MCP Server — openworkid.org

01Quickstart

Use Streamable HTTP at the canonical endpoint below. Modern clients negotiate the 2026 protocol; stateless 2025 clients are served by the same URL.

MCP client configuration

{
  "mcpServers": {
    "upstand": {
      "type": "http",
      "url": "https://upstand.work/api/mcp"
    }
  }
}

iThe former /sse URL is not part of the public contract. New integrations should use the single Streamable HTTP endpoint above.

02Consent and data boundary

Public read

Explicit profile opt-in

A public web profile is not automatically an MCP profile. Owners choose mcp_visible or actively_available.

Data minimised

No contact details

Profile email addresses and verifier email addresses are never returned. Withdrawn or pending confirmations are excluded.

Not available

No write tools yet

Profile edits, verification requests, profile search, and market benchmarks remain roadmap items—not production capabilities.

03Tool reference

Available now

get_profile(username)

PublicRead-only

Returns the selected public profile, confirmed current work, explicit ask topics, selected experience stories, collaboration preferences, public artifacts, verification count, competencies, and optional profession extensions.

Parameters

Name	Type	Req
username	string	required
include_extensions	boolean	optional · true
format	full \| summary	optional · full

Privacy

Contact data	never returned
Unconfirmed suggestions	never returned
Private artifacts	never returned
Opt-out result	not found

get_verifications(username)

PublicRead-only

Returns confirmed, active peer verifications. Pending and withdrawn records are excluded; verifier email addresses are never returned.

Parameters

Name	Type	Req
username	string	required
experience_id	string	optional
include_one_click	boolean	optional · true

04REST fallback

Environments without MCP can read the same consent-gated data over ordinary HTTPS.

Public REST endpoints

GET https://upstand.work/api/v1/profiles/{username}
GET https://upstand.work/api/v1/profiles/{username}/verifications

# Working fictional example
GET https://upstand.work/api/v1/profiles/mara-stein?format=summary

05Operational limits

→Limit: 100 requests per minute per IP. Exceeding it returns HTTP 429 and a Retry-After header. Invalid browser origins are rejected to reduce DNS-rebinding risk.