← Back to search

@ttctl/mcp

GitHub Actions Scanned 5d ago

TTCtl MCP server exposing Toptal Talent operations to AI assistants

npm
C
64.2 / 100

Versions

0.2.0latest
Jul 11, 2026
0.1.1
Jun 16, 2026
0.1.1-rc.1
Jun 16, 2026
0.1.0
Jun 16, 2026
0.1.0-rc.18
Jun 16, 2026
+ show 18 moreshow less
0.1.0-rc.17
Jun 15, 2026
0.1.0-rc.16
Jun 14, 2026
0.1.0-rc.15
Jun 13, 2026
0.1.0-rc.14
Jun 12, 2026
0.1.0-rc.13
May 29, 2026
0.1.0-rc.12
May 26, 2026
0.1.0-rc.11
May 26, 2026
0.1.0-rc.10
May 25, 2026
0.1.0-rc.9
May 24, 2026
0.1.0-rc.8
May 22, 2026
0.1.0-rc.7
May 20, 2026
0.1.0-rc.6
May 20, 2026
0.1.0-rc.5
May 20, 2026
0.1.0-rc.4
May 19, 2026
0.1.0-rc.3
May 19, 2026
0.1.0-rc.2
May 18, 2026
0.1.0-rc.1
May 17, 2026
0.0.0
May 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 117

ttctl_engagements_stats
annotations: none low

ttctl_engagements_breaks_list
annotations: none low

id string
ttctl_engagements_breaks_reasons_list
annotations: none low

ttctl_jobs_apply_similar_answers
annotations: none low

id string
ttctl_availability_show
annotations: none low

ttctl_availability_working_hours_show
annotations: none low

ttctl_engagements_breaks_add
annotations: none low

id string comment string endDate string startDate string
ttctl_engagements_breaks_remove
annotations: none low

breakId string
ttctl_me_actions_list
annotations: none low

after string limit number before string
ttctl_surveys_list
annotations: none low

ttctl_surveys_submit
annotations: none low

ttctl_surveys_feedback
annotations: verified low

feedback string surveyId string
destructiveHint true
ttctl_payments_payouts_list
annotations: none low

toDate string fromDate string
ttctl_payments_payouts_show
annotations: none low

id string
ttctl_payments_show_many
annotations: none low

ttctl_payments_summary
annotations: none low

ttctl_payments_methods_list
annotations: none low

ttctl_payments_methods_show
annotations: none low

id string
ttctl_payments_rate_current
annotations: none low

ttctl_payments_rate_show
annotations: none low

ttctl_payments_rate_questions
annotations: none low

ttctl_payments_rate_change
annotations: none low

value string comment string questionId string desiredRate string talentComment string
ttctl_contracts_list
annotations: none low

ttctl_contracts_show
annotations: none low

id string
ttctl_timesheet_list
annotations: none low

ttctl_timesheet_pending_list
annotations: none low

ttctl_timesheet_show
annotations: none low

id string
ttctl_timesheet_show_many
annotations: none low

ttctl_timesheet_submit
annotations: none low

ttctl_timesheet_update
annotations: none low

id string date string note string comment string
ttctl_engagements_list
annotations: none low

keywords array
ttctl_engagements_show
annotations: none low

id string
ttctl_engagements_breaks_reschedule
annotations: none low

breakId string endDate string startDate string
ttctl_engagements_payments_list
annotations: none low

id string after string limit number
ttctl_applications_list
annotations: none low

keywords array
ttctl_applications_show
annotations: none low

id string
ttctl_applications_interview_show
annotations: none low

id string
ttctl_applications_interview_notes_show
annotations: none low

ttctl_applications_interview_guide_show
annotations: none low

ttctl_applications_availability_request_show
annotations: none low

id string
ttctl_applications_stats
annotations: none low

ttctl_interest_requests_list
annotations: none low

ttctl_interest_requests_accept
annotations: none low

ttctl_interest_requests_reject
annotations: none low

id string comment string
ttctl_interest_requests_reject_reasons
annotations: none low

ttctl_jobs_list
annotations: none low

skills array keywords array workTypes array sortTarget string commitments array excludeSkills array excludeKeywords array estimatedLengths array
ttctl_jobs_recommended
annotations: none low

ttctl_jobs_dashboard
annotations: none low

ttctl_jobs_dashboard_count
annotations: none low

ttctl_jobs_show
annotations: none low

id string
ttctl_jobs_show_many
annotations: none low

ttctl_jobs_match_quality
annotations: none low

id string
ttctl_jobs_rate_insight
annotations: none low

id string
ttctl_jobs_save
annotations: none low

id string
ttctl_jobs_unsave
annotations: none low

id string
ttctl_jobs_saved
annotations: none low

ttctl_jobs_viewed
annotations: none low

ttctl_jobs_mark_viewed
annotations: none low

id string
ttctl_jobs_not_interested
annotations: none low

id string reason string
ttctl_jobs_not_interested_list
annotations: none low

ttctl_jobs_clear_interest
annotations: none low

id string
ttctl_jobs_search_list
annotations: none low

ttctl_jobs_search_save
annotations: none low

skills array keywords array workTypes array commitments array excludeSkills array excludeKeywords array estimatedLengths array excludeUnspecifiedBudget boolean
ttctl_jobs_search_remove
annotations: none low

ttctl_jobs_apply_data
annotations: none low

id string
ttctl_jobs_apply_questions
annotations: none low

id string
ttctl_jobs_apply_rate_insight
annotations: none low

id string
ttctl_jobs_apply
annotations: none low

ttctl_availability_working_hours_set
annotations: none low

workingTimeTo string availableShiftRangeTo string availableShiftRangeFrom string
ttctl_availability_allocated_hours_show
annotations: none low

ttctl_availability_allocated_hours_set
annotations: none low

hours number
ttctl-test
annotations: none low

ttctl_synthetic_cf403
annotations: none low

synthetic

ttctl_profile_industries_add
annotations: none low

Add a new industry-profile entry to the user's profile (the user's authored domain-expertise entry). `name` becomes the title; `connection` becomes domainArea (the user's role within the industry, e.g. 'Backend' for the 'Healthcare' industry).

name string about string connection string
ttctl_profile_industries_update
annotations: none low

Update an existing industry-profile entry by id. At least one field must be supplied.

id string name string about string connection string
ttctl_profile_industries_remove
annotations: none low

Remove an industry-profile entry by id.

id string
ttctl_profile_industries_show
annotations: none low

Show a single industry-profile entry by id (returns the row as JSON). Resolved via the `node()` GraphQL resolver — a true per-id lookup, distinct from certifications/education/employment `show` which list-and-filter client-side.

id string
ttctl_profile_industries_list
annotations: none low

List the user's industry-profile entries (returns an array of rows as JSON).

ttctl_profile_industries_add_connections
annotations: verified low

destructiveHint true
ttctl_profile_industries_autocomplete
annotations: none low

Search the known-industries catalog by name (e.g. "Healthcare"). Returns up to `limit` suggestions with their canonical IDs. Distinct from `industries_add` — this is a lookup leaf, not a write.

limit number query string
ttctl_profile_resume_upload
annotations: none low

Upload the user's resume (PDF or DOCX). Supply EITHER `filePath` (server-relative; preferred when the host has filesystem access — Claude Desktop, Claude Code) OR `content` (base64-encoded; for web-hosted clients without filesystem access). Returns `{ success: true }` on a server-confirmed success. Pass `dryRun: true` to preview the GraphQL operations envelope without firing.

ttctl_profile_resume_cancel_upload
annotations: none low

Cancel any in-flight resume upload, clearing half-uploaded server-side state. Idempotent — returns success even when no upload is in flight. Pass `dryRun: true` to preview the request without firing.

ttctl_profile_visas_list
annotations: none low

List the signed-in user's travel-visa records (id, country, type, expiry). Pass `dryRun: true` to preview the request.

ttctl_profile_visas_add
annotations: none low

Create a new travel-visa record. Both `countryId` and `visaType` are required; `expiryDate` is optional. Pass `dryRun: true` to preview the request.

visaType string countryId string expiryDate string
ttctl_profile_visas_update
annotations: none low

Update fields on a travel-visa record by id. Only supplied fields are updated. Pass `dryRun: true` to preview the request.

id string visaType string countryId string expiryDate string
ttctl_profile_visas_remove
annotations: none low

Remove a travel-visa record by id. Pass `dryRun: true` to preview the request.

id string
ttctl_profile_portfolio_list
annotations: none low

List the signed-in user's portfolio items (id, title, link, highlight, etc).

ttctl_profile_portfolio_add
annotations: none low

Create a new portfolio item. `title` is required; other fields are optional. Use `ttctl_profile_portfolio_upload_cover` first if you want to attach a cover image, then pass the resulting `coverImageCacheName` via the `coverImage` field on a follow-up `update` call (or supply via the underlying GraphQL input — currently the cover-then-create flow is two-step).

link string title string highlight boolean websiteUrl string description string showViaToptal boolean accomplishment string clientOrCompanyName string
ttctl_profile_portfolio_update
annotations: none low

Update fields on an existing portfolio item by id. Only supplied fields are updated.

ttctl_profile_portfolio_remove
annotations: none low

Remove a portfolio item by id.

id string
ttctl_profile_portfolio_reorder
annotations: none low

Move a portfolio item to an absolute 0-based position. To compute relative-to-neighbour positions, list portfolio items first to find indices.

id string position number
ttctl_profile_portfolio_highlight
annotations: none low

Set or clear the `highlight` flag on a portfolio item. Toptal caps highlighted portfolio items at 3 — setting `highlight: true` when 3 are already highlighted is rejected with a generic USER_ERROR ("Something went wrong. Please try again later."). Clear an existing highlight (`highlight: false`) first; call `ttctl_profile_portfolio_list` to see which items are currently highlighted (#542).

id string highlight boolean
ttctl_profile_portfolio_upload_cover
annotations: none low

Upload a cover image for the user's portfolio. Supply EITHER `filePath` (server-relative; preferred when the host has filesystem access — Claude Desktop, Claude Code) OR `content` (base64-encoded; for web-hosted clients without filesystem access). Returns `coverImageCacheName` and `coverImageUrl`; pass the cache name into a subsequent portfolio-add or portfolio-update call's `coverImage` field to bind the cover to a specific item. Server requires the image to be at least 750x500 px and under 5 MB.

cropX number cropY number
ttctl_profile_portfolio_upload_file
annotations: none low

Upload an arbitrary attachment file for the user's portfolio. Supply EITHER `filePath` (preferred when the host has filesystem access) OR `content` (base64). Returns `fileCacheName` and `fileUrl`.

ttctl_profile_countries_list
annotations: none low

List the Toptal Country/geography catalog (id, ISO code, name) — the full ~250-row catalog (not a search). Use this to resolve a valid Country id to pass as `primaryGeographyId` to ttctl_profile_employment_add / ttctl_profile_employment_update.

ttctl_profile_employment_add
annotations: none low

Add a new employment entry (company + role, with optional start/end years and `current` flag).

ttctl_profile_employment_update
annotations: none low

Update an existing employment entry by id. At least one field must be supplied. `description` is multi-paragraph free-text and splits on blank lines.

ttctl_profile_employment_remove
annotations: none low

Remove an employment entry by id.

id string
ttctl_profile_employment_show
annotations: none low

Show a single employment entry by id (returns the row as JSON). Note: the underlying wire call lists all rows and filters client-side; the dry-run preview emits `GET_WORK_EXPERIENCE` (the list query) accordingly.

id string
ttctl_profile_employment_list
annotations: none low

Toggle the highlight flag on an employment entry.

ttctl_profile_employment_highlight
annotations: none low

Toggle the highlight flag on an employment entry.

id string highlight boolean
ttctl_profile_employment_skills_${op}
annotations: none low

${verb} one or more catalog ProfileSkillSet ids

employmentId string
ttctl_profile_employment_employer_autocomplete
annotations: none low

Search the known-employer catalog by name (e.g. "Google"). Returns up to `limit` suggestions with their canonical IDs.

limit number query string
ttctl_profile_employment_reporting_to_autocomplete
annotations: none low

Search Toptal's reporting-to name catalog by name prefix. Returns up to `limit` `{id,name}` suggestions for `Employment.reportingTo`.

limit number prefix string
ttctl_profile_certifications_add
annotations: none low

Add a new certification entry (name + issuer, with optional issue / expiration dates, credential URL, and credential ID). Dates accept ISO-8601 (YYYY-MM-DD) or year-only (YYYY); month is preserved when given.

link url name string issuer string number string
ttctl_profile_certifications_update
annotations: none low

Update an existing certification entry by id. At least one field must be supplied.

id string link url name string issuer string number string highlight boolean
ttctl_profile_certifications_remove
annotations: none low

Remove a certification entry by id.

id string
ttctl_profile_certifications_show
annotations: none low

Show a single certification entry by id (returns the row as JSON). Note: the underlying wire call lists all rows and filters client-side; the dry-run preview emits `GET_CERTIFICATION` (the list query) accordingly.

id string
ttctl_profile_certifications_list
annotations: none low

Toggle the highlight flag on a certification entry.

ttctl_profile_certifications_highlight
annotations: none low

Toggle the highlight flag on a certification entry.

id string highlight boolean
ttctl_profile_education_add
annotations: none low

Add a new education entry. institution, degree, field of study, location, and start/end years are ALL required — the Toptal API rejects a create that omits any of them. Dates accept ISO-8601 (YYYY-MM-DD) or year-only (YYYY).

id string name string degree string location string institution string fieldOfStudy string
ttctl_profile_education_update
annotations: none low

Update an existing education entry by id. At least one field must be supplied.

id string name string degree string location string highlight boolean institution string fieldOfStudy string
ttctl_profile_education_remove
annotations: none low

Remove an education entry by id.

id string
ttctl_profile_education_show
annotations: none low

Show a single education entry by id (returns the row as JSON). Note: the underlying wire call lists all rows and filters client-side; the dry-run preview emits `GET_EDUCATION` (the list query) accordingly.

id string
ttctl_profile_education_list
annotations: none low

Toggle the highlight flag on an education entry.

ttctl_profile_education_highlight
annotations: none low

Toggle the highlight flag on an education entry.

id string highlight boolean
test
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 281

low
Tool 'ttctl_me_actions_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_surveys_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_surveys_submit' has no annotations annotation_checker · 100%
info
Tool 'ttctl_surveys_feedback' annotations are consistent annotation_checker · 80%
low
Tool 'ttctl_payments_payouts_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_payouts_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_show_many' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_summary' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_methods_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_methods_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_rate_current' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_rate_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_rate_questions' has no annotations annotation_checker · 100%
low
Tool 'ttctl_payments_rate_change' has no annotations annotation_checker · 100%
low
Tool 'ttctl_contracts_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_contracts_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_pending_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_show_many' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_submit' has no annotations annotation_checker · 100%
low
Tool 'ttctl_timesheet_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_stats' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_breaks_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_breaks_reasons_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_breaks_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_breaks_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_breaks_reschedule' has no annotations annotation_checker · 100%
low
Tool 'ttctl_engagements_payments_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_interview_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_interview_notes_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_interview_guide_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_availability_request_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_applications_stats' has no annotations annotation_checker · 100%
low
Tool 'ttctl_interest_requests_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_interest_requests_accept' has no annotations annotation_checker · 100%
low
Tool 'ttctl_interest_requests_reject' has no annotations annotation_checker · 100%
low
Tool 'ttctl_interest_requests_reject_reasons' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_recommended' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_dashboard' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_dashboard_count' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_show_many' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_match_quality' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_rate_insight' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_save' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_unsave' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_saved' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_viewed' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_mark_viewed' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_not_interested' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_not_interested_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_clear_interest' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_search_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_search_save' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_search_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_apply_data' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_apply_questions' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_apply_rate_insight' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_apply' has no annotations annotation_checker · 100%
low
Tool 'ttctl_jobs_apply_similar_answers' has no annotations annotation_checker · 100%
low
Tool 'ttctl_availability_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_availability_working_hours_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_availability_working_hours_set' has no annotations annotation_checker · 100%
low
Tool 'ttctl_availability_allocated_hours_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_availability_allocated_hours_set' has no annotations annotation_checker · 100%
low
Tool 'ttctl-test' has no annotations annotation_checker · 100%
low
Tool 'ttctl_synthetic_cf403' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_industries_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_industries_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_industries_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_industries_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_industries_list' has no annotations annotation_checker · 100%
info
Tool 'ttctl_profile_industries_add_connections' annotations are consistent annotation_checker · 80%
low
Tool 'ttctl_profile_industries_autocomplete' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_resume_upload' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_resume_cancel_upload' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_visas_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_visas_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_visas_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_visas_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_reorder' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_highlight' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_upload_cover' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_portfolio_upload_file' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_countries_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_highlight' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_skills_${op}' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_employer_autocomplete' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_employment_reporting_to_autocomplete' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_certifications_highlight' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_add' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_update' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_remove' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_show' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_list' has no annotations annotation_checker · 100%
low
Tool 'ttctl_profile_education_highlight' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: turbo@catalog: (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@catalog: (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog: (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-3787-6prv-h9w3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-3cvr-822r-rqcc) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-8qr4-xgw6-wmr3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-9qxr-qj54-h672) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-f772-66g8-q5h3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-m4v8-wqvr-p9f7) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-q768-x9m6-m9qp) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-r6ch-mqf9-qc9w) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@catalog: (GHSA-wqq4-5wpv-mx2g) dependency_analyzer · 95%
medium
Buffer.from base64 in alexey-pelykh-ttctl-a557fef/packages/mcp/src/tools/file-upload.ts:320 entropy_analyzer · 75%
medium
Buffer.from base64 in alexey-pelykh-ttctl-a557fef/packages/e2e/src/95-payments-show-many.e2e.test.ts:111 entropy_analyzer · 75%
medium
Buffer.from base64 in alexey-pelykh-ttctl-a557fef/packages/e2e/src/96-timesheet-show-many.e2e.test.ts:113 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in alexey-pelykh-ttctl-a557fef/packages/core/src/auth/index.ts:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in alexey-pelykh-ttctl-a557fef/packages/core/src/__tests__/auth.test.ts:53 entropy_analyzer · 70%
medium
Buffer.from base64 in alexey-pelykh-ttctl-a557fef/packages/core/src/services/profile/skills/index.ts:1153 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: ttctl_me_actions_list manifest_parser · 85%
info
Tool: ttctl_surveys_list manifest_parser · 85%
info
Tool: ttctl_surveys_submit manifest_parser · 85%
info
Tool: ttctl_surveys_feedback manifest_parser · 85%
info
Tool: ttctl_payments_payouts_list manifest_parser · 85%
info
Tool: ttctl_payments_payouts_show manifest_parser · 85%
info
Tool: ttctl_payments_show_many manifest_parser · 85%
info
Tool: ttctl_payments_summary manifest_parser · 85%
info
Tool: ttctl_payments_methods_list manifest_parser · 85%
info
Tool: ttctl_payments_methods_show manifest_parser · 85%
info
Tool: ttctl_payments_rate_current manifest_parser · 85%
info
Tool: ttctl_payments_rate_show manifest_parser · 85%
info
Tool: ttctl_payments_rate_questions manifest_parser · 85%
info
Tool: ttctl_payments_rate_change manifest_parser · 85%
info
Tool: ttctl_contracts_list manifest_parser · 85%
info
Tool: ttctl_contracts_show manifest_parser · 85%
info
Tool: ttctl_timesheet_list manifest_parser · 85%
info
Tool: ttctl_timesheet_pending_list manifest_parser · 85%
info
Tool: ttctl_timesheet_show manifest_parser · 85%
info
Tool: ttctl_timesheet_show_many manifest_parser · 85%
info
Tool: ttctl_timesheet_submit manifest_parser · 85%
info
Tool: ttctl_timesheet_update manifest_parser · 85%
info
Tool: ttctl_engagements_list manifest_parser · 85%
info
Tool: ttctl_engagements_show manifest_parser · 85%
info
Tool: ttctl_engagements_stats manifest_parser · 85%
info
Tool: ttctl_engagements_breaks_list manifest_parser · 85%
info
Tool: ttctl_engagements_breaks_reasons_list manifest_parser · 85%
info
Tool: ttctl_engagements_breaks_add manifest_parser · 85%
info
Tool: ttctl_engagements_breaks_remove manifest_parser · 85%
info
Tool: ttctl_engagements_breaks_reschedule manifest_parser · 85%
info
Tool: ttctl_engagements_payments_list manifest_parser · 85%
info
Tool: ttctl_applications_list manifest_parser · 85%
info
Tool: ttctl_applications_show manifest_parser · 85%
info
Tool: ttctl_applications_interview_show manifest_parser · 85%
info
Tool: ttctl_applications_interview_notes_show manifest_parser · 85%
info
Tool: ttctl_applications_interview_guide_show manifest_parser · 85%
info
Tool: ttctl_applications_availability_request_show manifest_parser · 85%
info
Tool: ttctl_applications_stats manifest_parser · 85%
info
Tool: ttctl_interest_requests_list manifest_parser · 85%
info
Tool: ttctl_interest_requests_accept manifest_parser · 85%
info
Tool: ttctl_interest_requests_reject manifest_parser · 85%
info
Tool: ttctl_interest_requests_reject_reasons manifest_parser · 85%
info
Tool: ttctl_jobs_list manifest_parser · 85%
info
Tool: ttctl_jobs_recommended manifest_parser · 85%
info
Tool: ttctl_jobs_dashboard manifest_parser · 85%
info
Tool: ttctl_jobs_dashboard_count manifest_parser · 85%
info
Tool: ttctl_jobs_show manifest_parser · 85%
info
Tool: ttctl_jobs_show_many manifest_parser · 85%
info
Tool: ttctl_jobs_match_quality manifest_parser · 85%
info
Tool: ttctl_jobs_rate_insight manifest_parser · 85%
info
Tool: ttctl_jobs_save manifest_parser · 85%
info
Tool: ttctl_jobs_unsave manifest_parser · 85%
info
Tool: ttctl_jobs_saved manifest_parser · 85%
info
Tool: ttctl_jobs_viewed manifest_parser · 85%
info
Tool: ttctl_jobs_mark_viewed manifest_parser · 85%
info
Tool: ttctl_jobs_not_interested manifest_parser · 85%
info
Tool: ttctl_jobs_not_interested_list manifest_parser · 85%
info
Tool: ttctl_jobs_clear_interest manifest_parser · 85%
info
Tool: ttctl_jobs_search_list manifest_parser · 85%
info
Tool: ttctl_jobs_search_save manifest_parser · 85%
info
Tool: ttctl_jobs_search_remove manifest_parser · 85%
info
Tool: ttctl_jobs_apply_data manifest_parser · 85%
info
Tool: ttctl_jobs_apply_questions manifest_parser · 85%
info
Tool: ttctl_jobs_apply_rate_insight manifest_parser · 85%
info
Tool: ttctl_jobs_apply manifest_parser · 85%
info
Tool: ttctl_jobs_apply_similar_answers manifest_parser · 85%
info
Tool: ttctl_availability_show manifest_parser · 85%
info
Tool: ttctl_availability_working_hours_show manifest_parser · 85%
info
Tool: ttctl_availability_working_hours_set manifest_parser · 85%
info
Tool: ttctl_availability_allocated_hours_show manifest_parser · 85%
info
Tool: ttctl_availability_allocated_hours_set manifest_parser · 85%
info
Tool: ttctl-test manifest_parser · 75%
info
Tool: ttctl_synthetic_cf403 manifest_parser · 85%
info
Tool: ttctl_profile_industries_add manifest_parser · 85%
info
Tool: ttctl_profile_industries_update manifest_parser · 85%
info
Tool: ttctl_profile_industries_remove manifest_parser · 85%
info
Tool: ttctl_profile_industries_show manifest_parser · 85%
info
Tool: ttctl_profile_industries_list manifest_parser · 85%
info
Tool: ttctl_profile_industries_add_connections manifest_parser · 85%
info
Tool: ttctl_profile_industries_autocomplete manifest_parser · 85%
info
Tool: ttctl_profile_resume_upload manifest_parser · 85%
info
Tool: ttctl_profile_resume_cancel_upload manifest_parser · 85%
info
Tool: ttctl_profile_visas_list manifest_parser · 85%
info
Tool: ttctl_profile_visas_add manifest_parser · 85%
info
Tool: ttctl_profile_visas_update manifest_parser · 85%
info
Tool: ttctl_profile_visas_remove manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_list manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_add manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_update manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_remove manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_reorder manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_highlight manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_upload_cover manifest_parser · 85%
info
Tool: ttctl_profile_portfolio_upload_file manifest_parser · 85%
info
Tool: ttctl_profile_countries_list manifest_parser · 85%
info
Tool: ttctl_profile_employment_add manifest_parser · 85%
info
Tool: ttctl_profile_employment_update manifest_parser · 85%
info
Tool: ttctl_profile_employment_remove manifest_parser · 85%
info
Tool: ttctl_profile_employment_show manifest_parser · 85%
info
Tool: ttctl_profile_employment_list manifest_parser · 85%
info
Tool: ttctl_profile_employment_highlight manifest_parser · 85%
info
Tool: ttctl_profile_employment_skills_${op} manifest_parser · 85%
info
Tool: ttctl_profile_employment_employer_autocomplete manifest_parser · 85%
info
Tool: ttctl_profile_employment_reporting_to_autocomplete manifest_parser · 85%
info
Tool: ttctl_profile_certifications_add manifest_parser · 85%
info
Tool: ttctl_profile_certifications_update manifest_parser · 85%
info
Tool: ttctl_profile_certifications_remove manifest_parser · 85%
info
Tool: ttctl_profile_certifications_show manifest_parser · 85%
info
Tool: ttctl_profile_certifications_list manifest_parser · 85%
info
Tool: ttctl_profile_certifications_highlight manifest_parser · 85%
info
Tool: ttctl_profile_education_add manifest_parser · 85%
info
Tool: ttctl_profile_education_update manifest_parser · 85%
info
Tool: ttctl_profile_education_remove manifest_parser · 85%
info
Tool: ttctl_profile_education_show manifest_parser · 85%
info
Tool: ttctl_profile_education_list manifest_parser · 85%
info
Tool: ttctl_profile_education_highlight manifest_parser · 85%
info
Tool: test manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (40) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 29 components sbom_generator · 100%
high
Hardcoded Password found in alexey-pelykh-ttctl-a557fef/CLAUDE.md secret_scanner · 65%
high
Hardcoded Password found in alexey-pelykh-ttctl-a557fef/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%