io.github.edtool79-collab/hirepulse-gateway

Est-ce que io.github.edtool79-collab/hirepulse-gateway est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.edtool79-collab/hirepulse-gateway » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 23 outils

• 00_ask_hirepulse_advisor≈ 720 tokens

  Free advisor for AI agents: describe your goal (B2B leads, hiring signals, buying intent, tech stack lookup, Google Ads, VC due diligence) and get the right HirePulse tool, the real cost, your free-call balance and a ready-to-run request.

  Paramètres, retour & exemple (4)

  Paramètres

  • agent_goal · string · requis
  • budget_usd · number · optionnel
  • domain_count · integer · optionnel
  • sample_domain · string · optionnel

  Exemple d'appel

  {"name": "00_ask_hirepulse_advisor", "arguments": {"agent_goal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"why": "texte", "tools": [], "free_quota": {}, "guarantees": [], "cached_hint": {}, "alternatives": [], "recommended_tool": "texte", "cost_estimate_usd": {}, "efficiency_analysis": {}, "recommended_execution_sequence": []}}

• agentic_shelf_schema_comparator≈ 420 tokens

  Returns structured public evidence and explicit unknowns. Use to compare a brand and up to 3 competitors as machine-readable shopping schema: prices, ratings, availability, shipping and return evidence. Samples one product per store and does not predict agent selection. $0.02 USDC per comparison via x402.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.
  • competitor_domains · array · requis

  Exemple d'appel

  {"name": "agentic_shelf_schema_comparator", "arguments": {"domain": "texte", "competitor_domains": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "stores": [], "comparison": [], "limitations": [], "error_reason": "texte"}}

• ask_hirepulse_advisor≈ 719 tokens

  Free advisor for AI agents: describe your goal (B2B leads, hiring signals, buying intent, tech stack lookup, Google Ads, VC due diligence) and get the right HirePulse tool, the real cost, your free-call balance and a ready-to-run request.

  Paramètres, retour & exemple (4)

  Paramètres

  • agent_goal · string · requis
  • budget_usd · number · optionnel
  • domain_count · integer · optionnel
  • sample_domain · string · optionnel

  Exemple d'appel

  {"name": "ask_hirepulse_advisor", "arguments": {"agent_goal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"why": "texte", "tools": [], "free_quota": {}, "guarantees": [], "cached_hint": {}, "alternatives": [], "recommended_tool": "texte", "cost_estimate_usd": {}, "efficiency_analysis": {}, "recommended_execution_sequence": []}}

• b2b_vendor_stability_evaluator≈ 393 tokens

  Returns structured public evidence and explicit unknowns. Use to inspect public vendor technology and current hiring evidence before procurement. Missing historical headcount or SEO evidence is unknown, never a fabricated growth trend. $0.10 USDC only when a useful evidence assessment is returned.

  Paramètres, retour & exemple (1)

  Paramètres

  • vendor_domain · string · requis
    Public domain without scheme, path or port.

  Exemple d'appel

  {"name": "b2b_vendor_stability_evaluator", "arguments": {"vendor_domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "limitations": [], "error_reason": "texte", "vendor_domain": "texte", "hiring_velocity": {}, "stability_status": "GROWING", "tech_stack_summary": [], "vendor_health_score": 1, "seo_visibility_trend": "texte", "verified_contacts_available": true, "engineering_and_support_headcount_trend": "texte"}}

• batch_lookup≈ 504 tokens

  Bulk company lookup: run one tool (tech stack, open jobs, hiring intent, Google Ads or company profile) on many domains with one payment. Step 1 (free): send {tool, domains}; every domain is checked and you get each status plus a quote_id priced only for rows with data. Step 2: send {quote_id} and pay the exact quoted amount via x402 on Base to receive all rows. Max $1 per call: up to 50 domains, or 33 for company-profile. Rows without data are never charged. Quotes last 15 minutes; 3 free scans per day per IP.

  Paramètres, retour & exemple (3)

  Paramètres

  • tool · string · optionnel · tech-stack | ats-jobs | company-intent | google-ads | company-profile
  • domains · array · optionnel
    Public company domains without a URL scheme, path or port.
  • quote_id · string · optionnel
    quote_id from step 1. Send it alone to pay and receive the results.

  Exemple d'appel

  {"name": "batch_lookup", "arguments": {"tool": "tech-stack", "domains": [], "quote_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cold": [], "next": "texte", "status": "quote", "results": [], "quote_id": "texte", "statuses": [], "price_usd": 1, "expires_at": "texte", "billable_count": 1, "price_micro_usd": 1}}

• checkout_active_promo_code_finder≈ 443 tokens

  Returns structured public evidence and explicit unknowns. Use during checkout to extract explicit coupon candidates from merchant homepage SEO metadata. Returns source text and unverified codes; does not claim a code works at checkout. Google ad copy and Meta ads are unavailable. $0.01 USDC per nonempty result via x402.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.
  • product_category · string · optionnel

  Exemple d'appel

  {"name": "checkout_active_promo_code_finder", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "limitations": [], "active_codes": [], "error_reason": "texte", "promos_found": true, "sources_checked": [], "best_offer_summary": "texte"}}

• company_footprint_check≈ 528 tokens

  Company footprint check for investment, due-diligence and vendor-risk agents: for one domain, reports which public operating signals exist: website ad and analytics tags, an active job board with open roles, and Google Ads in the public Transparency Center. Each signal is marked found, not_found or unknown in footprint, with the underlying data. Facts only: no revenue, burn or fraud estimates. $0.03 USDC per result via x402 on Base, charged only when at least two of the three checks return data; otherwise not charged. Counts as one of the 5 free daily calls.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public company domain without a URL scheme, path or port.

  Exemple d'appel

  {"name": "company_footprint_check", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "domain": "texte", "status": "ok", "signals": [], "footprint": {}, "checked_at": "texte", "google_ads": {}, "tech_stack": {}, "hiring_intent": {}, "sections_status": {}, "sections_with_data": []}}

• detect_website_tech_stack≈ 860 tokens

  Tech stack lookup API for any company website: detects ad pixels, analytics, marketing tools, CMS, e-commerce platform, hosting and payment providers (Meta, Google Ads, LinkedIn and TikTok pixels, GA4, Google Tag Manager and more), plus email provider, DMARC and SPF senders from DNS. Use before qualifying or writing to a company. Fast: reads the home page HTML, headers, cookies and up to two public Google Tag Manager containers, without a headless browser. 5 free calls per day per IP, then $0.005 USDC per result via x402 on Base. Blocked, unreachable or empty sites (no_signals) are never charged.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public domain without a URL scheme, path or port.

  Exemple d'appel

  {"name": "detect_website_tech_stack", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cms": "texte", "note": "texte", "added": [], "title": "texte", "domain": "texte", "status": "ok", "has_ga4": true, "has_gtm": true, "removed": [], "payments": [], "ad_pixels": [], "analytics": []}}

• extract_company_contacts≈ 284 tokens

  Public company contact extractor: homepage, about, contact, team and careers; deduplicated published emails and LinkedIn, X, Twitter, GitHub links. Native MX/SPF/DMARC checks; MX availability is not mailbox verification. Email pattern is inferred only from observed examples. $0.01; no emails, social links or valid MX means no charge.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis

  Exemple d'appel

  {"name": "extract_company_contacts", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"mx": [], "spf": [], "dmarc": [], "domain": "texte", "emails": [], "status": "texte", "social_links": [], "email_deliverable": true, "inferred_email_pattern": "texte"}}

• find_hot_buyers≈ 522 tokens

  Buying intent for a list of companies: find which of 2 to 25 domains are hiring hardest. Step 1 (free): send domains and an optional min_intent_score (default 70); every domain gets a hiring-signals check, cold domains come back free with their intent_score, and you get a quote_id. Step 2: send {quote_id} and pay exactly $0.25 USDC per hot company via x402 on Base for a full company profile each (tech stack, hiring intent, Google Ads). At most 4 hot companies per paid call ($1 max); extra hot domains are listed in more_hot to scan again. Zero hot means no charge. Quotes last 15 minutes; 3 free scans per day per IP.

  Paramètres, retour & exemple (3)

  Paramètres

  • domains · array · optionnel
    Public company domains without a URL scheme, path or port.
  • quote_id · string · optionnel
    quote_id from step 1. Send it alone to pay and receive the results.
  • min_intent_score · integer · optionnel

  Exemple d'appel

  {"name": "find_hot_buyers", "arguments": {"domains": [], "quote_id": "texte", "min_intent_score": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cold": [], "next": "texte", "status": "quote", "results": [], "quote_id": "texte", "statuses": [], "price_usd": 1, "expires_at": "texte", "billable_count": 1, "price_micro_usd": 1}}

• get_company_hiring_intent≈ 775 tokens

  Hiring signals and buying intent API: turns a company domain into a hiring-based buying-intent score from its public job board: intent_score 0-100, hiring_status (hypergrowth, active_hiring, steady), open roles, roles posted in the last 30 days, hiring by function (sales, engineering, data/AI...), technologies it is hiring for and notable senior or go-to-market roles. Use to rank or prioritize accounts before outreach. 5 free calls per day per IP, shared with the other tools, then $0.01 USDC per result via x402 on Base. No job board, no open jobs, or a generic name-only match is never charged.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public company domain without a URL scheme, path or port.

  Exemple d'appel

  {"name": "get_company_hiring_intent", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "domain": "texte", "status": "ok", "ats_type": "texte", "checked_at": "texte", "confidence": "high", "next_steps": [], "intent_score": 1, "remote_roles": 1, "hiring_status": "hypergrowth", "top_locations": {}, "buying_signals": {}}}

• get_company_open_jobs≈ 816 tokens

  Company jobs API: live open jobs for a company domain from its public Greenhouse, Lever, Ashby, Workable, Recruitee or SmartRecruiters board, with titles, departments, locations, remote flag, salary when published and technology keywords. Hiring signals for sales, recruiting and research agents. Up to 300 jobs per call; send known_job_ids to get new and closed jobs (diff_only returns only new ones). confidence high means the website links to the board; unverified means only the name matches. 5 free calls per day per IP, then $0.01 USDC per result via x402 on Base. No board or no open jobs is never charged.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Public domain without a URL scheme, path or port.
  • diff_only · boolean · optionnel
    Return only jobs that are not in known_job_ids. Needs known_job_ids.
  • known_job_ids · array · optionnel
    Job IDs you already have from an earlier call. The answer then lists new and closed job IDs.

  Exemple d'appel

  {"name": "get_company_open_jobs", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"diff": {}, "jobs": [], "note": "texte", "domain": "texte", "status": "ok", "ats_type": "texte", "board_slug": "texte", "checked_at": "texte", "confidence": "high", "next_steps": [], "board_match": "name_match", "remote_jobs": 1}}

• get_company_profile≈ 516 tokens

  Company enrichment API in one call: tech stack lookup, hiring signals and buying intent, and Google Ads transparency for a domain, run in parallel and returned together with a short list of plain-language signals. Use for a full company research profile before outreach. $0.03 USDC per result via x402 on Base: one request instead of three. Charged only when at least two of the three sections have data; otherwise nothing is charged and the answer says which single tool has data. Counts as one of the 5 free daily calls.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public company domain without a URL scheme, path or port.

  Exemple d'appel

  {"name": "get_company_profile", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "domain": "texte", "status": "ok", "signals": [], "footprint": {}, "checked_at": "texte", "google_ads": {}, "tech_stack": {}, "hiring_intent": {}, "sections_status": {}, "sections_with_data": []}}

• get_google_ads_by_domain≈ 729 tokens

  Google Ads transparency API: is a company running Google Ads, and what does it advertise? Advertisers and ads for a domain from the public Google Ads Transparency Center, the Google estimate of how many ads it runs, up to 40 ads with format (text, image, video), first and last shown dates, preview and Transparency Center links. Optional region filter (US, GB, CA, AU, DE, FR, ES, IT, NL, IL, IN, BR, MX, JP, SG, AE). For competitor research, ad-spend signals and sales personalization. 5 free calls per day per IP, then $0.01 USDC per result via x402 on Base. Domains with no ads are never charged.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Advertiser domain without a URL scheme, path or port.
  • region · string · optionnel · US | GB | CA | AU | DE | FR | ES | IT
    Optional country filter. Leave out for all regions.

  Exemple d'appel

  {"name": "get_google_ads_by_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ads": [], "note": "texte", "domain": "texte", "region": "texte", "status": "ok", "checked_at": "texte", "next_steps": [], "advertisers": [], "ads_returned": 1, "formats_in_sample": {}, "total_ads_estimate": {}, "latest_last_shown_in_sample": "texte"}}

• muse_agentic_store_readiness_auditor≈ 988 tokens

  Returns structured public evidence and explicit unknowns. Use to audit a store for machine-readable product metadata, UCP/ACP discovery, payment hints and robots.txt access for shopping agents. Returns a heuristic coverage score and prioritized fixes. Not Meta certification or a live checkout test. $0.01 USDC via x402.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.

  Exemple d'appel

  {"name": "muse_agentic_store_readiness_auditor", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"fixes": [], "domain": "texte", "status": "ok", "product": {}, "discovery": {}, "bot_access": {}, "limitations": [], "error_reason": "texte", "payment_hints": {}, "readiness_score": 1, "sample_product_url": "texte"}}

• muse_conversion_leak_lead_finder≈ 344 tokens

  Returns structured public evidence and explicit unknowns. Use to inspect a supplied store for schema gaps, Google ad activity and public business contacts. A lead is qualified only when required ad and SEO evidence exists; public email addresses are not verified decision makers. $0.05 USDC per qualified result via x402.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.

  Exemple d'appel

  {"name": "muse_conversion_leak_lead_finder", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "candidate": true, "readiness": {}, "limitations": [], "error_reason": "texte", "public_contacts": {}, "seo_traffic_verified": true, "decision_maker_verified": true, "active_ad_spend_verified": true}}

• pre_purchase_merchant_trust_check≈ 516 tokens

  Returns structured public evidence and explicit unknowns. Use before purchasing from an unfamiliar merchant to inspect public website evidence and missing trust signals. Returns a cautious evidence score, risk flags and limitations; it cannot certify safety or detect every scam. $0.005 USDC via x402 after 5 shared free successful calls/day.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.
  • merchant_wallet_or_id · string · optionnel
  • transaction_amount_usd · number · optionnel

  Exemple d'appel

  {"name": "pre_purchase_merchant_trust_check", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "signals": {}, "latency_ms": 1, "risk_level": "LOW", "limitations": [], "safe_to_buy": true, "trust_score": 1, "error_reason": "texte", "recommendation": "texte"}}

• private_blind_lookup≈ 255 tokens

  Blind execution proxy: target is stripped from x402 facilitator metadata, not hidden from HirePulse or destination. $0.02 single check; company_profile and due_diligence require X-Private-Query-Tier: bundle ($0.04), or params._meta["hirepulse/private-tier"] in MCP. Choose tier before submitting the body. No settlement for empty results.

  Paramètres, retour & exemple (2)

  Paramètres

  • tool · string · requis · tech_stack | open_jobs | hiring_intent | google_ads | company_profile | due_diligence | extract_contacts | clean_markdown
  • target · string · requis

  Exemple d'appel

  {"name": "private_blind_lookup", "arguments": {"tool": "tech_stack", "target": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "result": {}, "status": "texte", "privacy_guarantee": "texte"}}

• universal_product_url_to_json≈ 622 tokens

  Returns structured public evidence and explicit unknowns. Use to extract product price, stock, variants, ratings and shipping evidence from a public product URL. Reads JSON-LD, Microdata and OpenGraph without a browser. Missing facts are null; checkout support is not assumed. $0.002 USDC per result via x402.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_url · string · requis

  Exemple d'appel

  {"name": "universal_product_url_to_json", "arguments": {"product_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "brand": "texte", "price": 1, "title": "texte", "domain": "texte", "status": "ok", "currency": "texte", "in_stock": true, "variants": [], "limitations": [], "error_reason": "texte", "review_count": 1}}

• url_to_clean_markdown≈ 240 tokens

  Convert a public web page to clean LLM-ready Markdown with title, meta description and approximate token count. Removes scripts, styles, navigation, footer and common ad clutter. SSRF and redirect protected. max_chars 1–100000 (default 15000). $0.002; empty results free.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
  • max_chars · integer · optionnel

  Exemple d'appel

  {"name": "url_to_clean_markdown", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"title": "texte", "domain": "texte", "status": "texte", "markdown": "texte", "truncated": true, "meta_description": "texte", "token_count_estimate": 1}}

• verified_merchant_json_badge≈ 500 tokens

  Returns structured public evidence and explicit unknowns. Use to generate a signed public-evidence statement for a merchant domain. The signature proves HirePulse issued the assessment; it does not verify ownership, employees, or purchase safety. Includes expiry and a public verification key. $0.005 USDC via x402.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public domain without scheme, path or port.

  Exemple d'appel

  {"name": "verified_merchant_json_badge", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "ok", "signals": {}, "latency_ms": 1, "risk_level": "LOW", "limitations": [], "safe_to_buy": true, "trust_score": 1, "error_reason": "texte", "organization": {}, "recommendation": "texte", "signed_statement": "texte"}}

• verify_domain_legitimacy_and_security≈ 531 tokens

  Company footprint check for investment, due-diligence and vendor-risk agents: for one domain, reports which public operating signals exist: website ad and analytics tags, an active job board with open roles, and Google Ads in the public Transparency Center. Each signal is marked found, not_found or unknown in footprint, with the underlying data. Facts only: no revenue, burn or fraud estimates. $0.03 USDC per result via x402 on Base, charged only when at least two of the three checks return data; otherwise not charged. Counts as one of the 5 free daily calls.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public company domain without a URL scheme, path or port.

  Exemple d'appel

  {"name": "verify_domain_legitimacy_and_security", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "domain": "texte", "status": "ok", "signals": [], "footprint": {}, "checked_at": "texte", "google_ads": {}, "tech_stack": {}, "hiring_intent": {}, "sections_status": {}, "sections_with_data": []}}

• x402_merchant_trust_check≈ 274 tokens

  Pre-payment HTTPS merchant scanner: checks public discovery, live 402 terms, comparable USDC prices, latency and regex prompt-injection flags within 4 seconds. Evidence-based heuristic, not certification or a guarantee. SSRF protected. $0.002 per completed report; unreachable targets free.

  Paramètres, retour & exemple (1)

  Paramètres

  • target_url · string · requis

  Exemple d'appel

  {"name": "x402_merchant_trust_check", "arguments": {"target_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte", "status": "texte", "latency_ms": 1, "safe_to_pay": true, "trust_score": 1, "matched_flags": [], "recommendation": "texte", "valid_x402_config": true, "prompt_injection_risk": "LOW"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://gethirepulse.xyz/mcp