Home / MCP registry index / app.himalayas/mcp
Himalayas Remote Jobs
app.himalayas/mcp in the official MCP registry.
Endpoint https://mcp.himalayas.app/mcp. Source: github.com/Himalayas-App/himalayas-mcp.
The registry describes it as: Remote jobs: job search, salary data and application tracking, or post a job and hire candidates
We read its 79 tools on 2026-10-22. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
get_jobs search_jobs get_job_details get_apply_link generate_application_documents get_new_matches skip_job get_plus_checkout_link join_radar_waitlist get_related_jobs get_companies search_companies get_company_details get_remote_work_statistics get_salary_data get_correct_country_name submit_feedback get_my_profile save_job get_saved_jobs update_job_status remove_saved_job update_profile add_experience add_education update_experience delete_experience update_education delete_education update_email_preferences update_account list_documents get_document update_document delete_document import_profile update_profile_photo get_billing_portal_link list_interviews get_interview_results get_interview_practice_link get_verification_link list_saved_answers update_saved_answer delete_saved_answer list_notifications mark_notifications_read list_coach_chats get_coach_chat list_headshots use_headshot_as_profile_photo get_headshots_link update_tech_stack search_talent get_talent_profile get_company_profile update_company_profile get_company_perks add_company_perk remove_company_perk and 19 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/app-himalayas-mcp)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.