Skip to main content
Glama
TSS99
by TSS99

LinkedIn MCP

Ein MCP-Server, der es einem KI-Assistenten ermöglicht, LinkedIn-Jobs zu durchsuchen und LinkedIn-Profile zu lesen, indem er ein echtes Chrome-Fenster über das DevTools-Protokoll steuert.

Es ist schreibgeschützt. Es gibt hier kein Werkzeug, das Kontakte knüpft, Nachrichten sendet, Fähigkeiten bestätigt, Beiträge veröffentlicht oder sich bewirbt – nicht als Einstellung, sondern weil der Code dafür nicht existiert. Das ist eine bewusste Grenze: LinkedIn behandelt automatisiertes Schreiben weitaus strenger als automatisertes Lesen, und die Vermischung der beiden ist der Grund, warum Konten eingeschränkt werden.

Werkzeuge

Tool

Was zurückgegeben wird

linkedin_search_jobs

Einträge mit Titel, Unternehmen, Standort, Arbeitsplatztyp, Gehalt (sofern in der Anzeige angegeben), Alter der Anzeige und job_id. Filter: Standort, posted-within-days, Erfahrungsstufe, Jobtyp, Arbeitsplatztyp, Easy Apply, Sortierreihenfolge.

linkedin_get_job

Eine einzelne Anzeige vollständig – Unternehmen, Standort, LinkedIns Job-Insights und die gesamte Beschreibung einschließlich des über „See more“ aufgeklappten Teils.

linkedin_get_profile

Name, Headline, Standort, Über-Text, beruficher Werdegang, Ausbildung und Fähigkeiten.

linkedin_checK_sesssion

Ob die gespeicherte Browser-sitzung noch angemeldet ist.

linkedin_close_session

Löst sich von Chrome und lässt Fenster und Sitzung unangetastet.

Related MCP server: LinkedIn MCP Server

Installation

Erfordert Python 3.12+, uv und Google Chrome.

git clone https://github.com/TSS99/linkedin-mcp.git
cd linkedin-mcp
uv sync

Melden Sie sich einmal an. Dies öffnet ein Chrome-Fenster und wartet darauf, dass Sie sich manuell anmelden – Anmeldedaten werden nie vom Skript eingegeben, da LinkedIn die skriptgesteuerte Eingabe von Anmeldedaten mit einer Challenge beantwortet:

uv run linkedin-mcp --login

Die Sitzung wird in ~/.linkedin-mcp/chrome-profil gespeichert. Überprüfen Sie sie jederzeit mit uv run linkedin-mcp --check und löschen Sie sie mit uv run linkedin-mcp --logout.

Welches Chrome-Profil gesteuert wird

Standardmäßig öffnet der Server ein eigenes Wegwerfprofil. Dieses Fenster sieht dann fabrikneu aus – keine Lesezeichen, keine Erweiterungen, in nichts angemeldet außer bei LinkedIn. Genau das ist der Sinn: Der Server kann ausschließlich LinkedIn sehen.

Wenn Sie es vorziehen, dass es Ihr normales Chrome steuert, sodass es die LinkedIn-Sitzung, die Sie bereits haben, wiederverwendet und kein fremdes Fenster öffnet, setzen Sie:

LINKEDIN_MCP_PROFILE_DIR=system

oder weisen Sie es ausdrücklich auf ein beliebiges Profilverzeichnis hin. In einer MCP-Client-Konfiguration kommt das in den env-Block:

{
  "mcpServers": {
    "linkedin": {
      "command": "uv",
      "args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"],
      "env": { "LINKEDIN_MCP_PROFILE_DIR": "system" }
    }
  }
}

Zwei Dinge, die Sie verstehen sollten, bevor Sie das tun:

Sie müssen Chrome trotzdem einmal neu starten. --remote-debugging-port wirkt nur beim Start; es kann für einen bereits laufenden Prozess nicht nachträglich aktiviert werden. Ein derzeit geöffnetes Chrome kann also niemals angebunden werden, egal was die Profileinstellung sagt. Beenden Sie es vollständig (Cmd+Q, nicht nur das Fenster schließen) und lassen Sie es vom Server starten, oder starten Sie es selbst mit dem Befehl, den --login ausgibt.

Der Debug-Port ist nicht auf LinkedIn beschränkt. Alles, was 127.0.0.1:9224 erreichen kann, kann jeden Tab in diesem Chrome steuern und jede darin enthaltene Sitzung lesen – Ihre E-Mails, Ihre Bank, alles – nicht nur LinkedIn. Beim isolierten Profil gibt es nichts anderes zu erreichen. Bei Ihrem normalen Profil ist alles erreichbar. Führen Sie es so nur auf einem Rechner aus, dem Sie vertrauen, und schließen Sie das Debug-Chrome, wenn Sie fertig sind.

--logout weigert sich, ein Profil zu löschen, das es nicht selbst erstellt hat. Wenn Sie das Tool also auf Ihr echtes Chrome richten, kann es Ihren Browserzustand nicht löschen.

Konfiguration

Fügen Sie Folgendes zu Ihrer MCP-Client-Konfiguration hinzu (siehe mcp-config.example.json):

{
  "mcpServers": {
    "linkedin": {
      "command": "uv",
      "args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"]
    }
  }
}

Für Claude Code: claude mcp add linkedin -- uv --directory /path/to/linkedin-mcp run linkedin-mcp

Wie es funktioniert und warum

CDP gegen ein echtes Chrome-Profil, nicht gegen einen gestarteten Browser. Playwrights eigenes Chromium verrät sich auf ein Dutzend Arten, die LinkedIn erkennt. Wenn Sie sich an ein echtes Chrome anhängen, bei dem Sie sich selbst angemeldet haben, bleiben Fingerprint und Cookie authentisch. Der Server läuft auf Debug-Port 9224 und koexistiert daher mit anderen browserbasierten MCP-Servern auf 9222/9223.

Navigationen werden zeitlich gestaffelt. LinkedIn begrenzt die Rate nicht nur nach Volumen, sondern auch nach Takt; deshalb erzwingt goto einen minimalen Abstand mit Jitter. Ein langer Recherchelauf ist absichtlich langsamer als möglich.

Jede Zeichenkette in LinkedIns DOM erscheint zweimal – einmal sichtbar, einmal in einem visually-hidden-Span für Screenreader – daher liest sich rohes innerText als „Acme Corp\nAcme Corp“. dedupe_lines fasst aufeinanderfolgende Wiederholungen zusammen; ohne dies erscheint jedes geparste Feld doppelt.

Selektoren sind geordnete Fallback-Listen. LinkedIns Klassennamen sind verschleiert und werden oft umbenannt. Wo möglich verankern sich die Parser an Dingen, die den Klassenwechsel überdauert haben – das data-occludable-job-id-Attribut, die stabilen Anker-IDs div#experience – und fallen auf das Parsen der Zeilenreihenfolge im Kartentext zurück, anstatt sich auf einen feldbezogenen Hook zu verlassen.

Ein fehlgeschlagenes Scraping liefert niemals ein leeres Ergebnis. Jedes Tool ist so gekapselt, dass ein fehlender Anker als {"status": "error", "error_type": "stale_selector", ...} zurücKkommt, mit Angabe von Selektor und URL. Ein LLM, dem [] übergeben wird, meldet mit völliger Überzeugung „keine Jobs gefunden“; das macht Werkzeugdefekt und echte Leere unterscheidbar.

Tests

uv run pytest

Die Tests decken die reinen Parser ab – URL-/Filterkonstruktion, Kartenparsing, Parsing von Profileinträgen, Zeilendeduplizierung – anhand von Testdaten in der Form, die LinkedIns DOM tatsächlich erzeugt. Sie benötigen weder Browser noch Netzwerk.

Wenn es nicht funktioniert

Das wird es. LinkedIn bringt ständig Markup-Änderungen heraus, und ein Scraper ist eine Vermutung über das HTML eines anderen. Erwarten Sie irgendwann stale_selector-Fehler; die Behebung besteht meist aus einem weiteren Eintrag in einer Selektor-Liste in tools/jobs.py oder tools/profiles.py, plus einem Fixture in tests/test_parsers.py.

Wenn Sie auth_required mit einer checkpoint-URL erhaten, möcht LinkedIn einen Menschen: Öffnen Sie das Chrome-Fenster, lösen Sie die Challenge auf und versuchen Sie es erneut.

Ein Wort zu den Nutzungsbedingungen

Automatiserter Zugriff verstößt unabhängig davon, wie sorgfältig die Implementierung ist, gegen die Nutzungsvereinbarung von LinkedIn, und LinkedIn schränkt dafür tatsächlich Konten ein. Dies ist ein persönliches Recherchewerkzeug; der schreibgeschützte Aufbau und zeitich gestaffelte Anfragen verringern das Risiko, beseitigen es aber nicht, und das Konto, auf das Sie es richten, ist dasjenige, das dieses Risiko trägt. Nutzen Sie Ihr Urteilsvermögen.

Lizenz

Apache-2.0

Available Tools

5 tools
linkedin_check_sessionA

Check whether the browser is signed in to LinkedIn.

Every other tool needs this to be true; LinkedIn serves a login wall to anonymous visitors on job listings and profiles alike.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry the behavioral burden. It states the check itself but does not explicitly confirm it is non-mutating or describe the return format. The login-wall context implies safety, but the description lacks explicit boundary details. It does not contradict anything, but could be more transparent about side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler. The purpose is stated first, and the second sentence adds valuable context about why this tool matters. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless check with no output schema, the description fully covers what an agent needs: what the tool does and why it's important before other tools. It is complete and self-sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and the schema is already complete (100% coverage). Baseline is 4. The description adds no parameter information, which is appropriate since there are none to document.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states a specific verb ('check') and resource ('whether the browser is signed in to LinkedIn'). The description distinguishes it from sibling tools by its unique purpose—session verification—and adds context about the login wall, making it unambiguous what this tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states that 'every other tool needs this to be true,' implying it should be called before other LinkedIn operations. This provides clear usage context. It does not list exclusions or alternatives, but given its singular nature, the guidance is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

linkedin_close_sessionA

Disconnect from the browser and free resources.

This detaches from Chrome; it leaves the window and the saved session alone.

NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It transparently discloses the key side effect: it does NOT close the window or the saved session, and it indicates resource freeing. This goes beyond a simple 'close session' and prevents the agent from assuming destructive behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with zero waste. The core action is front-loaded, and the clarifying sentence adds essential side-effect information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless tool with no output schema, the description is sufficient. It covers what it does and what it doesn't do. One could add typical usage timing (e.g., 'call at end of session'), but that is minor and not strictly necessary for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, so schema coverage is trivially 100%. The description adds no parameter meaning because none exist; per rubric, a baseline of 4 is appropriate for a parameterless tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Disconnect from the browser and free resources.' It further clarifies by specifying it detaches from Chrome and leaves the window and saved session intact, distinguishing it clearly from the search/get/check siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no explicit when-to-use or when-not-to-use guidance. It does not mention that it should be used after other LinkedIn operations or contrast itself with linkedin_check_session. The implication is present but not stated, leaving the agent to infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

linkedin_get_jobA

Get the full detail for one job posting.

Returns the title, company, location, posted age, LinkedIn's job insights (seniority, employment type, headcount) and the complete job description with the "See more" clamp expanded.

NameRequiredDescriptionDefault
jobYesJob id, or a /jobs/view/<id> LinkedIn URL

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must bear the burden. It discloses the output content, including the 'See more' clamp expansion, which is a concrete behavior. However, it does not mention prerequisites like authentication needs, rate limits, or error behavior. For a read operation, this is acceptable but not exhaustive, so a 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two efficient sentences. The first states the overall purpose, and the second lists the return fields with the clamp expansion noted. No fluff, front-loaded key info, and every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description lists the return values in detail, providing adequate information for an agent to know what to expect. It does not cover prerequisites like active sessions (sibling check_session exists) or error cases, but for a simple GET with clear return fields, it is nearly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for the single parameter, already specifying it accepts a job ID or URL. The description itself does not add additional semantics beyond what the schema provides. Baseline 3 is correct given the schema's completeness.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves full details for a single job posting and enumerates the exact fields returned (title, company, location, posted age, insights, complete description). This verb+resource focus distinguishes it from siblings like search, profile, and session tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage: it requires a job ID or URL to retrieve full details. The context is clear that this is for a single job, not searches or profiles, but it does not explicitly mention when not to use it or name alternatives. Still, for a straightforward GET tool, the usage context is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

linkedin_get_profileA

Read a LinkedIn profile.

Returns name, headline and location, plus the about text, experience history, education and listed skills unless include_sections is false.

Set include_sections to false when you only need to confirm who someone is; it is one page load either way but a much smaller result.

NameRequiredDescriptionDefault
profileYesProfile slug, e.g. 'satyanadella', or a full /in/<slug> URL
include_sectionsNoInclude about, experience, education and skills

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It transparently discloses the return content and the page-load trade-off, but omits any session/auth prerequisite or error behavior. This is partially transparent but not comprehensive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three terse sentences, each earning its place: purpose, returns, and the parameter trade-off. The essential information is front-loaded with zero fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only profile tool with no output schema, the description covers what's returned and the parameter option. It omits explicit session requirements, but sibling tools (check_session/close_session) imply that context, so it's not a critical gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are documented. The description adds value for include_sections by explaining the decision rule and its result-size impact, and reinforces the profile format. This exceeds the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a clear verb-resource pair ('Read a LinkedIn profile') and then lists the specific fields returned (name, headline, location, about, experience, education, skills). This unambiguously distinguishes it from sibling job-search and session tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The purpose is explicit, and the include_sections guidance gives a concrete conditional ('Set include_sections to false when you only need to confirm who someone is') with a performance trade-off. It doesn't explicitly contrast with siblings, but the domain is distinct enough that this is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

linkedin_search_jobsA

Search job listings on LinkedIn.

Returns each listing with title, company, location, workplace type, posted salary where the employer provided one, how long ago it was posted, and the job_id. Pass that job_id to linkedin_get_job for the full description rather than re-searching.

Results are paged 25 at a time, so a large limit means several page loads.

NameRequiredDescriptionDefault
sortNoOrder: 'date' or 'relevance'
limitNoMaximum number of results
job_typeNoOne of: full-time, part-time, contract, temporary, internship, volunteer, other
keywordsYesSearch keywords, e.g. 'machine learning engineer'
locationNoCity, region or country, e.g. 'Bengaluru' or 'India'
easy_applyNoRestrict to Easy Apply listings
workplace_typeNoOne of: on-site, remote, hybrid
experience_levelNoOne of: internship, entry, associate, mid-senior, director, executive
posted_within_daysNoOnly jobs posted within this many days

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses that results are paged 25 at a time and that salary may be absent, but it does not mention authentication/session requirements or rate limits. With no annotations provided, the description carries the full burden, and the existence of linkedin_check_session suggests a session prerequisite that is not mentioned. This is a notable gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is about 100 words, front-loaded with the main purpose, and the second paragraph covers pagination. It avoids redundancy and each sentence contributes value, such as noting the paging limit and the alternative tool. No fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description explains the return fields and pagination, and guides to linkedin_get_job, which covers essential operational details. However, it does not mention prerequisites like an active LinkedIn session (implied by check_session sibling) or error/edge-case behavior. Given the parameter count and no output schema, the description is fairly complete but misses these key operational aspects.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema provides 100% description coverage for all 9 parameters, so the schema already documents their meaning. The description does not add additional parameter semantics beyond what the schema offers (e.g., it does not clarify how sort values map to behavior or the exact format of location). Baseline 3 is appropriate given the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool searches LinkedIn job listings, and explicitly distinguishes itself from the sibling linkedin_get_job by instructing to pass the returned job_id to that tool for full descriptions. This separates purpose from the retrieval sibling without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells the agent to use linkedin_get_job for the full description rather than re-searching, which is a clear directive about when to use an alternative. It also implicitly distinguishes from profile/session tools by focusing on job search, so usage context is evident.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 5 tool updatesv0.1.0
    • First observedlinkedin_check_session
    • First observedlinkedin_close_session
    • First observedlinkedin_get_job
    • First observedlinkedin_get_profile
    • First observedlinkedin_search_jobs

TDQS

A4.3/5.0

Scored across 5 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: searching jobs, fetching job details, reading profiles, and managing session state. No overlap between the data-access tools and the session-management tools.

Naming Consistency5/5

All five tools follow a consistent 'linkedin_<verb>_<noun>' pattern (search_jobs, get_job, get_profile, check_session, close_session). The naming is uniform and predictable.

Tool Count5/5

Five tools is well within the ideal range for a focused server. Every tool contributes to a clear workflow: session management, job search, job details, and profile lookup.

Completeness4/5

The server covers the core read workflows for LinkedIn jobs and profiles, but lacks profile search or listing capabilities. However, for its stated purpose (searching jobs and reading profiles), the surface is largely complete.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Enables searching and scraping of LinkedIn for structured data on people, companies, and job listings. It allows AI clients to retrieve detailed profiles, experience, and activity sections using browser automation.
    7
    207
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to search, filter, and extract job listings from LinkedIn using an automated headless browser with semantic AI filtering and deduplication.
    11 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Lets an AI assistant operate LinkedIn through an authenticated browser session, enabling profile management, posting, networking, messaging, job search, and automated applications.
    100
    10 npm
    1
    MIT