QAmcp

Copied. Paste it into Claude Code, Cursor or Codex:Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.

Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions

SoonYour score can change any day. QAmcp Monitor tests your server every hour and emails you when it breaks.See what Monitor does →

Directory / NeverApply

NeverApply

Q: Is NeverApply MCP server safe?

QAmcp's test on 31 Oct 2026: None of the hidden-instruction wordings we know were found in its tool descriptions. Its error messages showed no secrets or internal details. 6 of its 15 tools are labeled read-only; the others may change or send things. Overall it scored 80/100 on 31 Oct 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by neverapply.co · https://neverapply.co/mcp

Search jobs without signing in. Sign in for personalized matches and apply.

15 tools✓ no account neededPricing: on their site

See pricing →Visit website

80 /100

FAIL

12 of 12 checks · 31 Oct 2026

Is NeverApply MCP server safe?

None of the hidden-instruction wordings we know were found in its tool descriptions.
Its error messages showed no secrets or internal details.
6 of its 15 tools are labeled read-only; the others may change or send things.
Overall it scored 80/100 on 31 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

15 tools, in the server's own words.

search_jobsread-only

Search the live global job catalog with explicit filters.

get_matchesread-only

Read personalized curated jobs with reasons, missing facts and application status.

get_jobread-only

Read one discovered job and your application context before deciding what to do.

get_profileread-only

Read your career preferences, saved facts, completeness, plan, remaining usage, latest 20 resumes and the connected client send grant.

list_applicationsread-only

Read your saved jobs and application tracker with a status filter.

get_applicationread-only

Read one of your application tracker entries with its latest run, masked answers, current parked questions, saved screening choices and next action.

update_profile

Update only the career fields the member explicitly supplied.

upload_resume

Parse the member’s pasted resume text or fetch one direct public HTTPS PDF up to 10 MB.

save_answer

Save an exact member-stated fact, confirm one reviewed suggestion, or delete one explicitly selected fact.

prepare_interview

Prepare interview questions, talking points and company context for one owned application or active listing.

tailor_resume

Tailor the member’s existing resume to one active listing and save the copy.

send_feedback

Email the NeverApply team feedback in the authenticated user's own words: a bug, bad listing data, a match-quality complaint, a feature request, or a support q…

answer_screening_question

Save only the facts-vault choice IDs currently offered by get_application, with its review_version.

apply_to_job

Apply to one job only after the member approves that named job, current profile, truthful automatic answers and tailored documents.

approve_application

Decide one of the authenticated user's historical application reviews.

Test results

Safe mode: only tools labeled read-only were run. How the test works

✕
Tools work with good inputs
1 failed
- ✕search_jobs: Its reply breaks the MCP rules, so AI apps can't read it: its structured answer doesn't match its own output schema (jobs/* must have required property 'match_score' (in 10 items); jobs/* must have required property 'match_reason' (in 10 it
- –get_matches: Needs you to sign in, so it was not tested (not counted against the server)
- –get_profile: Needs you to sign in, so it was not tested (not counted against the server)
- –list_applications: Needs you to sign in, so it was not tested (not counted against the server)
- –get_application: Needs you to sign in, so it was not tested (not counted against the server)
- –update_profile: Not run: labeled dangerous
- –upload_resume: Not run: labeled dangerous
- –save_answer: Not run: labeled dangerous
- and 7 more
fail
!
Every tool is described
9 warnings
- !search_jobs: Inputs with no description: query, countries, work_mode, seniority, page
- !get_job: Inputs with no description: listing_id
- !list_applications: Inputs with no description: status, limit
- !update_profile: Inputs with no description: roles, locations, remote_only, work_mode, include_worldwide_remote, worldwide, remote_reach, residence_city, experience_band, urgency, salary_floor_period, top_skills, languages, sending_mode
- !save_answer: Inputs with no description: action, key, value
- !prepare_interview: Inputs with no description: application_id, listing_id
- !tailor_resume: Inputs with no description: listing_id
- !answer_screening_question: Inputs with no description: run_id, choices
- and 1 more
note
!
Follows MCP best practices (not scored yet)
1 tip (not scored)
- !The tool list is about 42 KB (roughly 10k tokens). AI apps send it with every message, so it takes that much of the AI's memory before any work starts.
note
!
Resources and prompts work
1 warning ()
- –Could not list resources: it needs sign-in
- !Listing resource templates failed: Error POSTing to endpoint: { "message": "" }
- –Could not list prompts: it needs sign-in
note
✓
ConnectsConnected in 296 ms
pass
✓
Ready for the newest MCP versionUses the latest MCP version (2026-07-28)
pass
✓
Lists its toolsFound 15 tools
pass
✓
Tools are labeled safe or dangerousEvery tool has a safety label
pass
✓
No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.
pass
✓
Bad inputs give a clean error
All good
- ✓search_jobs: Refused wrong type for "query" with a clear error
- –get_matches: Needs you to sign in, so bad inputs were not tested
- ✓get_job: Refused missing required input "listing_id" with a clear error
- ✓get_job: Refused wrong type for "listing_id" with a clear error
- –list_applications: Needs you to sign in, so bad inputs were not tested
- –get_application: Needs you to sign in, so bad inputs were not tested
pass
✓
Fast enough
All good
- ✓Connecting took 296 ms
- ✓Listing tools took 111 ms
- ✓Average tool answer: 110 ms
- ✓get_job: Slowest tool: get_job (110 ms)
pass
✓
No secrets leakedChecked 12 error messages: no secrets or internal details
pass
–
Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)
not tested

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://neverapply.co/mcp

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

[![QAmcp score](https://qamcp.dev/s/co-neverapply-neverapply.svg)](https://qamcp.dev/s/co-neverapply-neverapply.html)

Score over time

31 Oct 202680

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use NeverApply, signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works