Himalayas Remote Jobs MCP vs Teamtailor

Himalayas Remote Jobs MCP 25

No status page found (0). No history (5). Some limits documented with numbers (100 candidate searches a day, 10 messages a minute) (10 of 15). No retry guidance (0). No SLA (0). Not labelled beta; the old SSE endpoint is retired with 410 Gone (10). 0 + 5 + 10 + 0 + 0 + 10 = 25.

Teamtailor 75

Graded on the REST API with the hosted lines. Statuspage site at status.teamtailor.com with an API group for the EU, US West and Asia Pacific regions beside the Applicant Tracking System, career site, analytics and marketing site, read from the page on 4 November 2026 (20). The history feed has six incidents since 6 August, all between 16 September and 1 October 2026 and none since. Each names some customers or one region. Five lasted 6 to 19 minutes, one on 28 September was 4 hours 25 minutes of intermittent slow responses in North America with three short periods of errors, and one on 1 October touched only the marketing website. Partial incidents read as minor (20). Rate limit published as 50 requests every 10 seconds, then HTTP 429 (15). The 429 comes with X-Rate-Limit-Reset giving the seconds left in the period. No backoff guidance, safe-retry guidance or idempotency keys were found in the readable introduction, so the reset header alone gives 10. No SLA is published, and the trust centre says Teamtailor typically does not commit to specific numbers, per the 8 October check (0). The API has been public since 2016 and carries no beta label (10). 20 + 20 + 15 + 10 + 0 + 10 = 75.

Himalayas Remote Jobs MCP 50

No machine payment protocol; paid extras return Stripe checkout links (0). Plus price public (10 of 20). Free search and posting (20). Public tools need no account (20). 0 + 10 + 20 + 20 = 50.

Teamtailor 0

No x402, MPP or L402 (0). No price is public. The pricing page asks for a quote (0). No free plan or free trial was found on the pricing page, in the sitemap or in the help centre (0). A person books a demo, signs an order form and creates the key in settings (0).

Himalayas Remote Jobs MCP 70

79 tools read from tools/list (78 visible without sign-in) with JSON Schema inputs and 33 enums (25). llms.txt (10). Clear descriptions with when to use them (15 of 20). Mostly typed, with comma-separated string lists and two free-form objects (8 of 15). Example prompts and parameter tables (7 of 15). Registry version 1.0.3 and repository tags, no changelog (5 of 15). 25 + 10 + 15 + 8 + 7 + 5 = 70.

Teamtailor 25

The reference is a Postman collection drawn by script at docs.teamtailor.com. The page's own HTML carries the introduction and the changelog, read on 4 November 2026. The 129 requests, their attribute tables and examples load from a collection data file the page prefetches, which this run doesn't read, so the 8 October readings of them are struck. No OpenAPI document or visible download of the collection was found, and the MCP tool schemas sit behind OAuth (0). No llms.txt or Markdown docs for the API. The llms.txt on www.teamtailor.com covers marketing pages only (0). The introduction explains authentication and key scopes, versioning, rate limits with advice to filter or paginate large endpoints such as /v1/answers, and pagination. Per-request descriptions weren't readable (5). No attribute tables, enums or required fields were readable. The introduction gives only page[size]'s default of 10 and maximum of 30 (0). Five worked request examples and a pagination response. The changelog names a JSON:API error body on 400 for POST /v1/notes and 422 answers on jobs, and no error reference was readable (5). Dated versions through X-Api-Version and a changelog from 2016 to 21 October 2026 (15). 0 + 0 + 5 + 0 + 5 + 15 = 25.

Himalayas Remote Jobs MCP 46

Closed service under terms naming Himalayas Remote Jobs Pty Ltd (15). Privacy policy under the Australian Privacy Principles; retention periods not given (15 of 30). Dated retirement of the SSE endpoint (10 of 20). Subprocessors not found (5 of 20). 15 + 15 + 10 + 5 = 45.

Teamtailor 83

Closed service with published terms and conditions, last updated 2 May 2026, that cover APIs in section 14 (15). The DPA on the same page gives figures (backups kept 10 days, sub-processor copies up to 30 days after deletion, application logs 365 days, candidate event logs 28 days, deletion within 60 days of termination), and the privacy notice and the MCP privacy policy agree with it, per the 8 October check for the last two (26). Breaking API changes ship as new dated versions and the terms promise 30 days' written notice of a change that significantly harms a customer's operations. The changelog posts dated deprecations, such as facebook-id and facebook-profile on 29 September 2026, with no period before removal, so dated notices with no period (15). Sub-processor lists for each of three regions, hosting in Ireland, Oregon and Australia, and 14 days' notice of changes (20). 15 + 26 + 15 + 20 = 76.

Himalayas Remote Jobs MCP 42

OAuth 2.1 with PKCE and client metadata documents (25 of 30). Read-only public set; writes such as send_message and job posts are annotated (12 of 20). Job posts and recruiter messages are third-party text with no injection guidance (0). No audit log (0). No security.txt (404) or certifications found (5 of 20). The privacy policy follows the Australian Privacy Principles. 25 + 12 + 0 + 0 + 5 = 42.

Teamtailor 67

API keys are scoped by data level (Public, Internal, Admin) and by read, write or both, sent only in a header and deletable. No expiry or rotation feature was found. The MCP server uses OAuth 2.1 with PKCE, short-lived tokens, a revocation endpoint and read, write and delete scopes (25). Read-only keys exist, and MCP access is set per user role as off, read, create and modify, or delete, on top of the user's own permissions. Candidate data needs an Admin key, and no confirmation step guards REST deletes (15). CVs, answers, messages and meeting transcripts are candidate-written, and no injection guidance was found (0). The audit log add-on records actor, action, source and IP address, is readable at /v1/audit-events, and labels MCP writes with the user and client name. It keeps 15 to 30 days by default (12). ISO/IEC 27001 and 27701 certificates, an annual SOC 2 Type 2 audit, yearly external penetration tests and a private bug bounty. No security.txt and no public disclosure policy were found (15). Per the 8 October check for the help centre, audit log and trust centre, not re-read on 4 November; key scopes re-read in the API introduction.

Himalayas Remote Jobs MCP 50

Registry update and tag v1.0.3 on 21 October 2026 (30). Fewer than three dated releases found in 90 days (0). Repository issues not read (0). Official registry entry app.himalayas/mcp (15). Docs repository with server.json; server source not public (5 of 10). 30 + 0 + 0 + 15 + 5 = 50. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

Teamtailor 58

The newest API changelog entry is dated 21 October 2026, adding language-code to candidates and job applications and read-only interview kits (30). Four dated entries since 6 August, on 25 August, 28 September, 29 September and 21 October 2026 (20). A public changelog and a support address, with the help centre stating that API implementation support is not given (8). No official SDK was found, and no official MCP server entry from the vendor was found (0). No packages to assess (0). 30 + 20 + 8 + 0 + 0 = 58.