Himalayas Remote Jobs MCP vs SmartRecruiters

Himalayas Remote Jobs MCP 25

No status page found (0). No history (5). Some limits documented with numbers (100 candidate searches a day, 10 messages a minute) (10 of 15). No retry guidance (0). No SLA (0). Not labelled beta; the old SSE endpoint is retired with 410 Gone (10). 0 + 5 + 10 + 0 + 0 + 10 = 25.

SmartRecruiters 95

Graded on the public REST API. Statuspage at status.smartrecruiters.com with 11 components, among them Customer API and Marketplace API (20). The 7 October reading came from the page's /api/ data path, which its robots.txt disallows, so it is struck and the record is read from history.atom and the incident pages. From 6 August the one incident is a 20-minute login fault on 7 September in the EU datacentre, which affected Recruiter Apps only. The 21 July major has left the window. None touches the API, so a clean record (30). Limits are published at 10 requests a second and 8 concurrent per credential (15). X-RateLimit headers on every response and guidance to retry on an exponential backoff schedule, but Retry-After is documented only for the deprecated Analytics API and no idempotency keys were found for writes (10). SLA of 99.9 per cent annual availability for paid subscriptions (10). The API is generally available, with single fields marked alpha (10). 20 + 30 + 15 + 10 + 10 + 10 = 95.

Himalayas Remote Jobs MCP 50

No machine payment protocol; paid extras return Stripe checkout links (0). Plus price public (10 of 20). Free search and posting (20). Public tools need no account (20). 0 + 10 + 20 + 20 = 50.

SmartRecruiters 3

No x402, MPP or L402 (0). On 4 November the pricing page names the plans with no prices and asks visitors to talk to an expert; the Essential "starting at $14,995" figure read on 7 October is gone (0). No free tier or trial found (0). A customer administrator has to create the credential in a browser. The Posting API returns published jobs with no credential, which earns partial credit (3).

Himalayas Remote Jobs MCP 46

Closed service under terms naming Himalayas Remote Jobs Pty Ltd (15). Privacy policy under the Australian Privacy Principles; retention periods not given (15 of 30). Dated retirement of the SSE endpoint (10 of 20). Subprocessors not found (5 of 20). 15 + 15 + 10 + 5 = 45.

SmartRecruiters 79

Editorial half. Closed service with a public Master Subscription Agreement (version 15 November 2024) and an archive of earlier versions (15). Privacy notice updated 2 March 2026, a pre-signed DPA, 30 days of API access after termination followed by deletion, and 26 months of audit retention. The AI addendum lets SmartRecruiters train on anonymised or pseudonymised data, and the detailed retention documents sit in the trust centre (24). Written policy of at least 10 months' notice before a sunset and 24 months of support for earlier versions (18). Sub-processor list with purposes and locations, default hosting in Frankfurt with Ohio and Sydney as alternatives (18).

Himalayas Remote Jobs MCP 42

OAuth 2.1 with PKCE and client metadata documents (25 of 30). Read-only public set; writes such as send_message and job posts are annotated (12 of 20). Job posts and recruiter messages are third-party text with no injection guidance (0). No audit log (0). No security.txt (404) or certifications found (5 of 20). The privacy policy follows the Australian Privacy Principles. 25 + 12 + 0 + 0 + 5 = 42.

SmartRecruiters 65

OAuth 2.0 client credentials with 49 scopes, a system role and an optional access group, 1,799-second access tokens and revocation in Credential Manager. An unscoped API key with full company access and no expiry is also available, and secrets travel in headers only (26). Read scopes are separate from write and manage scopes, and access groups limit which records a credential sees. No confirmation step for deletes found (13). The API returns CVs and screening answers written by candidates, and no prompt-injection guidance was found (2). Audit API for administrators with at least 26 months of retention, and a webhook callback log (11). The trust centre lists SOC 2 Type 2, ISO 27001, TISAX and UK Cyber Essentials with yearly external penetration tests. No security.txt or bug bounty found. SAP's own disclosure and bounty pages weren't read for this listing (13).

Himalayas Remote Jobs MCP 50

Registry update and tag v1.0.3 on 21 October 2026 (30). Fewer than three dated releases found in 90 days (0). Repository issues not read (0). Official registry entry app.himalayas/mcp (15). Docs repository with server.json; server source not public (5 of 10). 30 + 0 + 0 + 15 + 5 = 50. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

SmartRecruiters 58

Newest changelog entry 13 October 2026, exposing external source metadata on job and candidate properties in the Configuration API (30). Ten dated entries in the changelog feed from 1 September to 13 October, inside the 90 days from 6 August, covering the Offer, Users, Audit, Jobs and Configuration APIs (20). Closed service with a changelog and RSS feed. API issues go through Contact Support inside a customer account, and no public developer forum was found (8). No official SDKs (0). No packages to assess (0).

Himalayas Remote Jobs MCP 58

79 tools, about 78 KB (5), split into public, job-seeker and employer sets (5 back). Filters and paging on search (15 of 20). Errors not documented (5 of 20). All visible tools annotated, 34 read-only (20). Public tools work with no setup (8 of 15). 10 + 15 + 5 + 20 + 8 = 58.

SmartRecruiters 51

List endpoints take limit up to 100 with a default of 10, and webhooks carry IDs only. No field selection found (12). Cursor paging by pageId and filters such as status, jobId and updatedAfter, though some endpoints still page by offset (16). Errors return a code and message, with the codes listed per operation (14). No idempotency keys found. The docs advise backoff and a 128-second client timeout (3). Few required parameters and sensible defaults, but no official SDK in any language (6).