linkedin-mcp
LinkedIn MCP
Un servidor MCP que permite a un asistente de IA buscar ofertas de empleo en LinkedIn y leer perfiles de LinkedIn, controlando una ventana real de Chrome a través del protocolo DevTools.
Es de solo lectura. No hay ninguna herramienta aquí que conecte, envíe mensajes, respalde, publique o postule; no como una opción de configuración, sino porque el código para hacerlo no existe. Es una línea deliberada: LinkedIn trata la escritura automatizada con mucha más severidad que la lectura automatizada, y mezclar ambas es lo que hace que se restrinjan cuentas.
Herramientas
Herramienta | Qué devuelve |
| Listados con el título, la empresa, la ubicación, la modalidad de trabajo, el salario cuando se publica, la antigüedad de la publicación y |
| Una oferta completa: empresa, ubicación, la información del empleo de LinkedIn y la descripción entera con el bloque «See more» expandido. |
| Nombre, titular, ubicación, texto de «Acerca de», historial de experiencia, educación y habilidades. |
| Indica si la sesión de navegador guardada sigue iniciada. |
| Se desconecta de Chrome y deja la ventana y la sesión intactas. |
Related MCP server: LinkedIn MCP Server
Instalación
Requiere Python 3.12+, uv y Google Chrome.
git clone https://github.com/TSS99/linkedin-mcp.git
cd linkedin-mcp
uv syncInicia sesión una vez. Esto abre una ventana de Chrome y espera a que inicies sesión manualmente: el script nunca teclea las credenciales, porque LinkedIn desafía la introducción automatizada de credenciales:
uv run linkedin-mcp --loginLa sesión persiste en ~/.linkedin-mcp/chrome-profile. Puedes comprobarla cuando quieras con uv run linkedin-mcp --check, o borrarla con uv run linkedin-mcp --logout.
Qué perfil de Chrome controla
Por defecto, el servidor abre un perfil desechable propio. Esa ventana parecerá recién estrenada: sin marcadores, sin extensiones, sin sesión iniciada en nada más que LinkedIn. Ese es el punto: el servidor solo puede ver LinkedIn.
Si prefieres que controle tu Chrome habitual, de modo que reutilice la sesión de LinkedIn que ya tienes y no abra una ventana extraña, configura:
LINKEDIN_MCP_PROFILE_DIR=systemo apúntalo explícitamente a cualquier directorio de perfil. En la configuración de un cliente MCP, eso va en el bloque env:
{
"mcpServers": {
"linkedin": {
"command": "uv",
"args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"],
"env": { "LINKEDIN_MCP_PROFILE_DIR": "system" }
}
}
}Aun así tienes que reiniciar Chrome una vez. --remote-debugging-port solo surte efecto al arrancar; no se puede activar en un proceso que ya está en ejecución. Por tanto, nunca se puede conectar a un Chrome que esté abierto en ese momento, diga lo que diga la configuración de perfil. Ciérralo por completo (Cmd+Q, no basta con cerrar la ventana) y deja que el servidor lo inicie, o inícialo tú mismo con el comando que imprime --login.
El puerto de depuración no está limitado a LinkedIn. Cualquier cosa que pueda acceder a 127.0.0.1:9224 puede controlar todas las pestañas de ese Chrome y leer todas las sesiones que contiene — tu correo, tu banco, todo — no solo LinkedIn. En el perfil aislado no hay nada más a lo que acceder. En tu perfil habitual lo hay todo. Ejecútalo así solo en una máquina de confianza y cierra el Chrome de depuración cuando termines.
--logout se niega a eliminar un perfil que no ha creado, así que apuntarlo a tu Chrome real no puede borrar el estado de tu navegador.
Configuración
Añade a la configuración de tu cliente MCP (ver mcp-config.example.json):
{
"mcpServers": {
"linkedin": {
"command": "uv",
"args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"]
}
}
}Para Claude Code: claude mcp add linkedin -- uv --directory /path/to/linkedin-mcp run linkedin-mcp
Cómo funciona y por qué
CDP contra un perfil real de Chrome, no contra un navegador iniciado. El Chromium de Playwright se anuncia de una docena de formas que LinkedIn comprueba. Conectarse a un Chrome real en el que has iniciado sesión tú mismo mantiene fieles la huella y la cookie. El servidor se ejecuta en el puerto de depuración 9224, por lo que coexiste con otros servidores MCP controlados por navegador en 9222/9223.
Las navegaciones se espacian. LinkedIn limita la tasa según la cadencia, no solo el volumen, así que goto impone un intervalo mínimo con variación aleatoria. Una sesión de investigación larga es más lenta de lo que podría ser, a propósito.
Cada cadena del DOM de LinkedIn aparece dos veces: una visible y otra en un span visually-hidden para lectores de pantalla, por lo que el innerText bruto se lee como "Acme Corp\nAcme Corp". dedupe_lines colapsa las repeticiones consecutivas; sin él, todos los campos analizados salen duplicados.
Los selectores son listas ordenadas de respaldo. Los nombres de clase de LinkedIn están ofuscados y se renombran a menudo. Cuando es posible, los analizadores se anclan en elementos que han sobrevivido a los cambios de clase — el atributo data-occludable-job-id, los ids de anclaje estables div#experience — y recurren a analizar el orden de las líneas del texto de la tarjeta en lugar de confiar en un gancho por campo.
Un raspado fallido nunca devuelve un resultado vacío. Cada herramienta está envuelta para que un anclaje ausente devuelva {"status": "error", "error_type": "stale_selector", ...} nombrando el selector y la URL. Si a un LLM se le pasa [], informará de "no se encontraron ofertas" con total confianza; esto hace que una herramienta rota y un vacío real sean distinguibles.
Pruebas
uv run pytestLas pruebas cubren los analizadores puros — construcción de URL/filtros, análisis de tarjetas, análisis de entradas de perfil, deduplicación de líneas — contra datos de prueba con la forma que produce realmente el DOM de LinkedIn. No necesitan navegador ni red.
Cuándo se rompe
Se romperá. LinkedIn publica cambios de marcado constantemente, y un scraper es una conjetura sobre el HTML de otra persona. Espera errores stale_selector con el tiempo; la solución suele ser una entrada más en una lista de selectores en tools/jobs.py o tools/profiles.py, además de un dato de prueba en tests/test_parsers.py.
Si obtienes auth_required con una URL de checkpoint, LinkedIn quiere a un humano: abre la ventana de Chrome, resuelve el desafío y reintenta.
Un apunte sobre los términos de uso
El acceso automatizado va contra el Contrato de Usuario de LinkedIn, independientemente de lo cuidadosa que sea la implementación, y LinkedIn sí restringe cuentas por ello. Esta es una herramienta de investigación personal; el diseño de solo lectura y las solicitudes espaciadas reducen el riesgo, pero no lo eliminan, y la cuenta a la que la apuntes es la que asume ese riesgo. Usa tu criterio.
Licencia
Apache-2.0
Available Tools
5 toolslinkedin_check_sessionA
Check whether the browser is signed in to LinkedIn.
Every other tool needs this to be true; LinkedIn serves a login wall to anonymous visitors on job listings and profiles alike.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden. It states the check itself but does not explicitly confirm it is non-mutating or describe the return format. The login-wall context implies safety, but the description lacks explicit boundary details. It does not contradict anything, but could be more transparent about side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. The purpose is stated first, and the second sentence adds valuable context about why this tool matters. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless check with no output schema, the description fully covers what an agent needs: what the tool does and why it's important before other tools. It is complete and self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema is already complete (100% coverage). Baseline is 4. The description adds no parameter information, which is appropriate since there are none to document.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states a specific verb ('check') and resource ('whether the browser is signed in to LinkedIn'). The description distinguishes it from sibling tools by its unique purpose—session verification—and adds context about the login wall, making it unambiguous what this tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states that 'every other tool needs this to be true,' implying it should be called before other LinkedIn operations. This provides clear usage context. It does not list exclusions or alternatives, but given its singular nature, the guidance is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_close_sessionA
Disconnect from the browser and free resources.
This detaches from Chrome; it leaves the window and the saved session alone.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It transparently discloses the key side effect: it does NOT close the window or the saved session, and it indicates resource freeing. This goes beyond a simple 'close session' and prevents the agent from assuming destructive behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. The core action is front-loaded, and the clarifying sentence adds essential side-effect information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless tool with no output schema, the description is sufficient. It covers what it does and what it doesn't do. One could add typical usage timing (e.g., 'call at end of session'), but that is minor and not strictly necessary for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so schema coverage is trivially 100%. The description adds no parameter meaning because none exist; per rubric, a baseline of 4 is appropriate for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Disconnect from the browser and free resources.' It further clarifies by specifying it detaches from Chrome and leaves the window and saved session intact, distinguishing it clearly from the search/get/check siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit when-to-use or when-not-to-use guidance. It does not mention that it should be used after other LinkedIn operations or contrast itself with linkedin_check_session. The implication is present but not stated, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_get_jobA
Get the full detail for one job posting.
Returns the title, company, location, posted age, LinkedIn's job insights (seniority, employment type, headcount) and the complete job description with the "See more" clamp expanded.
| Name | Required | Description | Default |
|---|---|---|---|
| job | Yes | Job id, or a /jobs/view/<id> LinkedIn URL |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must bear the burden. It discloses the output content, including the 'See more' clamp expansion, which is a concrete behavior. However, it does not mention prerequisites like authentication needs, rate limits, or error behavior. For a read operation, this is acceptable but not exhaustive, so a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two efficient sentences. The first states the overall purpose, and the second lists the return fields with the clamp expansion noted. No fluff, front-loaded key info, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description lists the return values in detail, providing adequate information for an agent to know what to expect. It does not cover prerequisites like active sessions (sibling check_session exists) or error cases, but for a simple GET with clear return fields, it is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for the single parameter, already specifying it accepts a job ID or URL. The description itself does not add additional semantics beyond what the schema provides. Baseline 3 is correct given the schema's completeness.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves full details for a single job posting and enumerates the exact fields returned (title, company, location, posted age, insights, complete description). This verb+resource focus distinguishes it from siblings like search, profile, and session tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage: it requires a job ID or URL to retrieve full details. The context is clear that this is for a single job, not searches or profiles, but it does not explicitly mention when not to use it or name alternatives. Still, for a straightforward GET tool, the usage context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_get_profileA
Read a LinkedIn profile.
Returns name, headline and location, plus the about text, experience history, education and listed skills unless include_sections is false.
Set include_sections to false when you only need to confirm who someone is; it is one page load either way but a much smaller result.
| Name | Required | Description | Default |
|---|---|---|---|
| profile | Yes | Profile slug, e.g. 'satyanadella', or a full /in/<slug> URL | |
| include_sections | No | Include about, experience, education and skills |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It transparently discloses the return content and the page-load trade-off, but omits any session/auth prerequisite or error behavior. This is partially transparent but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three terse sentences, each earning its place: purpose, returns, and the parameter trade-off. The essential information is front-loaded with zero fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only profile tool with no output schema, the description covers what's returned and the parameter option. It omits explicit session requirements, but sibling tools (check_session/close_session) imply that context, so it's not a critical gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are documented. The description adds value for include_sections by explaining the decision rule and its result-size impact, and reinforces the profile format. This exceeds the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear verb-resource pair ('Read a LinkedIn profile') and then lists the specific fields returned (name, headline, location, about, experience, education, skills). This unambiguously distinguishes it from sibling job-search and session tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is explicit, and the include_sections guidance gives a concrete conditional ('Set include_sections to false when you only need to confirm who someone is') with a performance trade-off. It doesn't explicitly contrast with siblings, but the domain is distinct enough that this is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_search_jobsA
Search job listings on LinkedIn.
Returns each listing with title, company, location, workplace type, posted salary where the employer provided one, how long ago it was posted, and the job_id. Pass that job_id to linkedin_get_job for the full description rather than re-searching.
Results are paged 25 at a time, so a large limit means several page loads.
| Name | Required | Description | Default |
|---|---|---|---|
| sort | No | Order: 'date' or 'relevance' | |
| limit | No | Maximum number of results | |
| job_type | No | One of: full-time, part-time, contract, temporary, internship, volunteer, other | |
| keywords | Yes | Search keywords, e.g. 'machine learning engineer' | |
| location | No | City, region or country, e.g. 'Bengaluru' or 'India' | |
| easy_apply | No | Restrict to Easy Apply listings | |
| workplace_type | No | One of: on-site, remote, hybrid | |
| experience_level | No | One of: internship, entry, associate, mid-senior, director, executive | |
| posted_within_days | No | Only jobs posted within this many days |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that results are paged 25 at a time and that salary may be absent, but it does not mention authentication/session requirements or rate limits. With no annotations provided, the description carries the full burden, and the existence of linkedin_check_session suggests a session prerequisite that is not mentioned. This is a notable gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is about 100 words, front-loaded with the main purpose, and the second paragraph covers pagination. It avoids redundancy and each sentence contributes value, such as noting the paging limit and the alternative tool. No fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the return fields and pagination, and guides to linkedin_get_job, which covers essential operational details. However, it does not mention prerequisites like an active LinkedIn session (implied by check_session sibling) or error/edge-case behavior. Given the parameter count and no output schema, the description is fairly complete but misses these key operational aspects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% description coverage for all 9 parameters, so the schema already documents their meaning. The description does not add additional parameter semantics beyond what the schema offers (e.g., it does not clarify how sort values map to behavior or the exact format of location). Baseline 3 is appropriate given the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool searches LinkedIn job listings, and explicitly distinguishes itself from the sibling linkedin_get_job by instructing to pass the returned job_id to that tool for full descriptions. This separates purpose from the retrieval sibling without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells the agent to use linkedin_get_job for the full description rather than re-searching, which is a clear directive about when to use an alternative. It also implicitly distinguishes from profile/session tools by focusing on job search, so usage context is evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.1.0- First observed
linkedin_check_session - First observed
linkedin_close_session - First observed
linkedin_get_job - First observed
linkedin_get_profile - First observed
linkedin_search_jobs
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: searching jobs, fetching job details, reading profiles, and managing session state. No overlap between the data-access tools and the session-management tools.
All five tools follow a consistent 'linkedin_<verb>_<noun>' pattern (search_jobs, get_job, get_profile, check_session, close_session). The naming is uniform and predictable.
Five tools is well within the ideal range for a focused server. Every tool contributes to a clear workflow: session management, job search, job details, and profile lookup.
The server covers the core read workflows for LinkedIn jobs and profiles, but lacks profile search or listing capabilities. However, for its stated purpose (searching jobs and reading profiles), the surface is largely complete.
Maintenance
Related MCP Connectors
LinkedIn jobs, companies and people for AI agents, plus messages and invites via your own account.
LinkedIn for AI agents: search people, read profiles, posts and connections via a connected account
LinkedIn for AI agents: inbox, invitations, Sales Navigator search, posts, jobs, quotas, webhooks.
Give AI agents the LinkedIn tools to find, qualify, engage, and follow up with prospects.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables AI assistants to interact with LinkedIn by scraping profiles, companies, job postings, and getting personalized job recommendations using authenticated browser automation.1711,396 PyPI4,026Apache 2.0
- AlicenseAqualityBmaintenanceEnables searching and scraping of LinkedIn for structured data on people, companies, and job listings. It allows AI clients to retrieve detailed profiles, experience, and activity sections using browser automation.7207MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to search, filter, and extract job listings from LinkedIn using an automated headless browser with semantic AI filtering and deduplication.11 npmMIT
- AlicenseAqualityBmaintenanceLets an AI assistant operate LinkedIn through an authenticated browser session, enabling profile management, posting, networking, messaging, job search, and automated applications.10010 npm1MIT