Our earlier post, Use your job search from Claude, explains what the Zorlya MCP server is and how it keeps access narrow. This one is the practical companion. It walks through setup in the order you will meet it, shows what to type to see it work, and spends most of its length on what the connection cannot do.
Before you start
Updated 18 October 2026: the server moved to https://mcp.zorlya.com, and sign-in now goes through a Connect page where you choose the account and the permission level. The older address, zorlya.com/mcp, no longer works.
You need a Zorlya account and one of the AI apps on Zorlya’s list: Claude, ChatGPT, Claude Code or Cursor. For a job seeker account, connecting an AI app is part of the Pro plan (pricing). The address is the same for every app:
https://mcp.zorlya.comOne thing can stop you before you begin. The connection is switched on by an administrator of the Zorlya instance, and it is off until then. If a client reports that the server is unavailable, check the Integrations tab described below before you assume you did something wrong. The developers page at zorlya.com/developers shows the same address and a copy button.
Set up Claude Desktop
- Open Settings, then Connectors, then Add custom connector.
- Paste the address and save.
- The first time you use it, a browser window opens. Sign in to Zorlya if you are asked.
- On the Connect page, which names the app, choose the Zorlya account it should use and the permission level, then sign in to that account.
There is no API key to copy and nothing to paste back into the client.
Set up Claude Code
Run this in a terminal:
claude mcp add --transport http zorlya https://mcp.zorlya.comThen run /mcp inside Claude Code and choose Zorlya to sign in. The same Connect page opens in your browser.
Any other client
Give the client the address and let it find the rest. It reads the server’s published sign-in details, registers itself, and sends you to the Connect page. An app that is not on Zorlya’s list is refused.
Choose read only or read and change
The Connect page offers permission levels. Read only lets the app read your jobs, matches, profile, saved jobs, applications and notifications. Read and change adds a small set of changes, and Zorlya asks you to sign in again, with your password or a passkey, before it grants it. Read only is already selected.
Start with read only. You can see how it behaves, and a read-only app is never shown the write tools at all, so it cannot try them. If you later want it to save jobs or move applications, connect it again and choose read and change.
Try these first
Ask in plain words. The client picks the tools.
- “Find remote backend roles that fit me this week.” It searches the feed and ranks the results by your scores.
- “Show my top matches above 80 and tell me which ones to apply for.” This is what the
review_matchesprompt does, if your client lists prompts. - “Read the second one in full and say where I am weak.” It opens that job and your score breakdown.
- “Review my application board and tell me what needs attention.” This is the
pipeline_reviewprompt.
If you chose read and change, you can also say “save that one” or “move it to interviewing and add a note that they replied”. The note goes on that application’s timeline.
What it can do
A job seeker account has 20 tools: 15 read and 5 write. Other kinds of Zorlya account (hiring, support, staff) have their own tools, 35 more, 55 in all, and an app sees only the tools of the account you chose. Reading covers the job feed, your matches, your resume, your applications and their history, the funnel numbers for your pipeline, saved jobs, notifications, your stored documents, and which sources feed Zorlya. Writing is limited to saving and unsaving a job, tracking an application or moving it to another stage, adding a note, and marking notifications as read.
The full list with every argument is on the developers page.
What it cannot do
This list is for a job seeker account. Hiring accounts have a tool that emails a candidate when it moves them to another stage, so they are different.
- It cannot apply to a job. Applying stays a decision you make in Zorlya or on the employer’s site.
- It cannot send an email or message to anyone.
- It cannot delete anything, on any kind of account.
- It cannot see another account. No tool takes an account as an argument, so a client sees only the account that approved it.
- It cannot change your profile, resume or settings.
Limits
Each account can make 120 reads, 30 changes and 5 deletes a minute. If a model gets stuck calling the same tool over and over, the limit makes that visible. A call over the limit returns an error that says how long to wait. Signing in is limited separately.
An access token lasts one hour, and your client renews it with a refresh token that lasts 30 days. Every renewal replaces the old refresh token. If you stop using a client for longer than that, it asks you to sign in again.
Check what is connected and disconnect it
Open Settings, then the Integrations tab, in the job seeker app. Every client you have approved is listed. The email you get when you connect also links to your connections on mcp.zorlya.com. Disconnecting one revokes its tokens at once, so its next call fails and it has to ask you again. Do this for any client you no longer use.
A note on trust
An assistant that can read your job search is reading it on a server you do not control. Your job titles, match scores and notes pass through whichever AI service your client uses, under that service’s terms. Zorlya does not see your conversation with it. Zorlya does log the requests the app makes to Zorlya, with their contents; the privacy policy says for how long. If you would not paste a note into that assistant, do not give it read and change access to your applications.