# io.github.work0r-ai/workorai (remote · workorai.com)

WorkorAI talent marketplace MCP: candidate job search and employer hiring with explainable matching

- Trust score: 63/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `workorai.com`: 63/100 (this document), [markdown](https://verifymcp.io/servers/work0r-ai-workorai/workorai.md), [page](https://verifymcp.io/servers/work0r-ai-workorai/workorai)

## Channel facts

- Endpoint: `https://workorai.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.4.3`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 29 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 67/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3318 tokens (~114/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 82/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 37% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http work0r-ai-workorai https://workorai.com/mcp
```

### Codex

```toml
[mcp_servers.work0r-ai-workorai]
url = "https://workorai.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "work0r-ai-workorai": {
      "type": "remote",
      "url": "https://workorai.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add work0r-ai-workorai --url https://workorai.com/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  work0r-ai-workorai:
    url: "https://workorai.com/mcp"
```

### Other

```json
{
  "mcpServers": {
    "work0r-ai-workorai": {
      "type": "http",
      "url": "https://workorai.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 62, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 61, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 60, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 59, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 58)

First indexed and scored.

## MCP tools (29)

### `request_access` (~69 tokens)

Request access

Use when someone wants to find work/jobs (candidate) or hire/find candidates (employer) but the authenticated role tools are not usable yet. Explains role-specific onboarding (candidate profile interview, employer key generation), MCP key location, and next steps for both surfaces.

Input parameters:

- `role` (string)

Output parameters:

- `capabilityManifest` (object)
- `guides` (array)
- `message` (string)

### `candidate.search_jobs` (~293 tokens)

Search matched jobs

Semantically rank published jobs against the authenticated candidate profile (embedding-based fit). Optional tier (best|good|weak) narrows to a match-quality band — start with tier:'best' for the strongest fits and cascade only if needed; omit for the full ranked list (read tierCounts for the band sizes). Each scored row carries matchExplanation (the white-box 'why': fit score, the candidate's skills that match the job's required set, and a rationale). A free-text `q`, or a candidate who has not completed an interview yet, instead browses published jobs by recency — those rows carry NO fit score (`matchScore` is `null`, no bands); treat them as a browse list, not a ranking.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobType` (string)
- `limit` (number)
- `offset` (number)
- `q` (string)
- `seniority` (string)
- `tier` (string): Match-quality band. Omit for the full ranked list. START with tier:"best" (strongest fits), cascade to "good"/"weak" only if you need more; read tierCounts to decide. Ignored on a free-text q / no-in…
- `workModel` (string)

Output parameters:

- `filters` (object)
- `jobs` (array)
- `ok` (boolean)
- `page` (object)
- `tierCounts` (object): Band sizes for a tier cascade: matched = jobs covering >=1 required skill, unmatched = none; best/good/weak split the matched pool (all bands 0 on a free-text q / no-interview browse). Start at tier:…

### `candidate.get_job` (~50 tokens)

Get job

Fetch a single published job by id.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `candidate.get_applications` (~82 tokens)

Get applications

List the candidate's own job applications (newest first) with status, dates, the originating interview score, and a job summary. Returns only the caller's applications — no jobId input, so it is not an enumeration surface.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.

Output parameters:

- `applications` (array)
- `ok` (boolean)

### `candidate.set_saved_job` (~120 tokens)

Save / unsave job

Set whether a PUBLISHED job is in the candidate's saved list (idempotent desired-state, NOT a toggle — pass saved:true to bookmark, saved:false to remove). Returns NOT_FOUND for a missing or non-public job.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)
- `saved` (boolean, required): Desired saved state. true bookmarks the job, false removes the bookmark. Idempotent — a retry never flips the state.

Output parameters:

- `ok` (boolean)
- `saved` (boolean)

### `candidate.get_saved_jobs` (~69 tokens)

Get saved jobs

List the candidate's saved (bookmarked) jobs, newest first. Only currently PUBLISHED jobs are returned — a job saved earlier then closed/archived is omitted.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.

Output parameters:

- `ok` (boolean)
- `savedJobs` (array)

### `candidate.accept_invitation` (~109 tokens)

Accept invitation

Accept an employer's invitation to a job (INVITED -> APPLIED). Idempotent — accepting an already-accepted invite succeeds. Returns NOT_INVITED when there is no open invitation (e.g. already withdrawn/declined), and NOT_FOUND when the job/invite is not found or the job is no longer public.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `ok` (boolean)
- `status` (string)

### `candidate.decline_invitation` (~116 tokens)

Decline invitation

Decline an employer's invitation to a job (INVITED -> DECLINED). TERMINAL — a declined invite blocks any re-invite from the employer, so only decline when the candidate is sure. Idempotent (declining again succeeds). Returns NOT_INVITED when there is no open invitation, NOT_FOUND when the job/invite is not found.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `ok` (boolean)
- `status` (string)

### `candidate.withdraw_application` (~102 tokens)

Withdraw application

Withdraw the candidate's active application to a job (APPLIED -> WITHDRAWN). Idempotent (withdrawing again succeeds). Returns NOT_APPLIED when there is no active application (e.g. only an open invitation, or already declined), and NOT_FOUND when no application exists for the job.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `ok` (boolean)
- `status` (string)

### `candidate.apply_to_job` (~117 tokens)

Apply to job

Apply the candidate to a PUBLISHED job, reusing their evaluated profile interview as evidence. Idempotent (re-applying succeeds; `reused` is true when an application row already existed). Requires a completed + evaluated interview — otherwise returns GATE_LOCKED / GATE_EVALUATING / GATE_FAILED. A missing or non-public job returns NOT_FOUND.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `applicationId` (string)
- `ok` (boolean)
- `reused` (boolean)
- `status` (string)

### `employer.list_jobs` (~62 tokens)

List jobs

List jobs owned by the current employer account.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `limit` (number)
- `offset` (number)
- `status`

Output parameters:

- `filters` (object)
- `jobs` (array)
- `ok` (boolean)
- `page` (object)

### `employer.get_job` (~69 tokens)

Get job

Fetch a single employer job record by id. Returns NOT_FOUND for missing jobs and for jobs owned by another employer (no existence leak).

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.create_job` (~138 tokens)

Create job

Parse raw text via Gemini AI and create a DRAFT job under the current employer. Synchronous: latency 5-30s. The agent can then call employer.update_job to refine fields and employer.publish_job to make it live.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `rawText` (string, required): Free-form job description (up to 10000 characters). Parsed by Gemini AI; the call typically takes 5-30 seconds. On a client-side timeout, recover by calling employer.list_jobs with status=DRAFT and p…

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.update_job` (~96 tokens)

Update job

Update the fields of an existing employer job. Accepts a partial whitelist; rawInput and dataSource are not editable (the wrapper auto-flips dataSource to USER_EDITED on every agent update). Non-owner reads return NOT_FOUND.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `fields` (object, required)
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.publish_job` (~72 tokens)

Publish job

Transition a DRAFT job to PUBLISHED. Returns NOT_FOUND for missing or non-owner jobs and CONFLICT when the job is not in DRAFT.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.close_job` (~71 tokens)

Close job

Transition a PUBLISHED job to CLOSED. Returns NOT_FOUND for missing or non-owner jobs and CONFLICT when the job is not in PUBLISHED.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.archive_job` (~70 tokens)

Archive job

Transition a CLOSED job to ARCHIVED. Returns NOT_FOUND for missing or non-owner jobs and CONFLICT when the job is not in CLOSED.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `job` (object)
- `ok` (boolean)

### `employer.delete_job` (~75 tokens)

Delete job

Permanently delete a DRAFT job that was never published. Returns NOT_FOUND for missing or non-owner jobs and CONFLICT when the job is not in DRAFT.

Input parameters:

- `apiKey` (string): Optional WorkorAI MCP key for in-session authentication when the MCP client was initialized anonymously.
- `jobId` (string, required)

Output parameters:

- `jobId` (string)
- `ok` (boolean)

### `employer.search_candidates_for_job` (~441 tokens)

Search candidates for a job

Semantically rank discoverable (interviewed) candidates against one of the employer's own jobs, with a per-candidate fit score AND a white-box explanation. WORKFLOW for finding the best hire: 1) call with tier:'best' to get the strongest candidates (cover the required skills + proven in interview), cascade to tier:'good' then tier:'weak' only if you need more (read tierCounts to decide; paginate within a band via page.hasMore, not page.total); 2) each row carries matchExplanation — the white-box 'why' (the fit score, the skills the candidate PROVED in their interview, what they're missing, and a plain-English rationale) — use it to explain your shortlist on OUR data, not a black box; 3) for the few you shortlist, call employer.get_candidate_evidence(jobId, userId) for the interview facts + Q&A to write a deeper comparative review. Omit tier for the full ranked pool (back-compat). Returns NOT_FOUND when the job is missing / owned by another employer (no existence leak), or NOT_INDEXED / NO_CATEGORIES when the job is not indexed for semantic search yet (re-save / republish, then retry).

Input parameters:

- `apiKey` (string)
- `jobId` (string, required)
- `page` (number)
- `pageSize` (number)
- `sort` (string)
- `tier` (string): Match-quality band (required-skill coverage + fit). Omit to get the full ranked pool. To shortlist, START with tier:"best" — the strongest candidates (cover the required skills, proven in interview);…

Output parameters:

- `advisory` (object): OPTIONAL, present only when NO candidate reaches the Best tier for a constrained vacancy (best===0 but candidates exist below). A non-restrictive nudge to relay to the employer: the vacancy's must-ha…
- `entries` (array)
- `jobId` (string|null)
- `ok` (boolean)
- `page` (object)
- `reason` (string)
- `tierCounts` (object): Band sizes to plan a tier cascade: matched = cover >=1 required skill, unmatched = cover none; best/good/weak split the matched pool (best+good+weak === matched on a scored search; all bands 0 on a n…

### `employer.search_candidates_by_query` (~106 tokens)

Search candidates by query

Free-form semantic search across discoverable (interviewed) candidates with no job context. The query is embedded and candidates are ranked by semantic similarity — a preliminary search with no per-vacancy fit score (there is no vacancy to fit). For a scored ranking, use employer.search_candidates_for_job with a job id.

Input parameters:

- `apiKey` (string)
- `page` (number)
- `pageSize` (number)
- `query` (string, required)

Output parameters:

- `entries` (array)
- `jobId` (string|null)
- `ok` (boolean)
- `page` (object)
- `query` (string)
- `reason` (string)
- `tierCounts` (object)

### `employer.get_candidate` (~125 tokens)

Get candidate

Fetch a discoverable candidate by user id. Returns search-entry shape plus a light interview slice (overallScore + summary + completedAt + evaluatedAt) and `existingApplications`: every JobApplication this candidate has on any of the employer's jobs (all 4 statuses, all 4 job statuses) so the agent can decide whether re-inviting will succeed. Heavy artefacts (transcript, facts, resume, github, linkedin) live behind employer.get_applicant_detail and require an application.

Input parameters:

- `apiKey` (string)
- `userId` (string, required)

Output parameters:

- `candidate` (object)
- `ok` (boolean)

### `employer.get_candidate_evidence` (~191 tokens)

Get candidate interview evidence

Fetch the interview EVIDENCE (facts proven in the interview + their Q&A, the interview summary, the résumé summary, and GitHub/LinkedIn signals) for ONE candidate AGAINST one of your published jobs — the white-box basis to explain WHY a candidate ranks where they do. Use it AFTER search_candidates_for_job: shortlist with the scorecard, then read the evidence here for the few you care about and write your own comparative review. Returns NOT_FOUND if the job is missing / not yours / not published, or the candidate is not in that job's searchable pool.

Input parameters:

- `apiKey` (string)
- `jobId` (string, required): One of YOUR published vacancies — the evidence is scoped to it (must-linked facts use its required skills).
- `userId` (string, required): A candidate from search_candidates_for_job for THIS jobId. The interview evidence to explain your ranking.

Output parameters:

- `evidence` (object)
- `ok` (boolean)

### `employer.invite_candidate` (~214 tokens)

Invite candidate

Invite a discoverable candidate to one of the employer's PUBLISHED jobs. Creates a JobApplication with status=INVITED. If a prior WITHDRAWN row exists for this (candidate, job) pair, the row is UPDATEd back to INVITED (re-invite is allowed after the candidate withdrew on their own). INVITED, APPLIED, and DECLINED rows still block with INVITE_BLOCKED: INVITE_NOT_ALLOWED. Inspect `existingApplications` on employer.get_candidate before calling to know which case applies. Returns INVITE_BLOCKED with one of several sub-reasons (JOB_NOT_FOUND, JOB_NOT_PUBLISHED, CANDIDATE_NOT_FOUND, NOT_DISCOVERABLE, INVITE_NOT_ALLOWED) when the invite cannot be created. A missing vacancy and a vacancy owned by another employer both return JOB_NOT_FOUND (you cannot tell them apart — anti-enumeration).

Input parameters:

- `apiKey` (string)
- `candidateUserId` (string, required)
- `jobId` (string, required)

Output parameters:

- `applicationId` (string)
- `ok` (boolean)
- `status` (string)

### `employer.list_applicants` (~72 tokens)

List applicants

List the live (APPLIED) applicants on one of the employer's jobs. The candidate showcase + interview overallScore/summary are always returned; contact fields are only included when the application is SHORTLISTED or HIRED.

Input parameters:

- `apiKey` (string)
- `jobId` (string, required)

Output parameters:

- `applicants` (array)
- `jobId` (string)
- `ok` (boolean)

### `employer.set_review_status` (~93 tokens)

Set review status

Update the employer review state on an application (NEW / REVIEWING / SHORTLISTED / REJECTED / HIRED). SHORTLISTED and HIRED unlock the candidate's direct contact in subsequent list_applicants / get_applicant_detail calls. WITHDRAWN applications surface as CONFLICT.

Input parameters:

- `apiKey` (string)
- `applicationId` (string, required)
- `reviewStatus` (string, required)

Output parameters:

- `applicationId` (string)
- `ok` (boolean)
- `reviewStatus` (string)

### `employer.get_applicant_detail` (~85 tokens)

Get applicant detail

Full applicant bundle: resume, interview light slice (overallScore + summary + facts), GitHub analysis, LinkedIn analysis. The verbatim transcript is delivered by employer.get_applicant_transcript; the resume's contact fields are blanked unless the application is SHORTLISTED or HIRED.

Input parameters:

- `apiKey` (string)
- `applicationId` (string, required)

Output parameters:

- `detail` (object)
- `ok` (boolean)

### `employer.get_applicant_transcript` (~68 tokens)

Get applicant transcript

Verbatim interview transcript for one applicant. Ownership-only gate (same as the UI Download button — no SHORTLISTED/HIRED requirement). Returns an empty array when the source interview never produced turns.

Input parameters:

- `apiKey` (string)
- `applicationId` (string, required)

Output parameters:

- `applicationId` (string)
- `ok` (boolean)
- `transcript` (array)

### `employer.list_invitations` (~66 tokens)

List invitations

List the pending (INVITED) candidates on one of the employer's jobs — candidates who have been invited but have not yet accepted or declined.

Input parameters:

- `apiKey` (string): Employer MCP API key
- `jobId` (string, required): The job to list invitations for

Output parameters:

- `invitations` (array)
- `jobId` (string)
- `ok` (boolean)

### `employer.cancel_invitation` (~77 tokens)

Cancel invitation

Cancel a pending invitation sent to a candidate. The invitation record is deleted; the employer can re-invite the same candidate later.

Input parameters:

- `apiKey` (string): Employer MCP API key
- `candidateUserId` (string, required): The candidate whose invitation to cancel
- `jobId` (string, required): The job the invitation belongs to

Output parameters:

- `candidateUserId` (string)
- `jobId` (string)
- `ok` (boolean)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/work0r-ai-workorai/workorai#diagnostics

## Score history

- 2026-08-03: 63
- 2026-08-02: 63
- 2026-08-01: 62
- 2026-07-31: 62
- 2026-07-30: 61
- 2026-07-29: 60
- 2026-07-28: 60
- 2026-07-27: 59
- 2026-07-26: 58

## Links

- Remote endpoint: https://workorai.com/mcp
- Repository: https://github.com/work0r-ai/agent-kit
- Changelog RSS feed: https://verifymcp.io/servers/work0r-ai-workorai/workorai/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/work0r-ai-workorai/workorai/changelog.json
- HTML version of this page: https://verifymcp.io/servers/work0r-ai-workorai/workorai