VendorNeverApply
Connects overhttp

Our grade: 4 checks

Login Scoped login by default
Upkeep Active · 2026-10
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

4.4 8 reviews
75% would trust it in production
  • 5 3
  • 4 5
  • 3 0
  • 2 0
  • 1 0

Trust in production

  • Trust it - 75%
  • With caveats - 25%
  • Wouldn't - 0%

100% would recommend this server

How reviewers scored it

  • Setup & docs 4.5
  • Auth experience 4.5
  • Reliability 4.1
  • Maintainer responsiveness 4.1

Why it got an A

NeverApply's own hosted server over HTTPS. Without signing in it can only search jobs and read one job. Sign in with OAuth and you choose the scopes: mcp:read for matches and application history, mcp:write for profile, resume and interview drafts, and mcp:apply to submit applications. Leave mcp:apply off unless you want the assistant to apply for you, and keep tool approval on when you grant it, because an application sends your details to an employer. There's no API key to store. The public repo holds only plugin manifests and skills. No advisories on record. Biggest deduction: the server itself is closed source, so maintenance is scored one band lower.

How to connect

// .cursor/mcp.json (or install the NeverApply plugin)
{ "mcpServers": { "neverapply": { "url": "https://neverapply.co/mcp" } } }

Is NeverApply MCP Server safe?

Is NeverApply MCP Server safe to use?

NeverApply MCP Server grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does NeverApply MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does NeverApply MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade A

Markdown

[![TrustedMCP grade A](https://trustedmcp.io/badge/neverapply-mcp.svg)](https://trustedmcp.io/servers/neverapply-mcp)

HTML

<a href="https://trustedmcp.io/servers/neverapply-mcp"><img src="https://trustedmcp.io/badge/neverapply-mcp.svg" alt="TrustedMCP grade A" height="80"></a>

Community reviews

Jonas Berg Freelance developer
Trusts in production Recommends

Set it up once, forgot about it

Of the NeverApply integrations I tried, this one is the most predictable. Updates land regularly, and nothing broke when I upgraded.

Used for Connecting the agent to existing automations

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Daniel Kim Ops engineer
Trusts in production Recommends

Good defaults, good docs

Our agents call this dozens of times a day. The API key sits in the config file, so I made a dedicated key with minimal permissions.

Used for Triggering workflows from chat

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 3/5
Elif Yilmaz Staff engineer
Trusts with caveats Recommends

Recommended it to two teams already

Clear tool names, sensible outputs, very few surprises. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. You can tell it is actively maintained, the rough edges keep getting fixed. Keep permissions tight and it is a good tool.

Used for Ops tasks like provisioning accounts

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Lina Haddad Backend engineer
Trusts in production Recommends

Our team uses it every day

Simple to set up in Cursor, simple to reason about. Gave it its own API key so I can revoke it without breaking anything else. Sign-in flow was painless and I never had to paste a key into a config file.

Used for Routing inbound requests

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Emily Chen Security engineer
Trusts in production Recommends

Does what it says, no drama

Hooked NeverApply MCP Server into Claude Code and it worked on the first try. Hosted endpoint means no local process to babysit. Sign-in flow was painless and I never had to paste a key into a config file.

Used for Glue between tools that have no direct integration

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 4/5
Chris Turner Full-stack developer
Trusts with caveats Recommends

Quietly reliable

Tried it on a side project first, then rolled it out at work. Scoped the token to just what the agent needs and it respected that. Being official from NeverApply counts for a lot when I pitch it to security. You can tell it is actively maintained, the rough edges keep getting fixed. I would use it in prod, but only with a human approving writes.

Used for Connecting the agent to existing automations

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Oscar Lund Eng lead, fintech
Trusts in production Recommends

Clean integration, sensible permissions

Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Nothing to install, I just point the client at the URL. It is in our production agent and I sleep fine.

Used for Scheduled reporting jobs

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Ryan O'Connor Developer, healthtech
Trusts in production Recommends

Surprisingly polished

Set this up for our team after comparing a few options. Nice to use something maintained by NeverApply rather than a random fork. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Good choice if you need NeverApply in your agent.

Used for Triggering workflows from chat

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you