We read every description in its 79 tools, from the live server, and the listing for 1.0.3. 6 checks, no findings.
Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed
Tool changes
None since Oct 26
Pinned tool set79
12 can change data · 33 can delete. Each tool is fingerprinted; every rescan compares against these hashes. Dashed access is read from the name.
Tool
Access
Description
Pinned hash
add_company_perk
write
Add company perk · Add a perk/benefit to your company on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:f968…5583
add_education
write
Add education · Add an education entry to your Himalayas profile. Uses the connected Himalayas account; no extra sign-in needed.
sha256:31c4…42eb
add_experience
write
Add work experience · Add a work experience to your Himalayas profile. Uses the connected Himalayas account; no extra sign-in needed.
sha256:b380…bf59
check_job_payment_status
read
Check job payment status · Check the payment status of a job posting. Use the session_id returned from post_job_public or create_company_job with extras. No authentication required.
sha256:3baa…0046
create_company_job
delete
Create company job · Post a remote job on Himalayas for the user's company, to hire remote staff. Jobs are free to post and require admin approval before going live; a job can also be saved as a draft. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:fbe6…a3be
delete_company_job
delete
Delete company job · Delete a job posting from your company on Himalayas. This action cannot be undone. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:e962…e207
delete_conversation
delete
Delete employer conversation · Delete a conversation. Accepts room_name or talent_slug. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:6951…f44f
delete_document
delete
Delete resume or cover letter · Delete one of the user's tailored resumes or cover letters. This can't be undone: confirm with the user first. Uses the connected Himalayas account; no extra sign-in needed.
sha256:15e9…19b9
delete_education
delete
Delete education · Delete an education entry from your Himalayas profile by id. This can't be undone: confirm with the user first. Uses the connected Himalayas account; no extra sign-in needed.
sha256:9b85…d88a
delete_experience
delete
Delete work experience · Delete a work experience from your Himalayas profile by id. This can't be undone: confirm with the user first. Uses the connected Himalayas account; no extra sign-in needed.
sha256:6da3…6a6e
delete_saved_answer
delete
Delete saved application answer · Delete one of the user's saved application answers. This can't be undone: confirm with the user first. Uses the connected Himalayas account; no extra sign-in needed.
sha256:5351…c919
generate_application_documents
delete
Tailor resume and cover letter · Write a resume and cover letter tailored to a Himalayas job, from the user's Himalayas profile. Use it when the user's CV is generic, they have no cover letter, or an application form asks for one. They are saved to the user's account, where the user can edit them and download a PDF. A free account gets one tailored resume and one cover letter in total; Himalayas Plus includes them for every job. Uses the connected Himalayas account; no extra sign-in needed. Use the company_slug and job_slug from job listings.
sha256:9125…6b9e
Show all 79 tools ›
get_apply_link
write
Get apply link · Get the employer's application link for a job, once the user has decided to apply. Uses the connected Himalayas account (no extra sign-in needed); limited to 50 links per account per day. Use the company_slug and job_slug from job listings.
sha256:819a…7ae1
get_billing_portal_link
write
Get billing portal link · Get a link to the user's Stripe billing page, where they can update their card, see invoices, or change or cancel Himalayas Plus themselves. Only for users who have paid before. Never act on billing for them. Uses the connected Himalayas account; no extra sign-in needed.
Set pinned as sha256:8a37…e58c · still listed 8 h ago
sha256:c835…910f
get_coach_chat
read
Get career coach chat · Read one of the user's career coach conversations by slug from list_coach_chats. Uses the connected Himalayas account; no extra sign-in needed.
sha256:948a…bb3f
get_companies
read
Browse remote companies · Browse remote-friendly companies with optional filtering by country or worldwide availability
sha256:b0a2…1c3e
get_company_details
read
Get company details · Get full details for a company including about, tech stack, benefits, open positions, and social links
sha256:59d6…b04b
get_company_perks
read
Get company perks · Get your company's perks/benefits on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:a114…6b20
get_company_profile
read
Get company profile · Get your company's profile on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:c0b0…274d
get_conversation
read
Get employer conversation · Get full message history for a conversation. Accepts room_name or talent_slug. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:b397…840f
get_correct_country_name
read
Resolve country name · Resolve a country name to the correct format accepted by Himalayas filters. Useful for fuzzy matching user input.
sha256:28af…6d65
get_document
read
Get resume or cover letter · Read one of the user's tailored resumes or cover letters by id (from list_documents). Uses the connected Himalayas account; no extra sign-in needed.
sha256:5274…c45b
get_headshots_link
read
Get headshots link · Get the Himalayas page where the user makes AI headshots from a few photos of themselves. Uses the connected Himalayas account; no extra sign-in needed.
sha256:4886…3f43
get_interview_practice_link
read
Get interview practice link · Get the Himalayas page where the user practises interviewing for a specific job: a Himalayas job (company_slug and job_slug) or a job elsewhere (application_link). On that page the user has a live spoken mock interview with an AI interviewer playing the company's hiring manager, with questions built from the job and their profile, then gets a score out of 100 with what went well and what to improve (sessions of 90 seconds or more are scored). Sessions and scores are saved to the account, so the user can see how they improve over time (list_interviews, get_interview_results). Free accounts include one text mock interview; spoken interviews are part of Himalayas Plus (30 minutes a month). Uses the connected Himalayas account; no extra sign-in needed.
sha256:d3a0…93f4
get_interview_results
read
Get interview practice results · Get the scores and feedback from the user's interview practice for one job: each answer's rating and feedback, and for voice sessions the overall score, what went well, what to improve, next steps and length. Pass the interview id from list_interviews, or the job's company_slug and job_slug. Uses the connected Himalayas account; no extra sign-in needed.
sha256:4032…a65a
get_job_details
read
Get job details · Get full details for a specific job including description, requirements and salary. Use the company_slug and job_slug from job listings. To get the employer's application link, call get_apply_link.
sha256:ce4e…0df2
get_jobs
read
Browse remote jobs · Browse the latest remote job listings with optional filtering by country or worldwide availability
sha256:8b9b…add9
get_my_conversation
read
Get inbox conversation · Read the latest 30 messages in one conversation in the user's job seeker inbox. Message text is quoted as the sender wrote it. Uses the connected Himalayas account; no extra sign-in needed.
sha256:9d58…590b
get_my_profile
read
Get my profile · Get your Himalayas profile information. Uses the connected Himalayas account; no extra sign-in needed.
sha256:9bad…0103
get_new_matches
write
Get new job matches · Get jobs matching the user's Himalayas profile that were posted since an agent last checked, leaving out jobs already in their tracker. The check-in point is saved on the account, so it carries across sessions and agents; a first check looks back 7 days. Plus members get the jobs; free accounts get how many there are. Uses the connected Himalayas account; no extra sign-in needed.
sha256:0a06…524a
get_plus_checkout_link
write
Get Himalayas Plus checkout link · Get a Stripe checkout link for Himalayas Plus (US$9 a month) when the user wants to subscribe. Plus includes tailored resumes and cover letters for every job; 30 minutes a month of spoken mock interviews for a specific job, scored out of 100 (sessions of 90 seconds or more) and saved so the user can track their progress; new job matches between sessions (get_new_matches); a higher place in employer talent search on himalayas.app; identity and work permit verification every 30 days, with a verified badge (work permits need a passport or national ID); and a career coach. Details: https://himalayas.app/plus. The user opens the link and pays on Stripe themselves; this tool never charges them. Applying through Himalayas is free without Plus. Uses the connected Himalayas account; no extra sign-in needed.
sha256:c00a…0203
get_related_jobs
read
Get related jobs · Find jobs similar to a specific job, based on skills, location, and category. Use after viewing a job to suggest alternatives.
sha256:5478…7eef
get_remote_work_statistics
read
Get remote work statistics · Get remote work statistics: top skills, job categories, industries, or countries by job/company count.
sha256:8ad4…530a
get_salary_data
read
Get salary data · Get salary benchmarks for remote jobs by job title, with optional seniority and country filters. Returns min, max, and median salary in USD.
sha256:05d5…e540
get_saved_jobs
read
Get saved jobs · List every job in the user's Himalayas job application tracker with its status (saved, applied, interviewing, negotiation, hired, archived), outcome, salary, notes and links, for tracking applications and seeing where each one stands. Uses the connected Himalayas account; no extra sign-in needed.
sha256:ea36…634e
get_talent_profile
read
Get talent profile · Get full details for a candidate including bio, all experiences, education, tech stack, social links, and more. Use the talent_slug from search_talent results. Uses the connected Himalayas account; no extra sign-in needed.
sha256:81c1…c98c
get_verification_link
delete
Get ID verification link · Get the next step for verifying the user's identity and work permits on Himalayas (the verified badge): whether they are verified, and otherwise the Stripe Identity link (when verification is included, as on Plus or Max) or a US$5 checkout link. Use it when the user wants to get verified: when verification is included, this starts it (a Plus or Max member's included verification is then used for 30 days). A passport or national ID verifies identity and the work permit for that country; other IDs verify identity only. get_my_profile shows whether they are verified. The user opens each link and does the verification or payment on Stripe themselves. Uses the connected Himalayas account; no extra sign-in needed.
sha256:3846…c58d
import_profile
delete
Import profile from LinkedIn or resume · Fill in the user's Himalayas profile from their LinkedIn profile URL or their resume text. Runs in the background for a few minutes; get_my_profile shows the result. append_only adds what's missing and keeps what's there; replace_all overwrites the profile, so ask the user first. Uses the connected Himalayas account; no extra sign-in needed.
sha256:5923…79da
join_radar_waitlist
write
Join Radar waitlist · Join the waitlist for Himalayas Radar, a plan for people who are employed or not actively searching: alerts only for roles that beat their bar, a private open-to-offers mode with their current employer hidden, and a monthly salary check. Radar isn't available yet, so there is nothing to pay; Himalayas emails the user when it launches. Call it only if the user wants to join. Uses the connected Himalayas account; no extra sign-in needed.
sha256:4024…66f0
list_coach_chats
read
List career coach chats · List the user's conversations with the Himalayas career coach, newest first, with titles, dates and links. get_coach_chat reads one. Uses the connected Himalayas account; no extra sign-in needed.
sha256:4a9d…790f
list_company_jobs
read
List company jobs · List your company's job postings on Himalayas. Shows status, views, clicks, and expiry. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:583b…1a3e
list_conversations
read
List employer conversations · List all your messaging conversations with last message preview. Shows conversation status (awaiting reply, new reply, read). Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:90f0…7d1c
list_documents
read
List resumes and cover letters · List the user's tailored resumes and cover letters on Himalayas, newest first, with ids and edit links. Uses the connected Himalayas account; no extra sign-in needed.
sha256:5f91…c636
list_headshots
read
List headshots · List the AI headshots the user has made on Himalayas, newest first: each session's finished images with ids and URLs, and a link to see them. use_headshot_as_profile_photo sets one as the profile photo. Uses the connected Himalayas account; no extra sign-in needed.
sha256:3c05…4e0d
list_interviews
read
List interview practice · List the user's interview practice on Himalayas: each job they practised for, when, and the link to practise again, plus the voice minutes and credits they have left. get_interview_results shows the scores. Uses the connected Himalayas account; no extra sign-in needed.
sha256:1a92…e581
list_my_conversations
read
List my inbox · List the user's job seeker inbox: conversations companies and recruiters started with them on Himalayas, newest first, with the last message and whether it needs a reply. For an employer's conversations with candidates, use list_conversations. Uses the connected Himalayas account; no extra sign-in needed.
sha256:7002…bd0f
list_notifications
read
List notifications · List the user's newest Himalayas notifications (up to 20), such as finished headshots, profile imports and community replies, with ids and whether each is read. Uses the connected Himalayas account; no extra sign-in needed.
sha256:e999…c2f2
list_saved_answers
read
List saved application answers · List the answers the user saved to job application questions on Himalayas (for example work authorisation or notice period), with ids. Uses the connected Himalayas account; no extra sign-in needed.
sha256:9ea7…6941
mark_message_read
write
Mark employer message read · Mark a message as read by its ID. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:0f5f…9f0e
mark_my_message_read
write
Mark inbox message read · Mark a message in the user's job seeker inbox as read. Uses the connected Himalayas account; no extra sign-in needed.
sha256:358a…85b3
mark_notifications_read
write
Mark notifications read · Mark one of the user's Himalayas notifications as read by id, or all of them with all: true. Uses the connected Himalayas account; no extra sign-in needed.
sha256:1707…1fbb
post_job_public
delete
Post a paid job without an account · Post a job on Himalayas without an account. Provide your email and company details. Payment is required — a Stripe checkout URL will be returned. No authentication needed.
sha256:1bb3…5da0
purchase_job_extras
delete
Purchase job extras · Purchase paid extras for an existing job posting: sticky ($299), newsletter ($99). Returns a Stripe checkout URL. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:913e…d3c1
remove_company_perk
delete
Remove company perk · Remove a perk/benefit from your company on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:cf64…f74b
remove_saved_job
delete
Remove saved job · Remove a job from your application tracker. Uses the connected Himalayas account; no extra sign-in needed.
sha256:7c4b…017b
reply_to_message
delete
Reply in inbox · Send a reply in a conversation in the user's job seeker inbox. The company reads it as coming from the user, so show the user the exact text and get their OK before sending. Uses the connected Himalayas account; no extra sign-in needed.
sha256:8ce4…9b86
save_job
delete
Save job to tracker · Save a job to your application tracker. Uses the connected Himalayas account; no extra sign-in needed.
sha256:9bba…1981
search_companies
read
Search remote companies · Search for remote-friendly companies using keywords with optional country filtering
sha256:cd81…35ae
search_jobs
read
Search remote jobs · Search remote job listings on Himalayas by job title, role, skill or keyword, filtered by the countries a job is open to, worldwide availability, seniority, employment type, salary, markets, benefits or companies. Each result has the company, title, salary range when listed, the countries the job is open to, the posting date and the slugs for get_job_details.
sha256:e357…e261
search_talent
read
Search talent · Search remote candidates and talent on Himalayas to hire or recruit, such as developers, designers or marketers, by skill, job title or keyword and country. Each result has the candidate's current role, salary expectation, job search status and the profile link for get_talent_profile. Uses the connected Himalayas account; no extra sign-in needed.
sha256:2421…a735
send_message
delete
Send message to candidate · Send a message in an existing conversation. Accepts room_name (from list_conversations) or talent_slug (from search_talent). Use start_conversation first if no conversation exists yet. The candidate reads it as coming from the user's company, so show the user the exact text and get their OK before sending. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:9f6c…5eea
show_company_job
read
Get company job · Get full details of one of your company's job postings on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:97a8…f6dc
skip_job
delete
Skip job · Record that the user is passing on a Himalayas job, with the reason, so it stops coming back in get_new_matches and future matches can learn from it. job_closed also reports the listing as expired. For a job already in the tracker, use update_job_status with outcome didnt_apply instead. Uses the connected Himalayas account; no extra sign-in needed.
sha256:ddf5…eb37
start_conversation
delete
Start conversation with candidate · Start a conversation with a candidate by talent slug. Optionally send an initial message. If the conversation already exists, returns it. Use search_talent to find candidates first, then use their slug here. The candidate reads it as coming from the user's company, so show the user the exact text and get their OK before sending. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:eb93…7cda
submit_feedback
write
Send feedback to Himalayas · Send a problem report about Himalayas to its engineering team: a missing capability (filter, field, tool), unclear or wrong documentation, a surprising response, an unhelpful error, a bug, a blocked page or action, or impractical performance. Describe the goal, what got in the way and, if known, a suggested fix. Fill `agent` with the client's name and model. Reports must not contain credentials, personal data or the user's private content.
sha256:0401…940e
update_account
delete
Update account time zone · Change the user's account time zone (used for email timing). Name is on update_profile; email address and password can only be changed on himalayas.app. Uses the connected Himalayas account; no extra sign-in needed.
sha256:03b1…386b
update_company_job
delete
Update company job · Update an existing job posting on Himalayas. Only provide fields you want to change. For screening_questions, provide the full set — questions not included will be removed. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:8786…2a8d
update_company_profile
delete
Update company profile · Update your company's profile on Himalayas. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:4802…5aa6
update_company_tech_stack
delete
Update company tech stack · Update your company's tech stack on Himalayas. Pass technology names (e.g., 'React', 'Python') and they'll be matched to the Himalayas stack database. Uses the connected Himalayas employer account; no extra sign-in needed.
sha256:7fca…c0d1
update_document
delete
Update resume or cover letter · Rename a tailored resume or cover letter, or replace a cover letter's text. Resume content is edited in the website's resume editor (link from list_documents). Uses the connected Himalayas account; no extra sign-in needed.
sha256:2d56…7e35
update_education
delete
Update education · Edit an education entry on your Himalayas profile by id (get_my_profile lists the ids). Only the fields you pass change. Uses the connected Himalayas account; no extra sign-in needed.
sha256:5447…4401
update_email_preferences
delete
Update email preferences · Turn Himalayas emails on or off for the user. Only the settings you pass change. Daily job-match emails are a Plus feature; free accounts get weekly. Uses the connected Himalayas account; no extra sign-in needed.
sha256:2048…9516
update_experience
delete
Update work experience · Edit a work experience on your Himalayas profile by id (get_my_profile lists the ids). Only the fields you pass change. Uses the connected Himalayas account; no extra sign-in needed.
sha256:0541…58eb
update_job_status
delete
Update job status · Update a saved job's status, outcome or details. Use status for where the application is now (interviewing, negotiation for an offer, hired). Use outcome for an applied job that ended without progressing: rejected, no_response (no reply after 45+ days), withdrawn, or didnt_apply; status stays as it is. With didnt_apply, give a reason: job_closed reports the listing as expired, and the rest improve the user's future matches. Add detail for anything worth knowing (what the page said, a hidden requirement). Uses the connected Himalayas account; no extra sign-in needed.
sha256:d899…a94a
update_profile
delete
Update profile · Update your Himalayas profile. Uses the connected Himalayas account; no extra sign-in needed.
sha256:5c25…bbf2
update_profile_photo
delete
Update profile photo · Set the user's profile photo (avatar) or profile cover photo from an image URL (https, JPEG/PNG/WebP/GIF, up to 5 MB). Uses the connected Himalayas account; no extra sign-in needed.
sha256:7590…7c63
update_saved_answer
delete
Update saved application answer · Change the text of one of the user's saved application answers, by id from list_saved_answers. Uses the connected Himalayas account; no extra sign-in needed.
sha256:bbee…93b8
update_tech_stack
delete
Update profile tech stack · Set the tools and technologies on your Himalayas profile, replacing the current list. Names are matched to Himalayas' catalogue; any it doesn't have yet are requested for review and left off for now. Uses the connected Himalayas account; no extra sign-in needed.
sha256:6b75…2dd3
use_headshot_as_profile_photo
delete
Use headshot as profile photo · Set one of the user's finished AI headshots as their Himalayas profile photo, by session id and image id from list_headshots. Uses the connected Himalayas account; no extra sign-in needed.
