aid: wellfound name: Wellfound description: >- Wellfound (formerly AngelList Talent) is a startup hiring marketplace and AI recruiting platform operating wellfound.com, the Wellfound Reach AI sourcing product and the Autopilot managed-recruiting service. Its entire public machine-readable API surface is two OAuth-protected Model Context Protocol servers - https://wellfound.com/api/mcp for recruiter applications and https://reach.wellfound.com/mcp for Reach projects, sourcing agents, candidates and company lists - discovered from a complete RFC 8414 / RFC 9728 / OpenID Connect discovery stack and verified by probe. Wellfound publishes no OpenAPI document, no public GraphQL endpoint, no REST reference and no developer portal, so the discovery documents are the only published description of how to integrate. image: https://reach.wellfound.com/assets/marketing/og/homepage-2fb80e2936cb06211fa7702e4b089510c772d1b887166b884b4720f73445e875.png url: https://raw.githubusercontent.com/api-evangelist/wellfound/refs/heads/main/apis.yml x-type: company x-source: harvest:secondary-market position: Producing specificationVersion: '0.20' created: '2026-09-04' modified: '2026-09-04' tags: - Recruiting - Hiring - Talent - Human Resources - Applicant Tracking - Job Board - Startups - MCP - agent-native - OAuth - AI Sourcing maintainers: - FN: Kin Lane email: kin@apievangelist.com - FN: APIs.json email: info@apis.io apis: - aid: wellfound:wellfound-applications-mcp name: Wellfound Applications MCP description: >- Remote MCP server exposing a recruiter's inbound job applications to an agent, and letting it accept or reject them. Named "Wellfound recruiter applications" in its own RFC 9728 protected-resource document. OAuth 2.1 authorization code + PKCE S256 with dynamic client registration; scopes applications:read, applications:accept, applications:reject. The tool list is auth-gated - an unauthenticated tools/list returns HTTP 401 with an RFC 9728 WWW-Authenticate challenge. image: https://reach.wellfound.com/assets/marketing/og/homepage-2fb80e2936cb06211fa7702e4b089510c772d1b887166b884b4720f73445e875.png humanURL: https://wellfound.com/recruit/pricing baseURL: https://wellfound.com/api/mcp tags: - Recruiting - Applicant Tracking - MCP - agent-native - OAuth properties: - type: MCPServer url: mcp/wellfound-mcp.yml - type: Authentication url: authentication/wellfound-authentication.yml - type: OAuthScopes url: scopes/wellfound-scopes.yml - type: OpenIDConnect url: well-known/wellfound-openid-configuration.json - aid: wellfound:wellfound-reach-mcp name: Wellfound Reach MCP description: >- Remote MCP server for Wellfound Reach, the AI sourcing product. Seven scopes across four resources - projects:read, agents:read, agents:write, candidates:read, candidates:write, company_lists:read, company_lists:write - so an agent can read sourcing projects and both read and write the sourcing agents, candidates and company lists on an account. Its own authorization server at https://reach.wellfound.com accepts public clients only. The tool list is auth-gated. image: https://reach.wellfound.com/assets/marketing/og/homepage-2fb80e2936cb06211fa7702e4b089510c772d1b887166b884b4720f73445e875.png humanURL: https://reach.wellfound.com/ baseURL: https://reach.wellfound.com/mcp tags: - Recruiting - AI Sourcing - Talent - MCP - agent-native - OAuth properties: - type: MCPServer url: mcp/wellfound-mcp.yml - type: Authentication url: authentication/wellfound-authentication.yml - type: OAuthScopes url: scopes/wellfound-scopes.yml common: - type: Website url: https://wellfound.com/ - type: Support url: https://help.wellfound.com/ - type: Blog url: https://wellfound.com/blog - type: BlogRSS url: https://wellfound.com/blog.rss - type: Pricing url: https://wellfound.com/recruit/pricing - type: SignUp url: https://wellfound.com/jobs/signup - type: Login url: https://wellfound.com/login - type: TermsOfService url: https://wellfound.com/terms - type: PrivacyPolicy url: https://wellfound.com/privacy - type: StatusPage url: https://status.wellfound.com/ - type: TrustCenter url: https://trust.wellfound.ai/ - type: MCPServer url: mcp/wellfound-mcp.yml - type: Authentication url: authentication/wellfound-authentication.yml - type: OAuthScopes url: scopes/wellfound-scopes.yml - type: WellKnown url: well-known/wellfound-well-known.yml - type: SecurityTxt url: well-known/wellfound-security.txt - type: Security url: security/wellfound-vulnerability-disclosure.yml - type: VulnerabilityDisclosure url: security/wellfound-vulnerability-disclosure.yml - type: DomainSecurity url: security/wellfound-domain-security.yml - type: Compliance url: security/wellfound-trust-center.yml - type: Conformance url: conformance/wellfound-conformance.yml - type: Conventions url: conventions/wellfound-conventions.yml - type: ErrorCatalog url: errors/wellfound-problem-types.yml - type: Lifecycle url: lifecycle/wellfound-lifecycle.yml - type: Plans url: plans/wellfound-plans-pricing.yml - type: RateLimits url: rate-limits/wellfound-rate-limits.yml - type: Packages url: packages/wellfound-packages.yml - type: LLMsTxt url: llms/wellfound-llms.txt x-enrichment: date: '2026-09-04' status: enriched artifacts_added: 22 pass: local-v3 x-coverage: state: covered reason: null detail: >- Contract discovery hit. Wellfound serves no OpenAPI and no public GraphQL, but it runs two live first-party MCP servers - https://wellfound.com/api/mcp and https://reach.wellfound.com/mcp - found via a complete RFC 8414 / RFC 9728 / OpenID Connect discovery stack and verified by probe (both return HTTP 401 with a conformant WWW-Authenticate resource_metadata challenge). Their tool lists are OAuth-gated, so the 16 published scopes are recorded instead of invented tool schemas. evidence: - url: https://wellfound.com/.well-known/oauth-protected-resource status: 200 - url: https://wellfound.com/api/mcp status: 401 - url: https://reach.wellfound.com/.well-known/oauth-protected-resource status: 200 - url: https://reach.wellfound.com/mcp status: 401 - url: https://wellfound.com/openapi.json status: 404 checked: '2026-09-04'