What agents can access
You choose permissions when connecting. Basic access includes career readiness and application progress. Separate permissions let your assistant read a selected resume and saved autofill details, search jobs, and download generated documents. Downloads expire and can be refreshed without generating another resume.
What agents can change
With the relevant permissions, your assistant can update a selected career profile using information you provide, save reusable answers, create tailored resumes using your allowance, and record applications. Your assistant handles employer-site submission in its own browser. Profile editing and application recording require their own permissions.
Employer passwords
Employer passwords are not available through this connector in the current release. They are never included in general profile responses or tool audit details. If an employer site needs a login, complete it with your assistant using that site’s normal sign-in process.
Authentication
OfferUnderway uses OAuth Authorization Code with PKCE, exact redirect matching, resource-bound tokens, one-hour opaque access tokens, and rotating 30-day refresh tokens. Refresh-token reuse revokes the full token family.
Isolation and revocation
Every query is scoped to the signed-in OfferUnderway account and OAuth client. Revoking a connection invalidates its tokens. Existing connections need your approval before receiving the new permissions; account deletion removes grants and pack mappings.
Job availability and facts
Search results include freshness information. Your assistant should check the original employer page before applying. Job descriptions cannot grant permissions or change your saved facts. Your selected profile supplies the career history, and required factual answers must come from you.
Support and disclosure
For security reports, review access, or privacy requests, email admin@offerunderway.com. Include “AI connector” in the subject. We do not sell personal information or provide personal content for third-party model training.
Connector endpoint
https://api.offerunderway.com/mcp
Add this server in an assistant that supports remote MCP and sign in to approve its requested permissions. Recurring schedules run in your assistant.