# JobSpidey for AI Agents | MCP Setup and Permissions

Canonical HTML: https://jobspidey.com/mcp
Section type: Core public page

Connect an AI agent to JobSpidey for job search, tailored application documents, PDF retrieval and tracking. Review MCP availability, setup and permissions.

## Availability and setup
Check the canonical HTML page for this environment’s current connection availability and endpoint. An enabled dev pilot is not a production launch or a published directory listing.
Codex desktop/CLI and the official MCP SDK reference client are the initial compatibility targets. Their current acceptance statuses appear on the canonical HTML page. Directory publication is separate from connection availability and client acceptance.
Use a remote Streamable HTTP client with OAuth. The client starts authorization; sign in or create an account on JobSpidey, review permissions and the daily generation budget, and return to the client. Never copy a password, API key or access token into the conversation.
For Codex, add the enabled endpoint with codex mcp add jobspidey --url ENDPOINT, then codex mcp login jobspidey. A pre-registered pilot may require the operator-supplied public client ID with --oauth-client-id. Check codex mcp list or /mcp, then get_account_context.

## Workflow
- **Find your shortlist:** Ask for a role and location. Your agent checks available sources and presents jobs for you to choose.
- **Prepare selected jobs:** Your agent prepares a tailored resume and cover letter, follows progress, and retrieves the PDFs.
- **Apply and keep track:** Your agent handles the employer website. It can report the outcome back to your JobSpidey tracker.

## Example request
Find data engineering jobs in Auckland. Show me a shortlist, prepare documents for the two jobs I choose, and give me the PDFs.

## Version 1 tool contract
- `get_account_context`: Check permissions, credits, resume readiness, supported search sources and templates. Permission: Connection access.
- `get_candidate_context`: Read permitted candidate facts and their sources. Resume text needs separate permission. Permission: profile:read; resume:read for resume text.
- `search_jobs`: Start a search with a request ID and keep its durable search handle. Permission: jobs:search + jobs:read.
- `list_search_results`: Page through brief, ranked results from that exact search. Permission: jobs:read.
- `get_job`: Read a selected job’s description, source and posting link. Permission: jobs:read.
- `load_more_jobs`: Extend the same search where its source supports more results. Permission: jobs:search + jobs:read.
- `prepare_application`: Prepare a selected or custom job using your normal account entitlements. Permission: documents:generate.
- `get_operation`: Follow search or preparation progress and the server’s retry guidance. Permission: Permission for the operation.
- `get_application_package`: Retrieve document readiness, readable text and expiring PDF download links. Permission: applications:read + documents:read.
- `list_applications`: Read your Track Jobs summaries and package readiness. Permission: applications:read.
- `record_application_outcome`: Record an agent-reported outcome after your agent’s external submission. Permission: applications:write (optional).

## Permissions and responsibility
Search and tracking can work without a resume. Preparation requires a saved resume or a permitted task-local override and normal existing account entitlements within the connection budget. Reusing or replaying accepted preparation is free; refreshing a download link does not regenerate documents.
Candidate facts and master-resume text have separate permissions. Generated documents disclose candidate information even without resume-text access. Optional tracker writes record agent-reported outcomes; JobSpidey does not submit to or contact the employer or verify submission.
Only two usable PDFs make a complete package; partial packages identify what is missing. Search coverage follows current countries, provider support and limits from get_account_context, not worldwide reachability.
Manage Connected AI agents in Account to review permissions, budget usage and last use, or disconnect. Disconnect blocks new access; already admitted generation may finish in the customer account.

## Client reference guides
- [Official Codex MCP guide](https://developers.openai.com/codex/mcp)
- [Official Python SDK OAuth example](https://github.com/modelcontextprotocol/python-sdk/tree/main/examples/clients/simple-auth-client)

## Related Public Pages
- [AI resume builder](https://jobspidey.com/ai-resume-builder)
- [Cover letter generator](https://jobspidey.com/cover-letter-generator)
- [Resume templates](https://jobspidey.com/resume-templates)
- [Cover letter templates](https://jobspidey.com/cover-letter-templates)
- [Resources](https://jobspidey.com/resources)
- [Pricing](https://jobspidey.com/pricing)
- [Support](https://jobspidey.com/support)