hirable-mcp

Hirable MCP for CLI agents

hirable-mcp is a local stdio bridge to Hirable's authenticated remote MCP service. It lets MCP-compatible agents use a user's Hirable profile, accessible templates, confirmed resume generation, and PDF/DOCX exports.

The first connection opens Hirable in the browser for OAuth sign-in and consent. The launcher uses a public OAuth client with PKCE and contains no client secret. Hirable accounts must also be enrolled in the private beta by an administrator.

Headless hosts and remote agents

Clerk does not currently support the OAuth Device Authorization Grant. Authenticate the headless host once through an SSH-forwarded PKCE loopback callback:

# Browser machine: keep this tunnel open during authentication.
ssh -N -L 127.0.0.1:3334:127.0.0.1:3334 user@headless-host

# Headless host: this prints a URL to open on the browser machine.
npx -y hirable-mcp@latest login --headless

The authorization URL is always printed, even when a browser cannot launch. The resulting access and refresh tokens are stored with owner-only permissions in Hirable's isolated local credential directory. Subsequent agent sessions are fully headless and refresh automatically. Treat that directory as a secret when backing up a host or injecting it into an ephemeral CI runner.

Use hirable-mcp status to check whether credentials are present without printing them. Use hirable-mcp logout to remove this host's local credentials; revoke the Hirable CLI connection in Hirable Settings to invalidate every host.

Claude Code

claude mcp add --scope user hirable -- npx -y hirable-mcp@latest

Codex CLI

codex mcp add hirable -- npx -y hirable-mcp@latest

Cursor

Add this to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "hirable": {
      "command": "npx",
      "args": ["-y", "hirable-mcp@latest"]
    }
  }
}

Profile changes and generation are previewed before commit. Candidate identity changes additionally require Hirable-hosted step-up confirmation. Revoking the Hirable CLI connection in Hirable Settings invalidates every CLI using this OAuth client for that Hirable account.

The Hirable CLI connection identifies this registered launcher, not the downstream program. Codex, Claude Code, Cursor, and other MCP-compatible agents therefore share the same connection for one Hirable account.