linkedin-mcp-server

Overview

From the repository's own README, as read at the audited commit.

# MCP Server for LinkedIn<!-- mcp-name: io.github.stickerdaniel/linkedin-mcp-server --><p align="left">  <a href="https://pypi.org/project/mcp-server-linkedin/" target="_blank"><img src="https://img.shields.io/pypi/v/mcp-server-linkedin?color=blue" alt="PyPI"></a>  <a href="https://github.com/stickerdaniel/linkedin-mcp-server/actions/workflows/ci.yml" target="_blank"><img src="https://github.com/stickerdaniel/linkedin-mcp-server/actions/workflows/ci.yml/badge.svg?branch=main" alt="CI Status"></a>  <a href="https://github.com/stickerdaniel/linkedin-mcp-server/actions/workflows/release.yml" target="_blank"><img src="https://github.com/stickerdaniel/linkedin-mcp-server/actions/workflows/release.yml/badge.svg?branch=main" alt="Release"></a>  <a href="https://github.com/stickerdaniel/linkedin-mcp-server/blob/main/LICENSE" target="_blank"><img src="https://img.shields.io/badge/License-Apache%202.0-%233fb950?labelColor=32383f" alt="License"></a></p>> **Disclaimer:** This is an independent, community project. It is not affiliated with, authorized by, endorsed by, or sponsored by LinkedIn Corporation or Microsoft. "LinkedIn" is a registered trademark of LinkedIn Corporation and is used here only descriptively to identify the third-party service this software interoperates with.An MCP server that lets AI assistants like Claude read LinkedIn data through your own logged-in browser session. Access profiles and companies, search for jobs, or get job details.## Sponsor<p align="center">  <a href="https://golink.onl/unipile-banner" target="_blank">    <picture>      <source media="(prefers-color-scheme: dark)" srcset="https://github.com/user-attachments/assets/c2e7f3b4-6812-4f28-8728-10f882a44e0e">      <img src="https://github.com/user-attachments/assets/89ab8932-ae79-41c2-8416-a699e924218b" alt="Unipile, one API for every LinkedIn feature" width="100%">    </picture>  </a></p>This MCP server is **free** and **open source**, supported by [**Unipile**](https://golink.onl/unipile-l

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add mcp-server-linkedin --env PROXY_SERVER=${PROXY_SERVER} --env PROXY_USERNAME=${PROXY_USERNAME} --env PROXY_PASSWORD=${PROXY_PASSWORD} --env PROXY_SERVER=${PROXY_SERVER} -- None mcp-server-linkedin==4.24.0

claude mcp add linkedin-mcp-server:4.24.0 --env PROXY_SERVER=${PROXY_SERVER} --env PROXY_USERNAME=${PROXY_USERNAME} --env PROXY_PASSWORD=${PROXY_PASSWORD} --env PROXY_SERVER=${PROXY_SERVER} -- docker run -i --rm docker.io/stickerdaniel/linkedin-mcp-server:4.24.0:None

Exposed tools (10) 9 read · 1 write · 0 destructive

Details

Source

stickerdaniel/linkedin-mcp-server

PyPI

mcp-server-linkedin

Transports

stdio · streamable-http

Credentials it reads

PROXY_PASSWORDPROXY_SERVERPROXY_USERNAME

License

Apache-2.0

Stars

3,450 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (5 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

found

Findings (25)

The `notifications/initialized` post often returns `{"error":{"code":-32602,"message":"Invalid request parameters"}}` and the server log shows a long pydantic ClientRequest validation dump. **This is 

curl -s -D /tmp/repro-$NUM-headers -X POST http://127.0.0.1:$PORT/mcp \

curl -s -X POST http://127.0.0.1:$PORT/mcp \

curl -s -X POST http://127.0.0.1:$PORT/mcp \

curl -s -D /tmp/verify-pr-$PR-headers -X POST http://127.0.0.1:$PORT/mcp \

curl -s -X POST http://127.0.0.1:$PORT/mcp \

token = "private-access-token"

secret = "proxy-password-must-not-cross"

.coveragerc

.mcpbignore

.pre-commit-config.yaml

CLAUDE.md

await scraper.scrape_company("../../feed", {"about"})

await scraper.get_company_employees("../../feed")

await reader._open_conversation_by_username("../../feed")

await reader.get_conversation(thread_id="../../feed")

linkedin_username="../../feed", thread_id="2-direct", index=-1

[![uvx](https://img.shields.io/badge/uvx-Quick_Install-de5fe9?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iNDEiIGhlaWdodD0iNDEiIHZpZXdCb3g9IjAgMCA0MSA0MSIgZmlsbD0ibm9uZSIgeG1sbnM

encrypted_key = base64.b64decode(payload["os_crypt"]["encrypted_key"])

decoded = bytes.fromhex(nonce)

decoded = bytes.fromhex(value)

"",

"",

"",

"",

Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.

Audited 2026-09-13 · audit v0.4.0 · source sha afa0f16d00a3 · full audit: observations/trust-audit/mcp-server/stickerdaniel__linkedin-mcp-server.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions