Back to Browse

WorkWay BE MCP Server

Developer ToolsUse Caution0.0MCP RegistryRemote
Free

Server data from the Official MCP Registry

Search 490k+ live jobs from company ATS boards, save roles, follow companies, manage talent profile.

About

Search 490k+ live jobs from company ATS boards, save roles, follow companies, manage talent profile.

Remote endpoints: streamable-http: https://www.workway.dev/api/mcp

Security Report

0.0
Use Caution0.0Critical Risk

This is not an MCP server—it is a backend API service for a job discovery platform (WorkWay). The codebase contains critical security vulnerabilities including a massive list of hardcoded company names (appearing to be Greenhouse namespaces), suspicious AWS/analytics SDK dependencies, and dependencies on payment processors and external APIs (OpenAI, Google Analytics, Resend email, Slack-like functionality via standardwebhooks) without clear authentication boundaries. The presence of @modelcontextprotocol/sdk in package.json suggests this may have been retrofitted or mislabeled. The exposed database configuration in README.md and dependency on shell execution tools (node-cron, multer) raise serious concerns. This does not qualify as a legitimate MCP server and exhibits multiple critical attack vectors. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 2 high severity).

3 files analyzed · 26 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

database

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-enigma-52-workway": {
      "url": "https://www.workway.dev/api/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

WorkWay Backend

API service powering WorkWay — company/job discovery, filters, sitemaps, and Greenhouse/Ashby/YC ingestion.

Stack

  • Node.js (ES modules) + Express 5
  • PostgreSQL (pg)

Structure

  • src/server.js — app bootstrap, DB init, route mount, graceful shutdown
  • src/config.js — environment/config mapping
  • src/routes/ — API route handlers
  • src/services/ — business logic
  • src/dao/ — SQL queries and DAO abstractions
  • src/utils/ — logger, constants, parsing/classification helpers
  • src/data/greenhouseCompanies.js — seed list of Greenhouse namespaces
  • docs/DETAILED_DOCS.md — detailed architecture and endpoint reference

Setup

npm install

Create .env in repo root:

APP_ENV=dev
POSTGRES_DB_HOST=localhost
POSTGRES_DB_PORT=5432
POSTGRES_DB_USER=postgres
POSTGRES_DB_PASSWORD=root
POSTGRES_DB_DATABASE=eqhqdb
POSTGRES_DB_MAX_CONNECTIONS=20
PORT=3000

Run:

npm run dev   # or: npm start

Defaults to http://localhost:3000.

API

Base path: /api

  • /api/company, /api/job, /api/feed, /api/filter, /api/cron
  • /api/sitemap.xml, /api/sitemaps/*
  • GET /api/job/list — paginated job listing with search/filters, returns jobs, meta, applied_filters, facets
  • GET /api/job/filters — facet counts for the filter UI

Full request/response reference: docs/DETAILED_DOCS.md

Health

  • GET /health — uptime + timestamp
  • GET / — server-running check

Ingestion

Cron-style HTTP endpoints load Greenhouse, Ashby, and YC companies, fetch their jobs, classify them (domain/level/employment type), and upsert into PostgreSQL.

Production

Serves workway.dev.

Reviews

No reviews yet

Be the first to review this server!