Greenhouse vs SmartRecruiters

Greenhouse

Harvest v3 pairs per-endpoint OAuth scopes with Markdown docs that embed an OpenAPI 3.1 definition for each call, and the beta MCP server blocks every DELETE. Access needs a paying customer account, with no public price, trial or self-serve sandbox, and no numeric rate limit or idempotency key was found in the reviewed documentation.

SmartRecruiters

OAuth client credentials limited by 49 scopes, a system role and an access group, with per-operation OpenAPI definitions, llms.txt and a dated changelog. Access needs a paid SmartRecruiters account, with the lowest plan starting at $14,995, and no free tier, official SDK or idempotency key was found.

Greenhouse

1. Request a token from https://auth.greenhouse.io/token with client credentials, then send it as a Bearer token to https://harvest.greenhouse.io/v3. Tokens expire, so repeat on 401
2. Put filters and per_page on the first list request only. A cursor must be the only query parameter, or the call returns 422
3. Send the current stage as from_stage_id when moving an application. It guards against stale moves. Other writes have no idempotency key, so check before retrying
4. Read X-RateLimit-Remaining on every response and wait for Retry-After on 429. The window is 30 seconds
5. Expect empty list results or 403 unless the token's user is a Site Admin with the needed permissions

SmartRecruiters

1. Ask the customer's admin for an OAuth client ID with only the scopes needed. An API key reads and writes all company data and never expires
2. Exchange the client ID and secret at https://api.smartrecruiters.com/identity/oauth/token and refresh every 30 minutes
3. Stay under 10 requests a second and 8 concurrent. GET /candidates allows 1 concurrent request, and job publication 2 a second
4. Move a candidate with PUT /candidates/{id}/jobs/{jobId}/status. The variants without jobId act on the most recently updated application
5. Page with limit (maximum 100, default 10) and pageId from nextPageId. Use the Reporting API for bulk reads, which returns CSV