LeashIndex Get the report

Index / messaging

HopeHire

in-hopehire-mcp declares 170 capabilities across 170 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://hopehire.in/mcp, published in the official MCP registry as in.hopehire/mcp 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 170 tools

170 of 170 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 76 of 170 tools

76 tools are classified as irreversible and declare no limit.

high · no-expiry · All 170 tools

170 of 170 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 170 tools

170 of 170 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 16 of 170 tools

16 tools can modify data and declare no limit.

low · uncapped-read · 78 of 170 tools

78 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_notifications_api_notifications_getread inferred
mark_all_notifications_as_read_api_notifications_read_all_postsend inferred
mark_notification_as_read_api_notifications__notification_id__read_patchread inferred
delete_notification_api_notifications__notification_id__deletedelete inferred
get_ats_score_api_resume_ats_score_getread inferred
refresh_ats_score_api_resume_ats_score_refresh_postsend inferred
resume_ai_chat_api_resume_ai_chat_postsend inferred
mark_improvement_suggestions_invalid_api_resume_improvement_suggestions_mark_invalid_postsend inferred
generate_yaml_version_api_resume_generate_yaml_postsend inferred
apply_suggestions_api_resume_apply_suggestions_postsend inferred
get_yaml_suggestions_api_resume_yaml_suggestions_postread inferred
generate_complete_resume_api_resume_generate_complete_postsend inferred
render_raw_yaml_api_resume_render_raw_yaml_postsend inferred
list_themes_api_resume_themes_getread inferred
apply_resume_theme_api_resume_apply_theme_postsend inferred
save_resume_yaml_api_resume_save_yaml_postsend inferred
create_resume_from_linkedin_api_resume_from_linkedin_postsend inferred
get_rendercv_pdf_api_resume_rendercv_pdf_getread inferred
get_rendercv_pdf_download_api_resume_rendercv_pdf_download_getread inferred
test_pdf_generation_api_resume_test_pdf_generation_getread inferred
debug_pdf_api_resume_debug_pdf_getread inferred
download_resume_api_resume_download_getread inferred
public_resume_api_resume_public_getread inferred
show_resume_api_resume__resume_id__getread inferred
get_resume_api_resume_getread inferred
upload_resume_api_resume_postsend inferred
update_resume_manual_api_resume_putwrite inferred
delete_resume_api_resume_deletedelete inferred
set_cold_email_resume_source_api_resume_cold_email_source_putsend inferred
get_preferences_api_job_preferences_getread inferred
create_preferences_api_job_preferences_postsend inferred
update_preferences_api_job_preferences_putwrite inferred
delete_preferences_api_job_preferences_deletedelete inferred
start_job_matching_api_job_matches_start_postsend inferred
get_filtered_jobs_api_job_matches_getread inferred
clear_job_matches_api_job_matches_deletedelete inferred
start_conversation_api_auto_apply_start_conversation_postsend inferred
start_auto_apply_api_auto_apply_postsend inferred
get_auto_apply_tasks_api_auto_apply_getread inferred
get_auto_apply_status_api_auto_apply__task_id__getread inferred
get_auto_apply_status_by_task_id_api_auto_apply_status__task_id__getread inferred
start_conversation_api_email_conversations_start_conversation_postsend inferred
get_conversations_api_email_conversations_getread inferred
get_conversation_details_api_email_conversations__conversation_id__getread inferred
pause_conversation_api_email_conversations__conversation_id__pause_postsend inferred
resume_conversation_api_email_conversations__conversation_id__resume_postsend inferred
send_manual_message_api_email_conversations__conversation_id__message_postsend inferred
resolve_protocol_api_email_conversations__conversation_id__resolve_postsend inferred
get_system_stats_api_multi_tenant_monitoring_stats_getread inferred
get_active_users_api_multi_tenant_monitoring_users_active_getread inferred
enable_user_monitoring_api_multi_tenant_monitoring_users__user_id__enable_postsend inferred
disable_user_monitoring_api_multi_tenant_monitoring_users__user_id__disable_postsend inferred
update_user_monitoring_config_api_multi_tenant_monitoring_users__user_id__config_putwrite inferred
trigger_user_discovery_api_multi_tenant_monitoring_discovery_trigger_postsend inferred
get_user_monitoring_status_api_multi_tenant_monitoring_users__user_id__status_getread inferred
get_email_analytics_report_api_reports__user_id___duration__getread inferred
get_email_analytics_summary_api_reports__user_id__summary_getread inferred
quick_answer_api_user_memory_quick_answer_postsend inferred
screening_suggestions_api_user_memory_screening_suggestions_getread inferred
get_user_memory_api_user_memory__user_id__getread inferred
create_user_memory_api_user_memory__user_id__postsend inferred
update_user_memory_api_user_memory__user_id__putwrite inferred
delete_user_memory_api_user_memory__user_id__deletedelete inferred
get_user_memory_history_api_user_memory__user_id__history_getread inferred
add_ai_interaction_context_api_user_memory__user_id__context_postsend inferred
update_remembered_field_answer_api_user_memory__user_id__remembered_field_putwrite inferred
delete_remembered_field_answer_api_user_memory__user_id__remembered_field_deletedelete inferred
apply_memory_suggestion_api_user_memory_apply_suggestion_postsend inferred
user_memory_ai_chat_api_user_memory_ai_chat_postsend inferred
get_available_senders_api_email_sender_pool_senders_getread inferred
get_least_used_sender_api_email_sender_pool_least_used_sender_getread inferred
get_fallback_sender_api_email_sender_pool_fallback_sender_getread inferred
send_email_via_pool_api_email_sender_pool_send_email_postsend inferred
get_my_footer_api_email_footer_me_getread inferred
update_my_footer_api_email_footer_me_putwrite inferred
get_email_footer_api_email_footer__user_id__getread inferred
update_email_footer_api_email_footer__user_id__putwrite inferred
get_formatted_footer_api_email_footer__user_id__formatted_getread inferred
generate_footer_from_resume_api_email_footer__user_id__generate_from_resume_postsend inferred
get_user_config_api_config_user__user_id__getread inferred
update_user_config_api_config_user__user_id__putwrite inferred
reset_user_config_api_config_user__user_id__deletedelete inferred
get_campaign_config_api_config_campaign__campaign_id__getread inferred
update_campaign_config_api_config_campaign__campaign_id__putwrite inferred
reset_campaign_config_api_config_campaign__campaign_id__deletedelete inferred
get_effective_config_api_config_effective__user_id__getread inferred
get_default_config_api_config_defaults_getread inferred
get_all_user_configs_api_config_admin_users_getread inferred
get_all_campaign_configs_api_config_admin_campaigns_getread inferred
get_available_leads_api_linkedin_leads_getread inferred
get_all_leads_admin_api_linkedin_leads_all_getread inferred
get_lead_stats_api_linkedin_leads_stats_getread inferred
list_accounts_api_linkedin_leads_accounts_getread inferred
add_account_api_linkedin_leads_accounts_postsend inferred
update_account_status_api_linkedin_leads_accounts__account_id__status_patchwrite inferred
list_scrape_runs_api_linkedin_leads_scrape_runs_getread inferred
get_lead_outreach_history_api_linkedin_leads__lead_id__history_getread inferred
get_lead_api_linkedin_leads__lead_id__getread inferred
update_outreach_status_api_linkedin_leads__lead_id__outreach_patchwrite inferred
send_outreach_from_lead_api_linkedin_leads__lead_id__send_outreach_postsend inferred
generate_linkedin_message_api_linkedin_leads__lead_id__generate_linkedin_message_postsend inferred
bulk_send_outreach_api_linkedin_leads_bulk_outreach_postsend inferred
trigger_scrape_api_linkedin_leads_trigger_postsend inferred
apify_webhook_api_linkedin_leads_webhook_apify_postsend inferred
list_templates_api_email_templates_getread inferred
update_template_api_email_templates__template_id__putwrite inferred
regenerate_templates_api_email_templates_regenerate_postsend inferred
get_tools_schema_api_tools_schema_getread inferred
execute_tool_api_tools_execute_postsend inferred
get_connection_url_api_tools_connect__app_name__getread inferred
disconnect_app_api_tools_connect__app_name__deletedelete inferred
list_connections_api_tools_connections_getread inferred
get_integration_status_api_tools_status_getread inferred
get_user_credits_api_referrals_credits_getread inferred
get_referral_code_api_referrals_code_getread inferred
claim_referral_code_api_referrals_claim_postsend inferred
get_outreach_queue_api_outreach_queue_getread inferred
approve_outreach_item_api_outreach_queue__item_id__approve_postsend inferred
dismiss_outreach_item_api_outreach_queue__item_id__deletedelete inferred
get_autopilot_settings_api_autopilot_settings_getread inferred
update_daily_outreach_settings_api_autopilot_settings_patchwrite inferred
resume_outreach_endpoint_api_autopilot_resume_outreach_postsend inferred
update_legacy_autopilot_settings_api_autopilot_legacy_settings_patchwrite inferred
get_active_outreach_batch_api_outreach_batches_active_getread inferred
get_outreach_batch_api_outreach_batches__batch_id__getread inferred
create_outreach_batch_api_outreach_batches_postsend inferred
cancel_outreach_batch_api_outreach_batches__batch_id__cancel_postdelete inferred
get_pending_auto_replies_api_auto_replies_getread inferred
cancel_pending_auto_reply_api_auto_replies__reply_id__deletedelete inferred
send_pending_auto_reply_now_api_auto_replies__reply_id__send_postsend inferred
create_application_api_applications_postsend inferred
list_applications_api_applications_getread inferred
update_application_status_api_applications__application_id__status_patchwrite inferred
answer_fields_api_extension_answer_fields_postsend inferred
agent_step_api_extension_agent_step_postsend inferred
remember_field_answer_api_extension_remember_field_answer_postsend inferred
tailor_resume_api_extension_tailor_resume_postsend inferred
match_score_api_extension_match_score_postsend inferred
get_extension_settings_api_extension_settings_getread inferred
update_extension_settings_api_extension_settings_patchwrite inferred
extension_apply_api_extension_apply_postsend inferred
send_product_update_broadcast_api_newsletter_send_postsend inferred
unsubscribe_api_newsletter_unsubscribe_getread inferred
submit_feedback_api_feedback_postsend inferred
list_keys_api_api_keys_getread inferred
create_key_api_api_keys_postsend inferred
delete_key_api_api_keys__key_id__deletedelete inferred
invite_info_api_orgs_invites__token__getread inferred
my_org_api_orgs_me_getread inferred
my_org_summary_api_orgs_me_summary_getread inferred
my_students_api_orgs_me_students_getread inferred
remove_student_api_orgs_me_students__user_id__deletedelete inferred
create_invites_api_orgs_me_invites_postsend inferred
list_invites_api_orgs_me_invites_getread inferred
revoke_invite_api_orgs_me_invites__invite_id__deletedelete inferred
get_least_contacted_hr_api_cold_email_least_contacted_hr_getread inferred
get_cold_email_api_cold_email_getread inferred
send_cold_email_api_cold_email_postsend inferred
preview_cold_email_api_cold_email_preview_postread inferred
send_cold_email_to_hr_api_cold_email_send_to_hr_postsend inferred
send_unified_cold_email_api_cold_email_unified_postsend inferred
preview_unified_cold_email_api_cold_email_unified_preview_postread inferred
get_cold_email_replies_api_cold_email__cold_email_id__replies_getread inferred
get_cold_email_replies_by_message_id_api_cold_email_message__message_id__replies_getread inferred
list_companies_api_companies_getread inferred
create_company_endpoint_api_companies_postsend inferred
add_hr_contact_endpoint_api_companies__company_id__hr_contacts_postsend inferred
tracking_pixel_api_tracking_pixel__email_id__png_getread inferred
get_job_details_api_v1_jobs_getread inferred
get_job_detail_api_v1_jobs__job_id__getread inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-28100 tools/list on https://hopehire.in/mcp, published in the official MCP registry as in.hopehire/mcp 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.