# hirelayer-mcp Official HireLayer MCP server: resume and CV parsing, job criteria extraction, candidate matching and ranking, and skills normalization for AI agents in Claude, Cursor, VS Code and other MCP clients. - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 1.1.1 - **Author:** HireLayer - **License:** MIT - **npm:** hirelayer-mcp - **Endpoints:** streamable-http https://hirelayer.co/mcp - **Source:** https://github.com/HireLayer/hirelayer-mcp - **Endpoint health:** reachable (last checked 2026-10-06T23:49:29.524Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-06T23:49:18.096Z - **Version scanned:** 1.1.1 - **CVEs:** none found by OSV at scan time ## Tools 6 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `hirelayer` - `parse_resume` — Parse a resume / CV (PDF, DOC, DOCX, ODT, PPT, PPTX, ODP, XLS, RTF, TXT, JPG, PNG or BMP, under 4.5 MB) into structured JSON: contact details, work experience, - `extract_job_criteria` — Turn a job description (any language) into weighted matching criteria (matching_criteria[]), each with a weight from 1 to 3, a mandatory flag and a rationale (l - `match_candidate` — Score one candidate against a job: returns a score between 0 and 1, a summary and an explained evaluation of each criterion (written in French). Use the criteri - `rank_candidates` — Rank up to 10 candidates against the same job description, from their resume texts: returns each candidate with a rank, a score between 0 and 1 and a rationale - `resolve_skills` — Map free-text skills in French or English (one skill, a compound string or a whole skills section) to skills of the HireLayer taxonomy, with their IDs, families ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"hirelayer\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"hirelayer-mcp\"\n ],\n \"env\": {\n \"HIRELAYER_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `HIRELAYER_API_KEY` — Hirelayer API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — runs locally and hosted; holds an api key. - Floor 27, ceiling 27 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/hirelayer-mcp - Install plan: https://forgeregistry.com/api/v1/packages/hirelayer-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/hirelayer-mcp - HTML page: https://forgeregistry.com/registry/hirelayer-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.