# RecruiterCheck MCP

RecruiterCheck is an MCP server that helps users quickly assess scam risk in job postings, recruiter emails, and company domains.

## What it provides

Tools:
- check_job_posting_legitimacy
- check_recruiter_email
- check_company_domain
- explain_risk_signals

Each tool:
- requires an API key
- returns deterministic risk scoring output
- persists scan events to Supabase

## Repo structure

- apps/mcp-server: TypeScript MCP server
- supabase/migrations: SQL migrations
- apps/landing: minimal landing page
- registry: registry submission assets

## Quick start

1) Install deps

cd apps/mcp-server
npm install

2) Set env

export SUPABASE_URL="https://<project-ref>.supabase.co"
export SUPABASE_SERVICE_ROLE_KEY="<service-role-key>"

3) Build

npm run build

4) Run server

npm run start

## Apply database schema

From repo root:

supabase link --project-ref <project-ref>
supabase db push

Migration file applied for MVP:
- supabase/migrations/202605180001_mvp_core.sql

Creates:
- public.users
- public.api_keys
- public.flagged_domains
- public.scans

## API key model

The server expects `apiKey` in each tool input.
`api_keys.key_hash` stores SHA-256 of API keys.

Recommended flow:
1) generate key in your backend
2) hash with SHA-256
3) store hash in public.api_keys with user_id
4) give raw key to customer once

## Local smoke test

cd apps/mcp-server
node scripts/mcp-smoke.mjs

## MCP client config example

Use this in local MCP-capable clients:

{
  "mcpServers": {
    "recruitercheck": {
      "command": "node",
      "args": ["/ABSOLUTE/PATH/recruitercheck-mcp/apps/mcp-server/dist/index.js"],
      "env": {
        "SUPABASE_URL": "https://<project-ref>.supabase.co",
        "SUPABASE_SERVICE_ROLE_KEY": "<service-role-key>"
      }
    }
  }
}

## Landing page

Minimal page is at:
- apps/landing/index.html

## Registry assets

See:
- registry/mcp.json
- registry/install.md
- registry/prompts.md
- registry/submissions.md
- registry/distribution.md

## Hosted MCP endpoint (production)

- Health: https://mcp-server-seven-alpha.vercel.app/
- MCP: https://mcp-server-seven-alpha.vercel.app/mcp
- Required header: Accept: application/json, text/event-stream

## Status

Roadmap status is tracked in:
- docs/ROADMAP_MVP.md