MCP compliance catalog

Changes a member's roles, permission sets, or job access scope, widening what recruiting and employee data that principal can read without an access review.

Provisions a new account user by invitation, adding a principal with access to candidate and employee records outside the normal onboarding approval.

Restores access for a deactivated member, reactivating credentials that a prior offboarding or suspension decision had removed.

Removes a member and revokes their access immediately, which can lock a recruiter or manager out of in-flight hiring work.

Returns candidate records matching arbitrary filter combinations across the full field schema, enabling bulk retrieval of applicant PII in a single call.

Returns employee records matching arbitrary filters, exposing HR profile data for large parts of the workforce in one request.

Pulls every persisted performance-review answer in a cycle, exposing manager and peer assessments of named employees across the organization at once.

Approves an employment offer, committing the company to the stated compensation package and clearing the approval gate that normally needs a second approver.

Approves a headcount requisition, releasing budgeted spend for a new hire without the second-party sign-off the approval chain assumes.

Writes complete clock-in/clock-out records for many employees at once, feeding payroll calculations from data no supervisor reviewed.

Rewrites the recorded clock-in and clock-out times on an existing entry, altering the timekeeping record that payroll and wage-hour audits rely on.

Rejects a candidate from a hiring process with a recorded reason — an adverse employment decision taken against an identifiable applicant.

Rejects a pending employment offer, ending the hire for that candidate and recording the rejection reason on their record.

Approves or rejects a pending time-off request, drawing down accrued balances that carry a payroll liability, and can be used to self-approve leave.