TheirStack MCP server for AI agents

Live

BEARER TOKEN

HIRING SIGNALS

CRM & Sales

TheirStack gives your agent hiring signals from job postings: search jobs and companies by technology, location, and seniority, see the technologies and buying intents a company shows, and manage company lists and saved searches.

  • Per-user credentials: each call uses the actual user's access token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
TheirStack
agent · Acme Q3
Run
Which companies posted Snowflake data engineer jobs this week?
S
theirstack_search_jobs
139ms
Market research agent
TheirStack found 57 job postings from 41 companies that mention Snowflake in the last 7 days.
Sources: TheirStack job search
theirstack
57 jobs
18:29
Message Claude...

Tools your market research agent reaches for on TheirStack, scoped per user.

CALL ANY TOOL
25 tools for hiring signals in TheirStack: search job postings and companies, look up a company's technologies and buying intents, browse keywords and locations, and manage company lists and saved searches.
theirstack_add_companies_to_list
List add companies to
Add companies to one company list by company ID. Returns the list with its new company count. Use add_companies_to_list after search_companies to save results. Use create_company_list first if no list exists.
Parameters
Name
Type
Required
Description
company_ids
array
Required
Company IDs to add, taken from the id of each company in a search_companies result.
list_id
integer
Required
ID of the company list. Use list_company_lists to find it.
theirstack_archive_saved_search
Search archive saved
theirstack_create_company_list
List create company
theirstack_create_saved_search
Search create saved
theirstack_delete_company_list
List delete company
theirstack_duplicate_company_list
List duplicate company
theirstack_get_company_buying_intents
Get company buying intents
theirstack_get_company_list
List get company
theirstack_get_company_technologies
Get company technologies
theirstack_get_credit_balance
Get credit balance
theirstack_get_saved_search
Search get saved
theirstack_list_companies_in_list
List list companies in
theirstack_list_company_countries
List company countries
theirstack_list_company_lists
List company lists
theirstack_list_industries
List industries
theirstack_list_job_countries
List job countries
theirstack_list_keyword_categories
List keyword categories
theirstack_list_keyword_subcategories
List keyword subcategories
theirstack_list_keywords
List keywords
theirstack_list_locations
List locations
theirstack_list_saved_searches
List saved searches
theirstack_remove_companies_from_list
List remove companies from
theirstack_rename_company_list
List rename company
theirstack_search_companies
Search companies
theirstack_search_jobs
Search jobs
Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// TheirStack tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["theirstack"], toolNames: [
    "theirstack_search_jobs",
    "theirstack_get_company_technologies",
    "theirstack_add_companies_to_list"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Find companies hiring Snowflake data engineers and add them to a list" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["theirstack"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Find companies hiring Snowflake data engineers and add them to a list" }],
  tools,
});

// Execute the tool call with the user's vaulted TheirStack access token
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["theirstack"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Find companies hiring Snowflake data engineers and add them to a list" }],
  tools,
});

// Tool call runs with the user's vaulted TheirStack access token
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["theirstack"] }, pageSize: 100,
});

const agent = new Agent({
  name: "market_research_agent",
  model: "gemini-2.5-pro",
  instruction: "TheirStack tools scoped to this user",
  tools,
});

await agent.run("Find companies hiring Snowflake data engineers and add them to a list");
Try these prompts
Copy any prompt into your agent. Each maps directly to a TheirStack tool. Click to copy, paste into your agent, done.
Jobs
Copy the prompt
Copied
Which companies posted Snowflake data engineer jobs this week?
Copy the prompt
Copied
Find remote senior Python roles posted in the last 14 days.
Copy the prompt
Copied
Which countries have the most job postings?
Companies
Copy the prompt
Copied
Find fintech companies in the UK that use Kubernetes.
Copy the prompt
Copied
Which technologies does contoso.com use?
Copy the prompt
Copied
What buying intents does northwind.io show?
Lists and searches
Copy the prompt
Copied
Create a company list called Snowflake users.
Copy the prompt
Copied
Add these 12 companies to the Snowflake users list.
Copy the prompt
Copied
Save this job search so I can rerun it.
SEE HOW AUTH WORKS
Each user connects their own TheirStack access token once, and Scalekit sends it with every call. Tokens stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
TheirStack
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
TheirStack
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
TheirStack
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
TheirStack
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other CRM and sales connectors.
GTM and RevOps Teams
Competitive intelligence briefing agent
Scans Gong calls for competitor mentions, matches each one to its Notion battlecard, and DMs every affected rep a single Slack digest per cycle. Every call runs as the PMM who owns the briefing, never a shared bot.
GTM and RevOps Teams
Outbound prospecting agent
Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.
Test other agents
See the same per-user auth pattern across other CRM and sales connectors.
GTM
Competitive intelligence briefing agent
Scan Gong calls for competitor mentions, match each one to its Notion battlecard, and DM every affected rep a single Slack digest.
SALES
Outbound prospecting agent
Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared TheirStack access token looks fine in a demo. In production every search and list change looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
TheirStack today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access TheirStack as the user or through a shared access token?
As the user. Each user connects their own TheirStack access token once, and Scalekit sends it with every call. Audit logs attribute every search and list change to that user, not a shared service account.
Where is the TheirStack access token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new access token. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in TheirStack?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example search tools without theirstack_delete_company_list, which permanently deletes a company list. Scalekit also enforces scope checks before every API call.
What happens when a user revokes TheirStack access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
How does TheirStack bill job searches?
theirstack_search_jobs uses 1 API credit for each job it returns, and it needs a date or company filter such as posted_at_max_age_days, or the request fails. theirstack_get_credit_balance shows the API credits the team has left.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""theirstack"": {
""url"": ""https://mcp.scalekit.com/theirstack"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.theirstack]
url = ""https://mcp.scalekit.com/theirstack""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""theirstack"": {
""url"": ""https://mcp.scalekit.com/theirstack"",
""type"": ""http""
}
}
}