# hirepulse-mcp

Connect Claude Desktop, Cursor or Windsurf to [HirePulse](https://gethirepulse.xyz/mcp)
through stdio. Requires Node.js 20 or newer.

```sh
npx -y hirepulse-mcp
```

Paste into Claude Desktop's `claude_desktop_config.json`, Cursor's
`.cursor/mcp.json`, or Windsurf's `~/.codeium/windsurf/mcp_config.json`:

```json
{
  "mcpServers": {
    "hirepulse": {
      "command": "npx",
      "args": ["-y", "hirepulse-mcp"]
    }
  }
}
```

On Windows, if the application cannot launch npx, use `"command": "cmd"`
and `"args": ["/c", "npx", "-y", "hirepulse-mcp"]`.

The proxy forwards the live gateway catalog: 20 metered tools and a free advisor
(21 canonical MCP tools). The legacy names `00_ask_hirepulse_advisor` and
`verify_domain_legitimacy_and_security` remain callable for compatibility but
are omitted from `tools/list`. Schemas are forwarded from the gateway rather
than maintained in a second copy. Every input parameter has a description.
Tools cover website technology,
public job boards, hiring signals, Google Ads transparency, company profiles,
contacts, web-to-Markdown, merchant screening and commerce evidence.
Five successful free calls per UTC day per IP are shared across tools.
Batch and hot-buyer scans have separate limits and a two-step quote flow.
Empty results are not charged. Paid results use x402, USDC on Base:
see the live catalog for each price; hot buyers cost $0.25 per hot company.

Use `pre_purchase_merchant_trust_check` for an online shop before buying goods.
Use `x402_merchant_trust_check` instead for an x402 API before signing a crypto
payment. Neither scan certifies safety or authorizes spending. For
`private_blind_lookup`, `arguments` contains only `tool` and `target`; select the
bundle tier in MCP request metadata `params._meta["hirepulse/private-tier"]`,
outside `arguments`, or with the HTTP `X-Private-Query-Tier: bundle` header.

Noncritical telemetry and advisor-cache failures do not block data delivery.
Payment reservation and replay protection still require durable storage:
an unavailable payment ledger is not silently bypassed. An owner-only internal
HTTP bearer token can access uncharged data independently of the trial ledger;
it is never embedded in this public proxy, tool arguments, or schemas.

This proxy uses the official MCP SDK. It does not read wallet keys or pay
automatically. After the free allowance, it returns the gateway's x402 challenge.
For automatic payments, connect directly to https://gethirepulse.xyz/mcp
with the official @x402/mcp client.

[API catalog](https://gethirepulse.xyz/v1/catalog) ·
[Examples](https://github.com/edtool79-collab/hirepulse-agent-examples)

Disclosure: I maintain HirePulse. MIT license.

## Build and verify

```bash
npm ci --ignore-scripts
npm run build
npm test
```

The build checks JavaScript syntax. The smoke test starts the stdio proxy,
negotiates MCP and lists tools; it does not execute data tools, spend the free
allowance or make payments.

For Docker stdio clients, build with `docker build -t hirepulse-mcp .` and run
with `docker run --rm -i hirepulse-mcp`.

In Glama, use build steps `["npm ci --omit=dev --ignore-scripts", "npm run build"]`
and CMD `["mcp-proxy", "--", "node", "proxy.mjs"]`. No environment variables are required.