boss-agent-cli — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow the recruiting workflow and tool-surface changes as the service develops

Reviewed Oct 5, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Job seekers and recruiters automating BOSS Zhipin discovery and candidate workflows.

What we know

A Python recruitment CLI/MCP with job search, local candidate pools, resume/JD analysis, chat and recruiter operations.

Maintenance / activity evidence

Observed Oct 4, 2026 (UTC)docs: 刷新 Star History 快照

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Logged-in recruitment account permissions. Writes: Recruiter greetings/replies; Resume/candidate/job operations.
Platform login
Sensitive access: Resumes, Candidate data, Chats, Browser session

The MCP can operate sensitive recruiting workflows and external communications; protect local state and require confirmation for writes.

Security source · repository notice ↗Security source · policy file ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

2,042 repository stars · 1.7k package downloads / 30 days

Stars observed Oct 6, 2026. Downloads observed Oct 6, 2026.

All limitations / Review context

Which job-search and candidate workflow tools are still exposed through MCP?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

The MCP can operate sensitive recruiting workflows and external communications; protect local state and require confirmation for writes.
Logged-in recruitment account permissions.
Platform login
Credentials are described as locally encrypted; explicit model/API calls may send selected data externally.
Reviewed write actions: Recruiter greetings/replies; Resume/candidate/job operations
Sensitive access: Resumes, Candidate data, Chats, Browser session
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
No independent runtime, installation, or comprehensive security audit was performed.
No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
Currently focused on BOSS Zhipin.
Recruitment data, resumes and chat history are highly sensitive.

Original activity observations

2026-10-04T04:21:55Z: docs: 刷新 Star History 快照

Technical identity

github.com/can4hou6joeng4/boss-agent-cli

Exact implementation source: https://github.com/can4hou6joeng4/boss-agent-cli ↗
Reviewed resource type: MCP Server
Repository identity: can4hou6joeng4/boss-agent-cli
Package identity: pypi:boss-agent-cli

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 5, 2026 · Latest source observation Oct 6, 2026

GitHub repository ↗
can4hou6joeng4/boss-agent-cli
Recorded repository material and project history.
Evidence source ↗
pypi.org/project/boss-agent-cli/
Source material retained for this review.
Includes references whose attribution is not established.

Setup · Watchlist

Install & Agents

Publisher instructions.

Source evidence observed Oct 13, 2026.

Additional setup details required — see the specific gaps below.

Install / connect
Publisher instructions
Publisher-specific setup path. Follow prerequisites, then register or connect to your MCP host.
publisher documented install or connect · Publisher instructions
uv tool install boss-agent-cli patchright install chromium
Configure / authenticate
Publisher instructions
Register MCP stdio as `uvx --from boss-agent-cli[mcp] boss-mcp` (77 tools); login separately via `boss login`.
Advanced configuration · claude desktop json · Publisher instructions
claude desktop json · Publisher instructions
{ "mcpServers": { "boss-agent": { "args": [ "--from", "boss-agent-cli[mcp]", "boss-mcp" ], "command": "uvx" } } }
Check connection
Publisher instructions
Publisher: `boss doctor`, `boss status`, `boss schema --format native`; use `boss status --live` only if intentionally checking live auth.
read only auth status check · Publisher instructions
boss status
Remove / uninstall / revoke
MCP100 setup guide
Remove `boss-agent` MCP host configuration; optional `uv tool uninstall boss-agent-cli` removes installed CLI.
MCP100 client-scope guidance: each CLI removal example targets only its named client and exact registered entry. Package names, Desktop/Cursor configuration keys and Codex/Claude registration names may differ; use the entry you actually registered. Client removal does not revoke provider credentials.
claude mcp remove boss-agent

Official Documentation & Sources

What it does

A Python recruitment CLI/MCP with job search, local candidate pools, resume/JD analysis, chat and recruiter operations.

Capability: Productivity & Collaboration
Resource type: MCP Server
Industry: Human Resources
Best fit: Job seekers and recruiters automating BOSS Zhipin discovery and candidate workflows.

Representative uses

Search jobs with filters
Maintain shortlist/statistics
Analyze JDs and resumes
Run recruiter/candidate/chat workflows

Limitations

Currently focused on BOSS Zhipin.
Recruitment data, resumes and chat history are highly sensitive.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Platform login
Permissions: Logged-in recruitment account permissions.
Data handling: Credentials are described as locally encrypted; explicit model/API calls may send selected data externally.
Cost: free
Risk and cautions: The MCP can operate sensitive recruiting workflows and external communications; protect local state and require confirmation for writes.

Access scope and cautions

Write actions: Recruiter greetings/replies Resume/candidate/job operations
Sensitive access: Resumes Candidate data Chats Browser session
Risk level: high

FAQ

Based on reviewed evidence as of 2026-10-06. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Search jobs with filters; Maintain shortlist/statistics; Analyze JDs and resumes; Run recruiter/candidate/chat workflows.

What setup and authentication are documented?

Recorded installation/entrypoint step: uvx --from boss-agent-cli[mcp] boss-mcp. Recorded transport: stdio. Prerequisites: uv; Browser kernel for login/export where needed. These are the documented setup details, not a claim that installation or client compatibility was independently tested. Authentication: Platform login; local encrypted login state.

Can it modify data or perform write operations?

Documented write actions include: Recruiter greetings/replies; Resume/candidate/job operations. Recorded permission boundary: Logged-in recruitment account permissions.

What data-handling boundary should I consider?

Credentials are described as locally encrypted; explicit model/API calls may send selected data externally. Recorded sensitive-access context: Resumes; Candidate data; Chats; Browser session.

What limitations and risks should I check before use?

The MCP can operate sensitive recruiting workflows and external communications; protect local state and require confirmation for writes. Currently focused on BOSS Zhipin. Recruitment data, resumes and chat history are highly sensitive. No independent runtime, installation, or comprehensive security audit was performed.

Is this an official MCP?

can4hou6joeng4 is listed as Community implementation in MCP100’s current evidence.