Greenhouse vs Himalayas Remote Jobs MCP

Greenhouse 76

Read with the hosted rubric, for the Harvest v3 API. Statuspage at status.greenhouse.io with a Greenhouse Harvest API component and per-silo components (20). The history feed (history.atom) covers the 90 days from 4 August to 2 November 2026. Three posts touch the API, each partial. On 5 August a partial disruption of Greenhouse Recruiting (scorecards, notes, emails, offer letters and more) ran from 02:18 UTC to a fix at 03:56. On 2 September a HarvestV3 maintenance posted as it began gave elevated 401 errors for 34 minutes. On 13 October a partial disruption of Greenhouse Recruiting ran from 15:32 to 19:00. The rest name job boards, integrations, Voice AI or MyGreenhouse. Partial incidents only, so minor (20). The v3 limit is a fixed 30-second window whose size arrives in X-RateLimit-Limit, with no number published beyond an example of 75 (8). 429 carries Retry-After and the docs give backoff guidance, but no idempotency keys were found for writes (10). The SLA commits to 99.5 per cent for Greenhouse Recruiting with service credits and does not name the API (8). Harvest v3 is generally available, while the MCP server is in open beta (10). 20+20+8+10+8+10 = 76.

Himalayas Remote Jobs MCP 25

No status page found (0). No history (5). Some limits documented with numbers (100 candidate searches a day, 10 messages a minute) (10 of 15). No retry guidance (0). No SLA (0). Not labelled beta; the old SSE endpoint is retired with 410 Gone (10). 0 + 5 + 10 + 0 + 0 + 10 = 25.

Greenhouse 0

Read with the hosted rubric. No x402, MPP or L402 (0). No public prices. The pricing page names Core, Plus and Pro and says pricing is customised (0). No free tier or trial found, and the sandbox comes only with the Pro tier (0). Credentials are created by a person inside a customer account, and the MCP server's dynamic client registration still needs a paying organisation and a user's consent in a browser (0).

Himalayas Remote Jobs MCP 50

No machine payment protocol; paid extras return Stripe checkout links (0). Plus price public (10 of 20). Free search and posting (20). Public tools need no account (20). 0 + 10 + 20 + 20 = 50.

Greenhouse 85

OAuth 2.0 with a scope per endpoint, client credentials or the authorisation code grant, one-hour partner access tokens and secret rotation that keeps the old secret for up to a week. The MCP server adds PKCE and dynamic client registration (30). Read-only access is possible by scope, the MCP defaults to seven read-only scopes, blocks every DELETE and asks for confirmation on five actions. All list endpoints need a Site Admin as the authorising user (16). The MCP security FAQ covers prompt injection (structured tool calls only, permission-bound and rate-limited), with no guidance on treating candidate text in responses as untrusted (9). The Audit Log API records Harvest and MCP calls with user, client and arguments for thirty days, as a paid add-on (12). SOC 2 Type II, ISO 27001, 27701 and 42001, a HackerOne bug bounty and annual penetration tests. security.txt expired on 1 February 2026 (18).

Himalayas Remote Jobs MCP 42

OAuth 2.1 with PKCE and client metadata documents (25 of 30). Read-only public set; writes such as send_message and job posts are annotated (12 of 20). Job posts and recruiter messages are third-party text with no injection guidance (0). No audit log (0). No security.txt (404) or certifications found (5 of 20). The privacy policy follows the Australian Privacy Principles. 25 + 12 + 0 + 0 + 5 = 42.

Greenhouse 79

Closed service with a public Master Subscription Agreement last updated 1 February 2026, and an Apache-2.0 docs repository (15). The agreement queues customer data for deletion 90 days after termination, a DPA is published, and the MCP FAQ says the server stores no customer data. The privacy policy of 28 May 2026 says personal information may be used to develop and train AI models and gives no retention periods (20). The removal of Harvest v1 and v2 was announced for 31 August 2026 with migration guides, but on 2 November 2026 the banner still read as future, and a v3 changelog entry of 22 October still names Harvest V1 as a way to change job owners. Deprecated v3 values are marked in the changelog (the active status filter on 22 October, kept as an alias). No written deprecation policy with a notice period was found (12). A public sub-processor list with purposes and locations, AWS hosting in the United States, Germany and Australia, and the MCP server stated as US-only (20).

Himalayas Remote Jobs MCP 46

Closed service under terms naming Himalayas Remote Jobs Pty Ltd (15). Privacy policy under the Australian Privacy Principles; retention periods not given (15 of 30). Dated retirement of the SSE endpoint (10 of 20). Subprocessors not found (5 of 20). 15 + 15 + 10 + 5 = 45.

Greenhouse 65

The newest Harvest v3 changelog entry is dated 29 October 2026 (d5a234aa, GET /v3/prospect_details) (30). 28 dated entries from 1 October to 29 October alone (20). Closed service with a changelog, monthly release notes that list API changes and a partner support address. Changelog entries are titled by commit hash, which makes them hard to follow (10). No official SDKs found, and the MCP server is not in the official MCP registry (0, per the 7 October check, not re-read on 2 November). No package to assess. The docs repository for the older APIs had commits up to 10 September 2026 (5, per the 7 October check, not re-read on 2 November). 30+20+10+0+5 = 65.

Himalayas Remote Jobs MCP 50

Registry update and tag v1.0.3 on 21 October 2026 (30). Fewer than three dated releases found in 90 days (0). Repository issues not read (0). Official registry entry app.himalayas/mcp (15). Docs repository with server.json; server source not public (5 of 10). 30 + 0 + 0 + 15 + 5 = 50. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

Greenhouse 79

Every v3 reference page has a Markdown twin with an OpenAPI 3.1 definition for that endpoint. No single downloadable spec was found (20). llms.txt indexes 179 reference pages and the guides, all served as Markdown (10). Descriptions state purpose, required fields and limits, for example that stage moves are not handled by the update call and that from_stage_id guards against stale moves (16). Request bodies set additionalProperties to false with required fields, enums and length limits (13). Success examples are given, but reference pages list 401, 403 and 422 without bodies, and error bodies appear only in the guides (8). The path is versioned and the changelog had 28 entries from 1 October to 29 October 2026, titled by commit hash with relative dates on the page, though each entry now names the endpoints and the change (12).

Himalayas Remote Jobs MCP 70

79 tools read from tools/list (78 visible without sign-in) with JSON Schema inputs and 33 enums (25). llms.txt (10). Clear descriptions with when to use them (15 of 20). Mostly typed, with comma-separated string lists and two free-form objects (8 of 15). Example prompts and parameter tables (7 of 15). Registry version 1.0.3 and repository tags, no changelog (5 of 15). 25 + 10 + 15 + 8 + 7 + 5 = 70.