Manage Breezy HR positions, candidates, pipelines, scorecards, notes, messages and webhooks through the Breezy HR applicant tracking API.
Breezy HR ships in the w6w first-party pack. It declares 32 actions, 3 health checks, and the host runs its code in a sandbox that never sees the credential.
io.w6w.breezyhrBreezy HR is an applicant tracking system: companies post positions, candidates move through a pipeline of stages, and the hiring team scores, messages and notes them. This app connects a workflow to its v3 REST API with a Personal Access Token.
A workflow can list the companies a token belongs to and read their departments, categories, pipelines and custom field definitions. It can list, read, create, update and publish or close positions; list, read, create and update candidates on a position, find a candidate by exact email or search the whole company by free text, move a candidate to a pipeline stage or to another position, record a scorecard rating, post an internal note, send the candidate a message, and read a candidate’s activity stream and conversation. It can also manage the company’s webhook endpoints, which is how Breezy pushes candidate and position events out.
Breezy returns the bare resource with no envelope and answers a bad token with HTTP 400 rather than 401; this app reads the error type and reports it. Health checks verify the token, whether the API answers and the rate-limit headroom.
Three routes to the same 32 actions. The Workflow tab is generated from Breezy HR's own manifest and carries its real ids, so it is copy-pasteable; the Code and CLI examples are the same call for any action on any app, so every app-specific value in them is a blank you fill in.
candidate-conversation-list Read the message thread with a candidate (messages and interview proposals), newest first.
candidate-create Add a candidate to a position, as sourced (straight into Applied) or as if they had applied. Fails with 409 if they are already on the position.
candidate-find-by-email Find the candidates in a company whose email address matches exactly, across every position. Immediately consistent.
candidate-get Read a candidate's full profile on a position: contact info, stage, source, resume, education, work history, tags, score.
candidate-list List the candidates on a position, optionally only those in one pipeline stage.
candidate-message-send Email a message to a candidate through their Breezy conversation. The candidate sees it; use Add Candidate Note for internal remarks.
candidate-move Move a candidate to a stage of a different position. Use Set Candidate Stage to stay on the same position.
candidate-note-add Post an internal note to a candidate's activity stream. Notes are team-only and never shown to the candidate.
candidate-scorecard-add Record a scorecard rating, with an optional note, for a candidate on behalf of the token's user.
candidate-search Free-text search across every candidate in the company (name, email, phone, headline, tags, work history, answers…).
candidate-set-stage Move a candidate to another stage of their position's pipeline. Runs the stage's automations; a Hired stage marks them hired.
candidate-stream-list Read a candidate's activity stream: stage moves, notes, interviews, documents, questionnaires, newest first.
candidate-update Change a candidate's contact details, headline, summary, source, tags or custom attributes. Only the fields you set change.
category-list List the position categories available to the company (built-in plus custom). Use an `id` as a position's category.
company-get Read a company's profile (name, friendly id, member count). Needs a plan with the Developer API.
company-list List the companies the token's user belongs to. Every other action needs a company `_id` from here.
custom-field-list List the company's custom field definitions for candidates or positions (name, data type, options).
department-list List the company's departments. A department's name is the value Create/Update Position accepts.
pipeline-get Read a pipeline's ordered stages. The stage `id` is what Set Candidate Stage and Move Candidate take.
pipeline-list List the company's hiring pipelines, keyed by pipeline name (default, default_pool, custom ones), each with its ordered stages.
position-create Create a position (job requisition). It starts unpublished; use Set Position State to publish it.
position-get Read one position in full: location, department, description, application form, salary, team.
position-list List a company's positions, optionally by state. Archived positions are left out unless you ask for them.
position-set-state Publish, unpublish (draft), archive or close a position. Publishing fails when the company is at its active-position limit.
position-update Change a position's title, description, type, department, category, salary, pipeline or tags. Only the fields you set change.
webhook-create Subscribe a URL to candidate and position events. The response carries the signing secret once; store it.
webhook-delete Permanently delete a webhook endpoint so it receives no further events.
webhook-list List the company's webhook endpoints with delivery stats and how much of the 10-endpoint quota is used.
webhook-pause Pause a webhook endpoint: deliveries stop, the configuration is kept (status paused, enabled false).
webhook-resume Resume a paused or auto-disabled webhook endpoint, clearing the failure count and auto-disable state.
webhook-update Change a webhook endpoint's URL, events, description or enabled flag. Only the fields you set change.
A workflow step names the app and the action, and the editor fills in the
connection when you pick one. This is the Step shape from the
workflow spec, carrying Breezy HR's real ids.
{
"manifestVersion": "2",
"name": "breezyhr-example",
"steps": [
{
"id": "candidate-conversation-list",
"uses": {
"app": "io.w6w.breezyhr",
"action": "candidate-conversation-list",
"connection": "conn_YOUR_CONNECTION_ID"
},
"with": {
"companyId": "<companyId>",
"positionId": "<positionId>",
"candidateId": "<candidateId>"
}
}
]
}candidate-conversation-list candidate-create candidate-find-by-email candidate-get candidate-list +27 more actions available
Every app-specific value here is a blank you have to fill in. An
app action is reached through the connection that authenticates it, so the
address is a connection id, not the app id — and connections belong to your account,
so a public page cannot know yours. Create one for Breezy HR, then fill in
the three blanks: conn_YOUR_CONNECTION_ID, the action key, and the
parameters that action declares. The call itself is real — the shape is transcribed
from the studio's own snippet builder, which prints the same kind of blanks — but
nothing in it is specific to Breezy HR. The Workflow tab is where this app's
real ids are.
npm install @w6w/sdkyarn add @w6w/sdkpnpm add @w6w/sdkdeno add npm:@w6w/sdkimport { W6wClient, isActionRun } from "@w6w/sdk";
// Reads W6W_BASE_URL and W6W_TOKEN from the environment when omitted.
const client = new W6wClient();
const envelope = await client.run({
urn: "conn_YOUR_CONNECTION_ID",
action: "candidate-conversation-list",
payload: {
companyId: "<value>",
positionId: "<value>",
candidateId: "<value>",
// skip: "<value>",
// includeDelayed: "<value>",
},
});
if (isActionRun(envelope)) console.log(envelope.value); npm install -g @w6w/cli w6w run conn_YOUR_CONNECTION_ID --action candidate-conversation-list --payload '{"companyId":"<value>","positionId":"<value>","candidateId":"<value>"}' Give an AI agent Breezy HR — without giving it Breezy HR's credentials. One MCP endpoint exposes every app, function and workflow the caller is entitled to, as tools it can discover and run. Access is granted per team while we onboard.
One tool call{
"name": "w6w_invoke",
"arguments": {
"ref": "app:io.w6w.breezyhr#candidate-conversation-list",
"input": {
"companyId": "<companyId>",
"positionId": "<positionId>",
"candidateId": "<candidateId>"
}
}
}
Every tool names its target with a single ref. The
app: form above doesn't name a connection at all — the
host resolves which of the caller's Breezy HR connections to sign
with, and refuses rather than guesses when the answer is ambiguous.
The token is attached host-side, at the moment of the call. It is never a tool argument, never in the model's context, and never in a transcript — so a prompt injection has nothing to exfiltrate.
Tools are derived per end user from what that person has actually connected and is entitled to — not one shared bot identity carrying the union of everyone's access.
Multi-step work runs on the workflow engine and returns a run handle the agent can poll — retries, branching and state survive the conversation that started them.
Breezy HR's declared health checks are on the surface too, so an agent can tell "the vendor is down" from "your credential expired" before it burns a retry on either.
The MCP surface is part of the hosted platform. Breezy HR itself is MIT, and the runtime that executes it is source-available (FSL).
Breezy HR declares its own checks, so its health is a property of the app rather than something the host guesses at.
Unauthenticated GET /user. Breezy's JSON `error` envelope (missingAccessToken) passes: it proves the application is answering.
Requests remaining in the current 60-second window, read off the response headers.