Skip to main content
ModernLoop exposes two MCP toolsets. Each toolset maps to a separate endpoint and OAuth resource. A token issued for one endpoint cannot call the other.
Use the read-only toolset unless your workflow needs to create, update, or delete ModernLoop data.

Available toolsets

Both toolsets use Streamable HTTP transport and OAuth 2.1 with PKCE. See ModernLoop MCP for client configuration.

Connection-level tool filtering

Add one of these query parameters to the MCP endpoint URL to narrow the tools available to a connection: Each parameter accepts a comma-separated list of exact names from MCP Tools. Use only names available on the selected endpoint. Whitespace and trailing commas are ignored.
The parameters cannot be combined. An empty list or an unknown tool name returns HTTP 400 with VALIDATION_FAILED, preventing a typo from silently changing the connection’s tool surface. Filtering can only remove access. It intersects with the selected endpoint, OAuth scopes, and organization entitlements; it does not request, grant, or alter permissions. For example, adding a tool to include_tools does not make it visible when the token lacks its required scope. The filter applies throughout the connection:
  • tools/list omits filtered tools.
  • Calling a filtered tool directly returns NOT_FOUND.
  • Built-in prompts and workflow guidance are omitted when they require a filtered tool.
Keep get_me in an allowlist so agents can inspect granted scopes and tool_access. After connecting, use tools/list as the authoritative list of tools visible to that endpoint, token, organization, and filter.

Read-only toolset

The read-only toolset exposes lookup and list tools only. It does not include create, update, or delete operations. Included areas:
  • Candidates, applications, jobs, and job stages
  • Users and interviewer capacity
  • Interview modules and module membership
  • Organization settings (read)
  • Interview events and schedules
  • Scheduling tasks and task queues
  • Email and calendar templates
OAuth tokens for this endpoint are limited to read scopes. The authorization server issues a separate resource identifier for /mcp/readonly.

Default toolset

The default toolset includes every read-only tool plus 15 write tools. Additional write capabilities: delete_interview_module, delete_interview_module_member, and cancel_scheduling_task are marked destructive. Confirm with the user before calling them.

Tool availability

Tool availability depends on four factors:
  1. Endpoint — The read-only endpoint omits all write tools.
  2. OAuth scopes — The token must include the scope each tool requires. See Required permissions.
  3. Organization entitlements — Tools for resources your organization cannot access return not found.
  4. Connection filterinclude_tools or exclude_tools can further narrow the connection’s tool surface.
After connecting, call tools/list for the authoritative tool list and input schemas for your session.

Choose a toolset

Point your MCP client at:
Grant only the read scopes your workflow needs during OAuth consent.

Further reading

  • ModernLoop MCP — client-specific connection steps
  • MCP Tools — per-tool reference with read-only toolset membership
  • MCP Data Model — relationships, IDs, discovery, and pagination