Ashby MCP Tools for AI Agents
Let an agent search candidates, gather a debrief, read interview feedback, add notes, and move applications between stages in Ashby.
Available Tools
12 tools available in this integration
Ashby.AddCandidateNote Add a plain-text note to a candidate (e.g. an agent handoff or summary).
Ashby.ArchiveApplication Archive (reject) an application, recording why.
Ashby.ChangeApplicationStage Move an application to a named interview stage, in either direction.
Ashby.CreateCandidateNote Add a plain-text note to a candidate (e.g. an agent handoff or summary).
Ashby.GetCandidate Get a candidate's profile and the ids of their applications.
Ashby.GetCandidateDebrief Gather everything about a candidate for a debrief in one call.
Ashby.ListApplicationFeedback Read the feedback and interview scorecards submitted on an application.
Ashby.ListApplications List the organization's applications, optionally filtered by job and/or status.
Ashby.ListCandidateNotes Read the notes recorded on a candidate, paginated via the cursor.
Ashby.ListJobs List the organization's jobs (roles), optionally filtered by status.
Ashby.SearchCandidates Search the organization's candidates by name and/or email.
Ashby.TransitionApplication Move an application to a named interview stage, in either direction.
Working directly against the raw API? 141 more tools in the Ashby API server →
Why agent-optimized tools matter
Built for intent, not API schemas
Ask the agent to "review the candidates for the backend role and prepare a debrief." Arcade picks the right Ashby tools without guessing candidate IDs or application IDs.
Up to 100x fewer tokens
Ashby searches and lists return lightweight candidate, application, and job metadata by default, while debriefs, notes, and feedback are fetched only when needed, so the agent avoids loading full histories.
Complete the workflow end to end
Search candidates, inspect applications, read feedback, add notes, change stages, and archive applications through one toolkit designed around the complete recruiting task.
Make actions predictable and controlled
Arcade tools return structured results and useful errors across users and runs. Teams can apply scope restrictions, redaction, and approval policies so agents follow the same controls every time.
Securing Ashby
The more capabilities agents get, the more useful they are. However, more capabilities bring more risks of undesired effects such as data loss and exfiltration.
This is why Arcade provides you with contextual rules that dictate how and when a tool is allowed to run. Arcade’s contextual access lets you govern tool visibility and behavior at every stage of execution and control who can see a tool, what inputs are allowed, and what comes back.
Learn about Contextual Access PoliciesFor Ashby, you can implement some of these policies:
- Hide Ashby.ArchiveApplication from agents unless the roles your IDP marks as recruiting leads are active, so an agent cannot reject applications without the right authority.
- Restrict Ashby.ChangeApplicationStage to agents operating under your hiring-team role, so unapproved automation cannot move candidates into or out of interview stages.
- Deny Ashby.AddCandidateNote to general-purpose agents, so automated workflows cannot add unreviewed claims or sensitive hiring commentary to candidate records.
- Hide Ashby.CreateCandidateNote from agents without a recruiting-review role, so automated workflows cannot add unvetted summaries to candidate records.
- Show Ashby.TransitionApplication only to agents operating under the roles your IDP assigns to interview coordinators, so unauthorized agents cannot alter a candidate's hiring path.
- Require human approval before Ashby.ArchiveApplication runs, so an agent cannot reject a candidate without a person confirming the reason.
- Block Ashby.ChangeApplicationStage when the target stage is an offer, rejected, or other terminal stage, so an agent cannot make an irreversible hiring decision through a stage change.
- Refuse Ashby.AddCandidateNote when the note contains compensation details, protected-class information, or unverified allegations, so sensitive or unsupported claims do not enter the candidate record.
- Require human approval before Ashby.CreateCandidateNote runs for notes generated from interview transcripts, so an agent cannot place an inaccurate assessment in a candidate's record.
- Block Ashby.TransitionApplication when it would move an application backward to an earlier interview stage, so an agent cannot reopen a candidate's evaluation without review.
- Redact personal phone numbers, home addresses, and other direct contact details from Ashby.GetCandidateDebrief before the model sees the candidate summary.
- Strip interviewer names and free-text comments from Ashby.ListApplicationFeedback, so the model receives score data without exposing private reviewer remarks.
- Redact personal email addresses and phone numbers from Ashby.SearchCandidates results before they reach the model, leaving only the candidate fields needed for matching.
How to use Ashby with your agent
Use the setup below to connect Ashby to an MCP client, authenticate once with a shared API key or secret, and run your first recruiting workflow.
Your questions, answered
An Ashby MCP server exposes recruiting capabilities as structured tools that an AI agent can call through the Model Context Protocol. With the required API credential, the agent can search candidates, review applications and feedback, add notes, change stages, and archive applications.
Ashby does not provide the MCP server used here; Arcade provides the MCP access layer and the Ashby integration. Arcade also adds credential brokering, approval policies, redaction, and controls for reaching Ashby from supported clients.
Arcade agents can list jobs and applications, search for candidates, retrieve candidate profiles and debriefs, read notes and interview feedback, add candidate notes, move applications between stages, and archive applications with a reason.
Ashby uses a shared API key or secret configured once for the integration. That credential must have the Ashby API permissions needed for the reads and writes your workflow enables; read-only work does not require write access, while notes, stage changes, and archiving do.
No. Ashby uses one shared API key or secret configured for the integration, rather than having each user authorize a separate Ashby account. Arcade brokers the credential, and the model never receives it.
Yes. Contextual Access policies can require human approval before consequential Ashby actions such as archiving an application or changing its interview stage. The call proceeds only after the policy's conditions have been satisfied.
Arcade proxies Ashby API calls and does not persist your content as part of normal tool execution. The Ashby credential is brokered and stored encrypted at rest, and the model never receives it.
Any framework or client that can connect to Arcade's MCP gateway or tool APIs works, including LangChain, OpenAI Agents, CrewAI, Claude Desktop, Claude Code, Cursor, Visual Studio Code, Microsoft Copilot Studio, and GitHub Copilot.
Arcade refreshes access while the configured Ashby credential remains valid. If the key is revoked, rotated, or can no longer be used, calls stop until the credential is reconfigured.
Calls through Arcade remain subject to Ashby's API rate limits and quotas for the configured account or credential. Exact limits depend on Ashby's current policies and the credential in use.