ModelsAtlas
Explore
Atlas / MCP servers / mit9 / workatastartup-mcp

workatastartup-mcpSAFE

mcp/mit9/workatastartup-mcp
MCP server by mit9 · claude · jobs · mcp server · Audited 2026-10-11
⚑ Report / re-scanSource ↗

MCP server for WorkAtAStartup — search startup job listings via Claude or Cursor

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
4 4r · 0w · 0d
Transport
—
License
NOASSERTION
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Search YC Work at a Startup jobs from Claude or Cursor — MCP server for startup job listings.

[](https://pypi.org/project/workatastartup-mcp/) [](LICENSE) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io/)

A Model Context Protocol (MCP) server for querying Y Combinator jobs and companies via Work at a Startup.

This MCP server equips AI assistants (Claude Desktop, Cursor, Gemini CLI, Antigravity) with direct access to search YC startups, explore active job listings, inspect tech stacks, filter by required skills, salary ranges, equity, and US visa sponsorship status.

🛠️ Features & Available Tools

The server provides 4 FastMCP tools:

  1. `search_jobs`: Search YC startup job listings with advanced filters.
  2. query (str): Search term (e.g. "backend", "AI agent", "Rust").
  3. role (Optional[str]): Functional role ("eng", "design", "product", "ops", "sales", "marketing").
  4. eng_type (Optional[str]): Engineering specialization ("be", "fe", "fs", "ml", "mobile").
  5. job_type (Optional[str]): Employment type (e.g. "fulltime", "contract").
  6. min_experience (Optional[int]): Maximum required experience level in years (min_experience <= N).
  7. max_team_size (Optional[int]): Maximum company team size (company_team_size <= N).
  8. batch (Optional[str]): YC Batch (e.g. "W24", "S23").
  9. remote (bool): Filter for remote positions (True / False).
  10. visa (bool): Filter for US visa sponsorship (True / False).
  11. page (int): Page index (default 0).
  12. limit (int): Number of companies per page (default `10
Read from source at commit ca8aeb123d5aOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add workatastartup-mcp -- uvx workatastartup-mcp
claude-desktop
{
  "mcpServers": {
    "workatastartup-mcp": {
      "command": "uvx",
      "args": [
        "workatastartup-mcp"
      ]
    }
  }
}
03

Exposed tools (4)

4 read · 0 write · 0 destructive.

ToolRiskDescription
filter_jobs_by_skillsreadFilter jobs by list of required skills.
get_company_detailsreadGet full company details by ID.
get_job_detailsreadGet job details by ID.
search_jobsreadSearch YC startup jobs on WorkAtAStartup.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha ca8aeb123d5afull audit observations/trust-audit/mcp-server/mit9__workatastartup-mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11ca8aeb123d5aSAFEB89first audit
06

Questions

What is the workatastartup-mcp MCP server?

MCP server for WorkAtAStartup — search startup job listings via Claude or Cursor

What tools does workatastartup-mcp expose?

4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is workatastartup-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does workatastartup-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (ca8aeb123d5a), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement