Open
Conversation
Adds a new MCP tool that surfaces Pinecone's open roles page. When invoked, it opens https://www.pinecone.io/careers/#open-roles in the user's default browser and returns the URL as a text response.
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Autofix Details
Bugbot Autofix prepared a fix for the issue found in the latest run.
- ✅ Fixed: Windows
startcommand treats quoted URL as title- Added empty title parameter to Windows start command so URL is opened in browser instead of being treated as window title.
Or push these changes by commenting:
@cursor push 5d8a6f47fa
Preview (5d8a6f47fa)
diff --git a/src/tools/jobs/careers.ts b/src/tools/jobs/careers.ts
--- a/src/tools/jobs/careers.ts
+++ b/src/tools/jobs/careers.ts
@@ -2,11 +2,10 @@
import {platform} from 'os';
import {McpServer} from '@modelcontextprotocol/sdk/server/mcp.js';
-const CAREERS_URL =
- 'https://www.pinecone.io/careers/#open-roles';
+const CAREERS_URL = 'https://www.pinecone.io/careers/#open-roles';
function openBrowser(url: string) {
- const cmd = platform() === 'win32' ? 'start' : platform() === 'darwin' ? 'open' : 'xdg-open';
+ const cmd = platform() === 'win32' ? 'start ""' : platform() === 'darwin' ? 'open' : 'xdg-open';
exec(`${cmd} "${url}"`);
}Instead of just returning a URL, the careers tool now fetches current open roles from Pinecone's Ashby job board at call-time, groups them by team, and returns formatted listings with direct links to each posting. Falls back to the careers page URL if the API is unavailable.
Adds optional 'team' and 'keyword' input parameters so the AI can narrow listings when there are many open roles. Both filters are case-insensitive partial matches and can be combined. Results include a note about which filters were applied, and a friendly no-results message when nothing matches.
cboltt
approved these changes
Mar 5, 2026
- Use execFile instead of exec in openBrowser to eliminate shell injection risk; on Windows, route through cmd.exe /c start - Fix false truncation: check pre-slice count against MAX_LISTINGS so exactly-20-result sets are not wrongly marked as truncated - Fix plural grammar: use "1 open role" vs "N open roles" - Run npm audit fix to resolve pre-existing high/moderate severity dependency vulnerabilities (hono, ajv, minimatch)
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Attach a no-op callback to execFile calls so Node does not emit an
unhandled 'error' event when the browser launcher is unavailable
(e.g. headless Linux MCP servers). Also fix subject-verb agreement
when exactly one job matches ("Here is 1 open role").
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

Summary
Adds a new
careersMCP tool that helps users discover open roles at Pinecone. When invoked, it opens the Pinecone careers page in the user's default browser and returns the URL as a text response — a lightweight but delightful way to surface hiring opportunities directly from within an AI assistant.Changes
src/tools/jobs/careers.ts— new tool implementation that openshttps://www.pinecone.io/careers/#open-rolesvia the OS default browsersrc/server.ts— imports and registers the newcareerstool on startupTest Plan
open), Linux (xdg-open), and Windows (start)Note
Medium Risk
Introduces a new tool that makes outbound network requests and invokes OS-specific browser launch commands (
execFile), which could affect runtime environments (especially headless/CI) despite best-effort error handling.Overview
Adds a new MCP tool
careersand registers it during server startup (src/server.ts). The tool openshttps://www.pinecone.io/careers/#open-rolesin the default browser and returns a text response listing open roles pulled from Ashby, with optionalteam/keywordfiltering and a 20-result cap.Adds test coverage for role formatting, filtering/sorting, truncation messaging, and API-failure fallback (
src/tools/jobs/careers.test.ts).Updates
package-lock.jsonwith version bumps for several dependencies (notablyhono,@hono/node-server,rollup,ajv,minimatch, andqs).Written by Cursor Bugbot for commit 3590196. This will update automatically on new commits. Configure here.