AI agents & MCP
AI agents use VerifyRef to find and rank recruits for any business — then run reference checks when you are ready to hire. Prefer hosted MCP; fall back to REST with the same Bearer key.
Connect MCP
Hosted server: https://verifyref.com/api/mcp
Create a key at Developer settings (rc_test_ sandbox — no emails, no credit debit — or rc_live_ production).
Cursor / mcp.json
Cursor mcp.json
{
"mcpServers": {
"verifyref": {
"url": "https://verifyref.com/api/mcp",
"headers": {
"Authorization": "Bearer rc_test_YOUR_KEY"
}
}
}
}Claude Code / Claude Desktop
Claude MCP config
{
"mcpServers": {
"verifyref": {
"url": "https://verifyref.com/api/mcp",
"headers": {
"Authorization": "Bearer rc_test_YOUR_KEY"
}
}
}
}Discovery: /.well-known/mcp/server-card.json · /llms.txt · /AGENTS.md · /openapi.yaml
Stdio bridge (@datalinc/verifyref-mcp)
If your host does not support remote Streamable HTTP MCP, use the npm stdio bridge. It proxies to the hosted server with your API key.
Stdio MCP config
{
"mcpServers": {
"verifyref": {
"command": "npx",
"args": ["-y", "@datalinc/verifyref-mcp"],
"env": {
"VERIFYREF_API_KEY": "rc_test_YOUR_KEY"
}
}
}
}Or run VERIFYREF_API_KEY=rc_test_… npx @datalinc/verifyref-mcp. Prefer the remote URL when the host supports it.
Recommended workflow
- get_account — note credit balance.
- upload_candidate_resume — add resumes to the talent pool (free), or list_candidates if the pool is already filled.
- match_candidates_to_job — paste a job description; get top fits with scores (free).
- create_reference_check — pass
candidateId(1 credit on live keys). Never invent IDs — only use ones returned by VerifyRef. - If credits are low: purchase_credits — Stripe MPP Shared Payment Token, or open the returned
checkoutUrl.
Do not skip candidate consent; VerifyRef emails consent before contacting references. Video interviews and employee surveys are available via REST (not MCP tools today). Exit interviews are dashboard-only.
MCP tools
| Tool | REST | Notes |
|---|---|---|
| get_account | GET /account | Team name + credits |
| list_candidates | GET /talent-pool/candidates | Free |
| get_candidate | GET /talent-pool/candidates/:id | Free |
| upload_candidate_resume | POST /talent-pool/candidates | PDF/DOCX base64 or multipart via REST |
| match_candidates_to_job | POST /talent-pool/match | jobDescription required |
| update_candidate | PATCH /talent-pool/candidates/:id | Free |
| create_reference_check | POST /checks | 1 credit (live) |
| get_check | GET /checks/:id | Includes reportUrl |
| list_checks | GET /checks | Filters supported |
| purchase_credits | POST /credits/purchase | package 5|20|50|100 |
Example inputs
Match to job
// MCP: match_candidates_to_job
{
"jobDescription": "Senior React engineer, 5+ years TypeScript, remote AU…"
}
// REST equivalent
POST https://verifyref.com/api/v1/talent-pool/match
Authorization: Bearer rc_test_…
{ "jobDescription": "…" }Create check
// MCP: create_reference_check
{
"candidateId": "cand_…",
"candidateName": "Jane Doe",
"candidateEmail": "jane@example.com",
"questionnaireId": "tmpl_…",
"references": [
{ "name": "Alex Manager", "email": "alex@acme.com", "relationship": "Manager" }
]
}Agentic payments
POST /api/v1/credits/purchase accepts packages 5 | 20 | 50 | 100. When STRIPE_PROFILE_ID is configured, agents receive an HTTP 402 MPP challenge for Shared Payment Tokens. Otherwise (or as fallback) a Stripe Checkout URL is returned for the user.
OAuth 2.1 for MCP (instead of pasting API keys) is on the roadmap — see /.well-known/oauth-protected-resource. Declared scopes today: talent_pool, checks, credits.
Troubleshooting
- 401 / invalid key — confirm the key is copied fully from Developer settings; sandbox keys start with
rc_test_. - 402 insufficient credits — call
purchase_creditsor buy a pack in Billing, then retry. - No emails in sandbox — expected for
rc_test_. Userc_live_only when ready for real delivery. - Rate limits — 100 requests/minute per API key.
- Smoke-test locally with
npm run test:agent -- rc_test_YOUR_KEY(see repoTESTING_AGENT.md).
REST instead of MCP
Same capabilities (plus video interviews, surveys, webhooks, jobs) via the API reference with Bearer auth. Prefer MCP when the host supports it.
