HoneyBook client-portal MCP — vendor contracts, invoices, messages, meetings and payments
HirePulse Agent Gateway is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
Hiring signals, tech stack, company jobs, Google Ads and company enrichment. x402 on Base.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http hirepulse-agent-gateway-mcp https://gethirepulse.xyz/mcp
# 2 — ask your agent for something these tools do
# 00_ask_hirepulse_advisor, ask_hirepulse_advisor, detect_website_tech_stack and 20 more
HirePulse Agent Gateway costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http hirepulse-agent-gateway-mcp https://gethirepulse.xyz/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
23 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Free advisor for AI agents: describe your goal (B2B leads, hiring signals, buying intent, tech stack lookup, Google Ads, VC due diligence) and get the right HirePulse tool, the real cost, your free-call balance and a ready-to-run request.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_goal | string | yes | — |
| sample_domain | string | no | — |
| domain_count | integer | no | — |
| budget_usd | number | no | — |
Free advisor for AI agents: describe your goal (B2B leads, hiring signals, buying intent, tech stack lookup, Google Ads, VC due diligence) and get the right HirePulse tool, the real cost, your free-call balance and a ready-to-run request.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_goal | string | yes | — |
| sample_domain | string | no | — |
| domain_count | integer | no | — |
| budget_usd | number | no | — |
Tech stack lookup API for any company website: detects ad pixels, analytics, marketing tools, CMS, e-commerce platform, hosting and payment providers (Meta, Google Ads, LinkedIn and TikTok pixels, GA4, Google Tag Manager and more), plus email provider, DMARC and SPF senders from DNS. Use before qualifying or writing to a company. Fast: reads the home page HTML, headers, cookies and up to two publi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without a URL scheme, path or port. |
Company jobs API: live open jobs for a company domain from its public Greenhouse, Lever, Ashby, Workable, Recruitee or SmartRecruiters board, with titles, departments, locations, remote flag, salary when published and technology keywords. Hiring signals for sales, recruiting and research agents. Up to 300 jobs per call; send known_job_ids to get new and closed jobs (diff_only returns only new ones
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without a URL scheme, path or port. |
| known_job_ids | array | no | Job IDs you already have from an earlier call. The answer then lists new and closed job IDs. |
| diff_only | boolean | no | Return only jobs that are not in known_job_ids. Needs known_job_ids. |
Hiring signals and buying intent API: turns a company domain into a hiring-based buying-intent score from its public job board: intent_score 0-100, hiring_status (hypergrowth, active_hiring, steady), open roles, roles posted in the last 30 days, hiring by function (sales, engineering, data/AI...), technologies it is hiring for and notable senior or go-to-market roles. Use to rank or prioritize acc
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public company domain without a URL scheme, path or port. |
Google Ads transparency API: is a company running Google Ads, and what does it advertise? Advertisers and ads for a domain from the public Google Ads Transparency Center, the Google estimate of how many ads it runs, up to 40 ads with format (text, image, video), first and last shown dates, preview and Transparency Center links. Optional region filter (US, GB, CA, AU, DE, FR, ES, IT, NL, IL, IN, BR
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Advertiser domain without a URL scheme, path or port. |
| region | string | no | Optional country filter. Leave out for all regions. |
Company enrichment API in one call: tech stack lookup, hiring signals and buying intent, and Google Ads transparency for a domain, run in parallel and returned together with a short list of plain-language signals. Use for a full company research profile before outreach. $0.03 USDC per result via x402 on Base: one request instead of three. Charged only when at least two of the three sections have d
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public company domain without a URL scheme, path or port. |
Company footprint check for investment, due-diligence and vendor-risk agents: for one domain, reports which public operating signals exist: website ad and analytics tags, an active job board with open roles, and Google Ads in the public Transparency Center. Each signal is marked found, not_found or unknown in footprint, with the underlying data. Facts only: no revenue, burn or fraud estimates. $0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public company domain without a URL scheme, path or port. |
Buying intent for a list of companies: find which of 2 to 25 domains are hiring hardest. Step 1 (free): send domains and an optional min_intent_score (default 70); every domain gets a hiring-signals check, cold domains come back free with their intent_score, and you get a quote_id. Step 2: send {quote_id} and pay exactly $0.25 USDC per hot company via x402 on Base for a full company profile each (
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domains | array | no | Public company domains without a URL scheme, path or port. |
| min_intent_score | integer | no | — |
| quote_id | string | no | quote_id from step 1. Send it alone to pay and receive the results. |
Bulk company lookup: run one tool (tech stack, open jobs, hiring intent, Google Ads or company profile) on many domains with one payment. Step 1 (free): send {tool, domains}; every domain is checked and you get each status plus a quote_id priced only for rows with data. Step 2: send {quote_id} and pay the exact quoted amount via x402 on Base to receive all rows. Max $1 per call: up to 50 domains,
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tool | string | no | — |
| domains | array | no | Public company domains without a URL scheme, path or port. |
| quote_id | string | no | quote_id from step 1. Send it alone to pay and receive the results. |
Blind execution proxy: target is stripped from x402 facilitator metadata, not hidden from HirePulse or destination. $0.02 single check; company_profile and due_diligence require X-Private-Query-Tier: bundle ($0.04), or params._meta["hirepulse/private-tier"] in MCP. Choose tier before submitting the body. No settlement for empty results.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tool | string | yes | — |
| target | string | yes | — |
Pre-payment HTTPS merchant scanner: checks public discovery, live 402 terms, comparable USDC prices, latency and regex prompt-injection flags within 4 seconds. Evidence-based heuristic, not certification or a guarantee. SSRF protected. $0.002 per completed report; unreachable targets free.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| target_url | string | yes | — |
Public company contact extractor: homepage, about, contact, team and careers; deduplicated published emails and LinkedIn, X, Twitter, GitHub links. Native MX/SPF/DMARC checks; MX availability is not mailbox verification. Email pattern is inferred only from observed examples. $0.01; no emails, social links or valid MX means no charge.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Convert a public web page to clean LLM-ready Markdown with title, meta description and approximate token count. Removes scripts, styles, navigation, footer and common ad clutter. SSRF and redirect protected. max_chars 1–100000 (default 15000). $0.002; empty results free.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
| max_chars | integer | no | — |
Returns structured public evidence and explicit unknowns. Use before purchasing from an unfamiliar merchant to inspect public website evidence and missing trust signals. Returns a cautious evidence score, risk flags and limitations; it cannot certify safety or detect every scam. $0.005 USDC via x402 after 5 shared free successful calls/day.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
| merchant_wallet_or_id | string | no | — |
| transaction_amount_usd | number | no | — |
Returns structured public evidence and explicit unknowns. Use during checkout to extract explicit coupon candidates from merchant homepage SEO metadata. Returns source text and unverified codes; does not claim a code works at checkout. Google ad copy and Meta ads are unavailable. $0.01 USDC per nonempty result via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
| product_category | string | no | — |
Returns structured public evidence and explicit unknowns. Use to extract product price, stock, variants, ratings and shipping evidence from a public product URL. Reads JSON-LD, Microdata and OpenGraph without a browser. Missing facts are null; checkout support is not assumed. $0.002 USDC per result via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product_url | string | yes | — |
Returns structured public evidence and explicit unknowns. Use to inspect public vendor technology and current hiring evidence before procurement. Missing historical headcount or SEO evidence is unknown, never a fabricated growth trend. $0.10 USDC only when a useful evidence assessment is returned.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| vendor_domain | string | yes | Public domain without scheme, path or port. |
Returns structured public evidence and explicit unknowns. Use to audit a store for machine-readable product metadata, UCP/ACP discovery, payment hints and robots.txt access for shopping agents. Returns a heuristic coverage score and prioritized fixes. Not Meta certification or a live checkout test. $0.01 USDC via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
Returns structured public evidence and explicit unknowns. Use to inspect a supplied store for schema gaps, Google ad activity and public business contacts. A lead is qualified only when required ad and SEO evidence exists; public email addresses are not verified decision makers. $0.05 USDC per qualified result via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
Returns structured public evidence and explicit unknowns. Use to compare a brand and up to 3 competitors as machine-readable shopping schema: prices, ratings, availability, shipping and return evidence. Samples one product per store and does not predict agent selection. $0.02 USDC per comparison via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
| competitor_domains | array | yes | — |
Returns structured public evidence and explicit unknowns. Use to generate a signed public-evidence statement for a merchant domain. The signature proves HirePulse issued the assessment; it does not verify ownership, employees, or purchase safety. Includes expiry and a public verification key. $0.005 USDC via x402.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public domain without scheme, path or port. |
Company footprint check for investment, due-diligence and vendor-risk agents: for one domain, reports which public operating signals exist: website ad and analytics tags, an active job board with open roles, and Google Ads in the public Transparency Center. Each signal is marked found, not_found or unknown in footprint, with the underlying data. Facts only: no revenue, burn or fraud estimates. $0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Public company domain without a URL scheme, path or port. |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install HirePulse Agent Gateway or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| 00_ask_hirepulse_advisor | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ask_hirepulse_advisor | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| detect_website_tech_stack | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| get_company_open_jobs | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| get_company_hiring_intent | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| get_google_ads_by_domain | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| get_company_profile | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| company_footprint_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| find_hot_buyers | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| batch_lookup | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| private_blind_lookup | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| x402_merchant_trust_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| extract_company_contacts | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| url_to_clean_markdown | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| pre_purchase_merchant_trust_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| checkout_active_promo_code_finder | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| universal_product_url_to_json | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| b2b_vendor_stability_evaluator | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| muse_agentic_store_readiness_auditor | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| muse_conversion_leak_lead_finder | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| agentic_shelf_schema_comparator | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| verified_merchant_json_badge | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| verify_domain_legitimacy_and_security | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish HirePulse Agent Gateway can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.