LinkedIn MCP Server

A local Model Context Protocol server that exposes structured LinkedIn profile, company, and job data to MCP-compatible clients. It uses a persistent Patchright browser session, so you authenticate interactively instead of storing a LinkedIn password in an environment variable.

Features

Profile reads can include experience, education, interests, honors, languages, contact information, and posts. Company reads can include about information, posts, and jobs. Job search supports date, type, experience, workplace, Easy Apply, and sorting filters.

Connection requests are deliberately constrained: the tool accepts an exact profile slug, previews the current state by default, requires confirm=true to write, and never includes a note.

Related MCP server: linkedin-mcp-server

Requirements

• Python 3.12+

• uv

• A LinkedIn account

The project uses pyproject.toml and uv.lock; a requirements.txt file is intentionally not needed.

Setup

git clone https://github.com/aarnav-hariramani/linkedin-mcp.git
cd linkedin-mcp
uv sync --locked
uv run patchright install chromium

Authenticate once in a visible browser:

uv run linkedin-mcp-server --login

The default profile is stored at ~/.linkedin-mcp-server/browser-data. It contains sensitive session cookies and must never be committed or shared.

Check or clear the saved session:

uv run linkedin-mcp-server --status
uv run linkedin-mcp-server --logout

MCP client configuration

Use the absolute path to your clone. For Codex:

codex mcp add linkedin -- uv --directory /absolute/path/to/linkedin-mcp-server run linkedin-mcp-server

Equivalent JSON configuration for clients such as Claude Desktop or Cursor:

{
  "mcpServers": {
    "linkedin": {
      "command": "uv",
      "args": [
        "--directory",
        "/absolute/path/to/linkedin-mcp-server",
        "run",
        "linkedin-mcp-server"
      ]
    }
  }
}

Restart the MCP client after changing its configuration.

Running directly

The recommended local transport is stdio:

uv run linkedin-mcp-server

For local development, loopback-only HTTP is also available:

uv run linkedin-mcp-server \
  --transport streamable-http \
  --host 127.0.0.1 \
  --port 8000

Connect to http://127.0.0.1:8000/mcp. The server rejects non-loopback HTTP bindings.

Configuration

Copy the documented template only when you need to override defaults:

cp .env.example .env

Configuration precedence is CLI arguments, existing environment variables, .env.local, .env, then defaults.

No username, password, cookie, API key, or token belongs in .env.

Safety model

• Browser navigation is limited to HTTPS LinkedIn hosts.

• Raw page HTML is not returned through MCP tools.

• Persistent profiles are created with restrictive permissions and a marker used for safe logout.

• HTTP transport is local-only; stdio is preferred.

• All profile slugs, job IDs, and search input are validated.

• Writes require explicit confirmation.

See SECURITY.md for handling local session data and reporting vulnerabilities.

Architecture

src/linkedin_mcp_server/
├── domain/       # Models, parsers, validation, and domain errors
├── ports/        # Browser, authentication, and configuration interfaces
├── application/  # Scrape, search, session, and connection use cases
├── adapters/
│   ├── driven/   # Patchright browser, profile auth, environment config
│   └── driving/  # CLI, FastMCP server, tools, serialization
└── container.py  # Dependency composition root

Development

uv sync --locked --group dev
uv run pre-commit install
uv run ruff check .
uv run ruff format --check .
uv run pytest
uv build

Browser-backed integration testing requires a separately authenticated local session. Unit tests and CI must not depend on real credentials.

See CONTRIBUTING.md for the contribution workflow.

Acknowledgments

This project is built on top of eliasbiondo/linkedin-mcp-server by Elias Biondo, which provided the original hexagonal architecture, Patchright-based browser automation, and read-only profile, company, and job scraping tools. This fork adds the send_connection_request write tool, additional navigation and session-safety hardening, and test coverage on top of that foundation.

License

MIT. See LICENSE. Original copyright retained; see the LICENSE file for details.