Name: Jobven
Author: jobven

Jobven MCP

Search job postings and employers from company career sites; each result returns its REST call.

Tool-list grade A Remote · Streamable HTTP API key 5 tools v1.0.0

No reviews yet by jobven The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Search job postings and employers from company career sites; each result returns its REST call.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http jobven-mcp https://api.jobven.com/mcp --header 'X-API-Key: ${X_API_KEY}'

# 2 — ask your agent for something these tools do
#   search_jobs, get_job, search_companies and 2 more

It needs X_API_KEY (Your Jobven API key, free at https://jobven.com/signup): this sends it in the X-API-Key header from your environment, so export it first — its endpoint answers 401 without it.

Jobven costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

jobven1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads X_API_KEY (Your Jobven API key, free at https://jobven.com/signup) from your environment each time it connects and sends it in the X-API-Key header — its endpoint answers 401 without it — so the key stays out of its config: export it in your shell profile (macOS, Linux), or run setx X_API_KEY … and open a new terminal (Windows).

claude mcp add --scope user --transport http jobven-mcp https://api.jobven.com/mcp --header 'X-API-Key: ${X_API_KEY}'

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — but its publisher asks for a key of their own on every call.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: X-API-Key header — Your Jobven API key, free at https://jobven.com/signup. You set it in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

5 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Search Jobven job postings with the filters of GET /v1/public/jobs. Returns 10 jobs by default (at most 25) with a plain-text excerpt of each description; get_job has the full text. Pass nextCursor back as cursor, with the same filters, for the next page. Each job returned counts toward the monthly allowance.

Parameter	Type	Required	Notes
q	string	no	Search job titles by whole word. Words are ANDed in any order; "double quotes" match an exact phrase, OR matches either side, and a leading - excludes a word. Case-insensitive. Does not search descrip
descriptionQuery	string	no	Search job descriptions for a whole-word phrase, matched literally, case-insensitive. Slower than the other filters; pair it with postedAfter.
remoteType	array	no	Remote type, any of
experienceLevel	array	no	Experience level, any of
employmentType	array	no	Employment type, any of
skills	array	no	Skills, any of (up to 10), e.g. ["typescript", "react"]
industry	array	no	Industries, any of (up to 10)
language	string	no	Required spoken language, ISO 639-1 code, e.g. "fr"
location	string	no	Free-text location: city, region or country
country	string	no	ISO 3166-1 alpha-2 country code, e.g. "US", "CA", "GB". "XX" matches jobs with no location at all.
state	string	no	State, province or region, comma-separated: full name ("Ontario") or, for the US and Canada, the postal code ("ON")
city	string	no	City, comma-separated; case and accents are ignored
minSalary	number	no	Minimum stated salary
maxSalary	number	no	Maximum stated salary
hasVisaSponsorship	boolean	no	true: postings that offer visa sponsorship; false: postings that say they do not
hasRelocation	boolean	no	true: postings that offer relocation help; false: postings that say they do not
status	string	no	"active" (the default) or "closed"
postedAfter	integer	no	Posted at or after (Unix seconds)
postedBefore	integer	no	Posted before (Unix seconds)
listedAfter	integer	no	Listed at or after (Unix seconds), by listedAt: for incremental sync

One Jobven job posting by id, with the full description (GET /v1/public/jobs/{id}). Counts as one job toward the monthly allowance.

Parameter	Type	Required	Notes
id	string	yes	A job id from search_jobs
descriptionFormat	string	no	Description as plain text (default) or markdown

Search the employers Jobven collects jobs from (GET /v1/public/companies). Free: company searches do not count toward the allowance.

Parameter	Type	Required	Notes
search	string	no	Company name or description contains this text
industry	string	no	Industry, e.g. "Technology"
size	string	no	Company size band, e.g. "51-200"
status	string	no	"active" or "inactive"; both when unset
isVerified	boolean	no	Only verified, or only unverified, companies
sortBy	string	no	Sort field
sortOrder	string	no	—
page	integer	no	Page number, from 1
limit	integer	no	Companies per page, default 10, at most 25

One employer by id (GET /v1/public/companies/{id}). Free.

Parameter	Type	Required	Notes
id	integer	yes	A company id from search_companies

A sample Jobven webhook delivery for one event: the raw body and headers exactly as a receiver gets them, signed with an example secret, plus the signature verifier from the webhook docs in TypeScript, Python or Go. The verifier accepts the sample, so a receiver can be tested end to end. No API call, no key needed, free.

Parameter	Type	Required	Notes
event	string	yes	The event to show a delivery of
language	string	yes	Language of the signature verifier

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Jobven or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.0.0 · scanned 24 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 0 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest115c4b1603d688d244da34632c5312d826d0519a085dee46bd27f889675ae7c4

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
search_jobs	no tags
get_job	no tags
search_companies	no tags
get_company	no tags
webhook_example	external-sink	external-sink: keyword "webhook"

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest115c4b1603d688d2

Scanned2026-10-24

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.