeSha256stringyes–
resumeSizeBytesintegeryes–

No output schema declared.

No examples provided.

trackly_approve_apply_execution_resume ~185

Approve one exact resume identity for the unchanged original snapshot of an Apply execution. This content approval may be reused across replacement waves, but every run still requires immediate local path, hash, size, and expiration verification before upload.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–
expectedRevisionintegeryes–
expiresAtstringyes–
idempotencyKeystringyes–
originalSnapshotHashstringyes–
profileRevisionintegeryes–
resumeFilenamestringyes–
resumeIdintegeryes–
resumeSha256stringyes–
resumeSizeBytesintegeryes–

No output schema declared.

No examples provided.

trackly_ask ~103

Natural language job search. Describe what you are looking for and the AI parses it into structured filters. Limited to 20 queries per day.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
querystringyesNatural language search query, e.g. "PM jobs at fintech companies in SF"

No output schema declared.

No examples provided.

trackly_bind_apply_surface ~185

Bind an initial or recovered browser surface to an existing frozen member and run. This increments the inspection epoch and returns only the exact backend-stored requisition URL; it never creates a replacement run.

NameTypeReqDescription
adapterCodestringyes–
batchIdintegeryes–
bindingReasonstringyes–
browserBindingHashstringyes–
browserSurfacestringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
expectedInspectionEpochintegeryes–
expectedMemberVersionintegeryes–
idempotencyKeystringyes–
leaseTokenstringyes–
memberIdintegeryes–
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_cancel_apply_batch ~122

Retire a legacy fixed Apply batch after the user explicitly chooses to start fresh. This preserves submitted work, Check Later jobs, and browser tabs; it never submits an application.

NameTypeReqDescription
batchIdintegeryes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
expectedRevisionintegeryes–
idempotencyKeystringyes–
reasonCodestringyes–

No output schema declared.

No examples provided.

trackly_certify_apply_batch_truth ~197

Record a late, expiring truthfulness certification over final answer and wording fingerprints for the exact complete subset that is currently review-ready. Unresolved members remain resumable and do not block ready siblings. This never becomes a profile answer.

NameTypeReqDescription
answerSnapshotHashstringyes–
batchIdintegeryes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
expiresAtstringyes–
idempotencyKeystringyes–
leaseTokenstringyes–
memberRunsarrayyes–
membershipHashstringyes–
profileRevisionintegeryes–
resumeDependencystringyes–
resumeId–––
resumeSha256–––
wordingFingerprintstringyes–

No output schema declared.

No examples provided.

trackly_checkpoint_apply_batch ~115

Bulk-checkpoint up to 20 browser inspections. Persist only typed actions and redacted fingerprints; never send labels, options, answers, credentials, OTPs, CAPTCHA text, or page content.

NameTypeReqDescription
batchIdintegeryes–
checkpointsarrayyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
leaseTokenstringyes–

No output schema declared.

No examples provided.

trackly_claim_apply_batch ~109

Acquire or renew the optimistic lease required before mutating browser-bound batch members.

NameTypeReqDescription
batchIdintegeryes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
expectedRevisionintegeryes–
leaseDurationMsintegeryes–
leaseOwnerstringyes–
leaseTokenstringyes–

No output schema declared.

No examples provided.

trackly_claim_apply_review_handoff ~118

Claim one exact, unambiguous review-handoff group and classify every member before grouped submission reconciliation. Never use this tool to infer submission or replace success-page evidence or explicit user confirmation.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
handoffIdintegeryes–
idempotencyKeystringyes–
membersarrayyes–

No output schema declared.

No examples provided.

trackly_clear_apply_access_deferment ~99

Clear one explicit user deferment previously listed or created in this session. An exact same-session retry remains idempotent.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
defermentIdintegeryes–
idempotencyKeystringyes–

No output schema declared.

No examples provided.

trackly_contacts_at_company ~99

Search contacts at a specific company. Returns matching contacts with name, title, email, and status.

NameTypeReqDescription
companystringyesCompany name to search contacts for
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
limitnumber–Max results (default 20)

No output schema declared.

No examples provided.

trackly_create_apply_batch ~93

Freeze an exact recent-first set of approved Check Later jobs before browser work. New queue entries never change this batch.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idempotencyKeystringyes–
limitintegeryes–

No output schema declared.

No examples provided.

trackly_defer_apply_access ~136

Persist an explicit user deferment for one Trackly job or its derived company or provider scope. Provider scope applies across companies until explicitly cleared. The server derives company, provider, tenant, origin, and route from jobId; never submit a provider name, URL, or free text.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idempotencyKeystringyes–
jobIdintegeryes–
scopestringyes–

No output schema declared.

No examples provided.

trackly_diagnose_local_path ~114

Locally diagnose the exact filesystem path implicated by an I/O failure. Reports measured capacity, inode, mount, quota observability, and write-probe evidence without deleting user files or claiming a global disk cause.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
exactPathstringyes–
originalErrnostring––

No output schema declared.

No examples provided.

trackly_get_active_apply_batch ~109

Recover the newest unexpired frozen Apply batch for this user after context loss. Returns active=false when no resumable batch exists.

NameTypeReqDescription
actionCursorstring––
actionLimitinteger––
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
cursorstring––
limitinteger––

No output schema declared.

No examples provided.

trackly_get_active_apply_execution ~68

Recover the active Apply execution before recovering or creating a legacy fixed batch.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_get_application_profile ~110

Get the versioned application profile. Sensitive values are returned only after the user opted into encrypted storage.

NameTypeReqDescription
companyIdstring––
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
includeSensitiveboolean––
jurisdictionstring––
officestring––
providerstring––

No output schema declared.

No examples provided.

trackly_get_apply_batch ~113

Read an existing frozen Apply batch by opaque server pagination. Do not reorder, replace, or rescore members.

NameTypeReqDescription
actionCursorstring––
actionLimitinteger––
batchIdintegeryes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
cursorstring––
limitinteger––

No output schema declared.

No examples provided.

trackly_get_apply_evidence ~101

Get the authenticated user's aggregate, value-free Apply beta evidence and release gate. The report never returns answers, contact values, addresses, or page text.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
targetReviewedRunsinteger––
windowDaysinteger––

No output schema declared.

No examples provided.

trackly_get_apply_execution ~77

Read the authoritative execution state, latest current-wave identity, and aggregate progress funnel.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–

No output schema declared.

No examples provided.

trackly_get_apply_execution_snapshot ~137

Fetch a compact, bounded projection for one Apply execution. Request only the current members and profile keys needed for the visible form. The response owns mutability, allowed operations, milestones, lease timing, and progress.

NameTypeReqDescription
browserSurfacestringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–
memberIdsarrayyes–
officeProjectionsarray––
profileKeysarray––

No output schema declared.

No examples provided.

trackly_get_apply_protocol ~92

Get the current browser workflow, ATS support matrix, integrity rules, and compatible public-skill major version. Fetch at the start of every run and again after maintenance before resuming the existing run.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_get_apply_queue ~92

Get the deterministic queue of jobs the user already approved by saving as check later. Do not rescore or veto these jobs.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
cursorstring––
limitinteger––

No output schema declared.

No examples provided.

trackly_get_company_workspace ~87

Get the full workspace view for a company: active jobs, contacts, hiring managers, coverage gap, and campaign status.

NameTypeReqDescription
companyIdnumberyesCompany ID
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_get_job ~140

Get full details for a Trackly job ID returned by search or your saved queue. Missing or closed postings return availability=unavailable with retryable=false and a next step; do not retry that ID. Failures include a category and retry guidance.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idintegeryesPositive numeric Trackly job ID from trackly_search_jobs or your saved queue, not an employer requisition ID or URL. Correct invalid arguments before retrying.

No output schema declared.

No examples provided.

trackly_get_job_brief ~145

Get a network brief for a Trackly job ID, including company signal, recommended motion, top contact and suggested actions. Missing or closed postings return availability=unavailable with retryable=false; search for another opening. Failures include a category and retry guidance.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
jobIdintegeryesPositive numeric Trackly job ID from trackly_search_jobs or your saved queue, not an employer requisition ID or URL. Correct invalid arguments before retrying.

No output schema declared.

No examples provided.

trackly_get_preferences ~85

Read the authenticated user's discovery preferences, including selected and effective job functions, role-specific experience limits and active state, and the discoveryPreferenceRevision required for a safe update.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_get_profile_onboarding ~75

Get the backend-owned profile schema and onboarding questions. Ask only fields whose state is unknown or needs confirmation.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_get_stats ~66

Get job tracker metrics: total jobs, companies, application status counts.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_lint_application_text ~159

Locally lint a draft before form entry. Returns only a draft hash, length, policy, and stable violation codes. The draft is never sent to Trackly or echoed in the result.

NameTypeReqDescription
claimsarrayyes–
claimsCompletebooleanyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
emDashPolicystring––
maxLengthinteger––
minLengthinteger––
prohibitedPhrasesarray––
textstringyes–
voiceSampleAllowsEmDashboolean––

No output schema declared.

No examples provided.

trackly_list_apply_access_deferments ~87

List the current user's persistent Apply access deferments. Returns only job, company, or provider scope identities; never URLs, provider names, or chat text.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_list_apply_review_handoffs ~102

List active, nonexpired review-handoff receipts for one execution after context loss. Returns only stable IDs, lifecycle metadata, and member bindings; never browser values, URLs, or local paths.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–

No output schema declared.

No examples provided.

trackly_list_companies ~81

List all tracked companies with their active job counts.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
limitnumber–Max results
offsetnumber–Pagination offset

No output schema declared.

No examples provided.

trackly_list_recoverable_apply_executions ~93

List bounded, value-free exact-member recovery candidates after local context loss. Show the stable job identities to the user and obtain explicit confirmation before recovery; never infer or substitute candidates.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.

No output schema declared.

No examples provided.

trackly_prepare_resume ~104

Download the authenticated default resume into a mode-0600 temporary Trackly cache and return exact-file proof for user confirmation before browser upload.

NameTypeReqDescription
browserBindingHashstringyes–
browserSurfacestringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_record_application_outcome ~160

Record review readiness or a user-confirmed outcome. Before handoff use literal outcome=review_ready and verify awaiting_manual_submit. Mark submitted with literal outcome=submitted only after a success page or explicit user confirmation.

NameTypeReqDescription
batchIdinteger––
confirmationstring––
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idempotencyKeystringyes–
inspectionEpochinteger––
leaseTokenstring––
memberIdinteger––
outcomestringyes–
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_record_application_outcomes ~131

Bulk-record up to 20 leased, batch-bound review or user-confirmed outcomes. Before handoff every item uses literal outcome=review_ready and every recorded run must return awaiting_manual_submit. After manual confirmation use literal outcome=submitted. Each member returns recorded or a stable conflict without hiding sibling results.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idempotencyKeystringyes–
outcomesarrayyes–

No output schema declared.

No examples provided.

trackly_record_apply_execution_dispositions ~148

Record up to 20 typed, value-free live-probe access classifications, each bound to the exact current batch, member, run, and browser surface. Cache hints and static policy are server-owned. Never include URLs, labels, answers, credentials, OTPs, CAPTCHA text, or page content.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
dispositionsarrayyes–
executionIdintegeryes–
expectedRevisionintegeryes–
idempotencyKeystringyes–

No output schema declared.

No examples provided.

trackly_record_apply_submission_evidence ~188

Record redacted request, success-page, explicit user-confirmation, or provider-receipt evidence for the current batch member and inspection epoch. Never send page text, receipt identifiers, or external references.

NameTypeReqDescription
batchIdintegeryes–
browserBindingHashstringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
evidenceFingerprintstringyes–
evidenceSourcestringyes–
evidenceTypestringyes–
expectedInspectionEpochintegeryes–
expectedMemberVersionintegeryes–
idempotencyKeystringyes–
leaseTokenstringyes–
memberIdintegeryes–
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_record_apply_surface_evidence ~211

Record value-free current-epoch inventory, missing-tab, close-receipt, post-close absence, or close-failure evidence. closed_verified requires complete controller+user union inventory, an explicit close receipt, and post-close union absence.

NameTypeReqDescription
adapterCodestringyes–
batchIdintegeryes–
browserBindingHashstringyes–
browserSurfacestringyes–
completeInventorybooleanyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
evidenceTypestringyes–
expectedInspectionEpochintegeryes–
expectedMemberVersionintegeryes–
idempotencyKeystringyes–
leaseTokenstringyes–
memberIdintegeryes–
ownershipStatestringyes–
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_recover_exact_apply_members ~124

Create an exact-member recovery execution from one confirmed source snapshot. The asserted candidate set is immutable and replacements are forbidden.

NameTypeReqDescription
candidateIdsarrayyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
explicitExactSetConfirmationbooleanyes–
idempotencyKeystringyes–
sourceExecutionIdintegeryes–
sourceSnapshotHashstringyes–

No output schema declared.

No examples provided.

trackly_report_apply_observation ~163

Report a redacted ATS mechanics or scenario-coverage observation. Never include answer values, addresses, contact data, OTPs, or free-form page content.

NameTypeReqDescription
batchIdinteger––
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
fieldLabelstringyes–
inspectionEpochinteger––
leaseTokenstring––
memberIdinteger––
metadataobjectyes–
observationTypestringyes–
providerstringyes–
resolutionCodestring––
runIdintegeryes–

No output schema declared.

No examples provided.

trackly_report_apply_observations ~101

Bulk-report up to 20 redacted, batch-bound ATS mechanics or scenario-coverage observations in one request. Never include answer values, addresses, contact data, OTPs, or page content.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
observationsarrayyes–

No output schema declared.

No examples provided.

trackly_request_company ~167

Request that a company be added to Trackly's tracked companies. Use when the user asks about a company that isn't in trackly_search_companies / trackly_list_companies results. Rate-limited to 5 pending requests per user.

NameTypeReqDescription
companyNamestringyesCompany name (e.g. "eBay")
companyUrlstring–Optional careers page or homepage URL (e.g. "https://careers.ebay.com")
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
notesstring–Optional context (e.g. "MBA hiring page", "specific role I want tracked")

No output schema declared.

No examples provided.

trackly_resume_parked_apply_member ~146

Resume one parked execution member only after the user explicitly requests it. This requires a fresh non-mutating access probe and never authenticates, enters private data, or makes the member mutable by itself.

NameTypeReqDescription
browserSurfacestringyes–
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
executionIdintegeryes–
expectedRevisionintegeryes–
explicitUserResumebooleanyes–
idempotencyKeystringyes–
memberIdintegeryes–

No output schema declared.

No examples provided.

trackly_search_companies ~87

Semantic search for companies by name, domain, or keywords.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
limitnumber–Max results (default 10)
querystringyesSearch query

No output schema declared.

No examples provided.

trackly_search_jobs ~1,360

Search and filter job postings. Returns one matching page with title, company, location, structured fields and backend pagination. Use jobFunctions for multiple roles, region for multiple regions, and usStates/caProvinces for geographic detail. Work arrangement is independent from geography and employment type. Unknown sponsorship and non-comparable salary data stay visible with exclude_no and salaryFloorUsd. Never invent industry, specialization, exclusion or literal-search controls; ask when sponsorship intent is ambiguous. If the total is unavailable, returned matching jobs remain valid. Explain countGuidance and use hasMore/pagination; do not retry just for totals.

NameTypeReqDescription
caProvincesarray–Canadian province/territory codes or REMOTE. Multiple values select alternatives. REMOTE alongside codes also includes remote jobs. Parent-scoped OR requires canonical location enforcement. Do not co…
companyIdinteger–Filter jobs by company ID (get from trackly_search_companies)
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
favoriteCompaniesOnlyboolean–true limits results to your favorited companies; false explicitly disables this restriction.
functionstring–Job function filter. One of: product, engineering, design, data, marketing, sales, partnerships, finance, strategy, operations, people, legal, support, other
internshipLevelsarray–Internship education levels, combined with OR: undergraduate, graduate, mba, not_specified. Applies to internships in jobModality=internship or all; full-time jobs remain unaffected. This does not ch…
jobFunctionsarray–Multiple job functions, combined with OR. Use instead of function. Omit both to request all 14 functions.
jobModalitystring–Employment type (NOT work arrangement). full_time = full-time roles, internship = internships, all = both. Use workArrangements for remote, hybrid, or in-person classification.
keywordsstring–Legacy keyword search. Title/company/location matches are supported; description recall depends on the backend provider. Not a guaranteed full-catalog literal/phrase/exclusion search.
limitinteger–Page size, integer 1-100; MCP default 20 for concise agent results. Request up to the full API limit of 100 when needed.
locationFilter––Region tag filter. Pass ONE of: (a) a single scalar from 'us', 'non_us', 'all', or a REGION_TAGS value ('europe', 'latam', 'middle_east', 'asia', 'africa', 'canada', 'oceania', 'remote', 'unknown');…
offsetinteger–Pagination offset, non-negative integer. Keep filters and sort unchanged when paging; live catalog changes can move rows.
postedWithinDays––Posting-recency window in days: 1, 3, 7, 14, or 30; 0 disables the saved window. Uses the backend discovery-date policy; not an incremental-sync cursor. Omitted uses the saved/default window only whe…
regionarray–Region tags combined with OR, including us. Use instead of locationFilter; this avoids its legacy mixed-US list limitation. Geographic child behavior follows the backend location rollout.
remoteboolean–Filter to global remote-only jobs (maps to usStates=REMOTE). Do not combine with region/locationFilter or geographic child arrays. For remote work within a region, use workArrangements=["remote"] wit…
roleTypesarray–Role type filter: corporate (default), frontline (store, warehouse, food service, driving, security, skilled trades, care aides), or both. Omitted uses the student's saved preference. Applies to stat…
salaryFloorUsdinteger–Annual USD minimum salary floor. Excludes comparable listed annual-USD minimums below this amount; unknown, hourly and non-USD salaries remain visible. 0 disables the floor. Omitted uses saved/defaul…
sincestring–Incremental sync: jobs first seen by Trackly since this ISO-8601 date/timestamp, not employer posting dates. Must be within the past 90 days and not in the future; backend validates the range. Prefer…
sortstring–Sort order: newest (default) or match (highest match score first; requires resume). Backend rejects legacy oldest/company with HTTP 400.
sponsorshipstring–Visa sponsorship: all applies no filter; exclude_no removes reliable explicit no statements and keeps yes plus unknown/not mentioned; only_yes requires reliable explicit yes and excludes unknown. 'No…
statusstring–Filter by YOUR application pipeline state. Not a generic job-posting status. Values: new, applied_confirmed, check_later, not_interested, all
usStatesarray–US state codes, DC, PR, or REMOTE. Multiple values select alternatives. REMOTE alongside codes also includes remote jobs. Under canonical location enforcement children select their parent; legacy rol…
workArrangementsarray–Work arrangement filter, independent from geography and employment type. Values: remote, hybrid, in_person, unspecified. Multiple values use OR semantics.

No output schema declared.

No examples provided.

trackly_start_apply_execution ~156

Start a server-owned no-submit execution. For named or explicitly selected jobs, supply their exact ordered jobIds and set target to their count; no replacement outside that set is allowed. Omit jobIds only for a user-requested recent-first queue target. Consume authoritative progress and nextAction; never fall back to count-only after an exact selection is rejected.

NameTypeReqDescription
contextstring–Briefly explain why this tool helps the current job-search goal. Never include resume text, profile answers, demographic or work-authorization answers, application notes, credentials, or secrets.
idempotencyKeystringyes–
jobIdsarray––
modestringyes–
targetintegeryes–

No output schema declared.

No examples provided.

Install

How do I install the Trackly CLI MCP server?

Trackly CLI runs locally as an npm package, launched with npx -y trackly-cli. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · trackly-cli

# add to Claude Code
claude mcp add trackly-app-trackly -- npx -y trackly-cli
Common questions

What is the Trackly CLI MCP server?

Trackly CLI is an MCP server listed in the public MCP registry as io.github.trackly-app/trackly. Search Thousands of jobs, Thousands of companies. MCP for Claude, ChatGPT, Codex and Cursor. This page covers its npm package (trackly-cli).

Is the Trackly CLI MCP server safe to use?

Trackly CLI scores 82 out of 100 on VerifyMCP. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Trackly CLI MCP server expose?

Trackly CLI exposes 58 tools: trackly_search_jobs, trackly_get_job, trackly_search_companies, trackly_list_companies, trackly_get_stats, and 53 more. Their descriptions and schemas cost roughly 8,594 tokens of context every time the server is loaded.

Is the Trackly CLI MCP server still maintained?

Trackly CLI is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Trackly CLI MCP server under?

Trackly CLI declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.