Stop showing the job board on a Topolo Web site

Restore the hosted job board: canonical links and role links point to Recruit again, the redirects stop and the public apply endpoint stops accepting applications from the site. Pass siteId to unbind only from that site (Topolo Web does, so a stale placement never unbinds another site). An already hosted board is returned unchanged. Roles, candidates and settings are untouched. Recruiters only, signed in (not an API key).

Outcome

Before you start

Verify identity and the pinned organization context, then discover the exact action and a granted Recruit workspace.
The required application permission is workspace:write. Hiring-team roles and record visibility are enforced separately; a workspace grant alone does not grant every Recruit action.
Organization and workspace identity come from verified context. Pass the workspace as resourceType/resourceId, separate from action input; request-body organizationId/workspaceId values cannot select an authorized scope.
The first authorized action can initialize an identity-only workspace mirror and invoke the configured workspace-created callback. It does not create an Auth workspace or grant new access.

Recruiters can perform the full hiring workflow. Hiring managers see their managed roles and candidates; interviewers see assigned interviews and their candidates. Workspace owners and organization administrators act as recruiters. Use team.me to read the caller's effective role and allowed actions.

Discover the target

topolo whoami --json
topolo actions get app_topolo_recruit.job_board.destination.unbind --detail --json
topolo resources topolo-recruit --json
topolo workspaces list topolo-recruit --json
topolo actions get app_topolo_recruit.team.me --detail --json

Request

POST /api/job-board/destination/unbind

Save input as payload.json. CLI and MCP action input includes path identifiers. The reviewed plan separates path/query fields from the HTTP body. Set RECRUIT_WORKSPACE_ID from granted resource discovery.

Inspect and test this action in the signed action console. Use its discovered schema and plan; a test response still requires the verification described below.

Input fields

Field	Required	Type	Constraints
`boardId`	Required	string	{"minLength":1,"maxLength":64}
`siteId`	Optional	string	{"pattern":"^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$"}

Exact input schema:

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "boardId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 64
    },
    "siteId": {
      "type": "string",
      "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$"
    }
  },
  "required": [
    "boardId"
  ],
  "additionalProperties": false
}

Effects

Sets the destination back to hosted with an audit entry (board.destinationHistory) and tells apps that placed the board (recruit.board.changed, destination_unbound). Works whatever RECRUIT_CAREERS_DESTINATIONS is.

Interpret the response

Call job_board.get and confirm board.destination.kind is hosted and board.publicUrl is the Recruit (or custom domain) address.

The response identifier path is $.board.id for job_board. Lists may be empty; an empty list is not a discovered target.

Exact success schema:

{
  "type": "object",
  "required": [
    "board"
  ],
  "properties": {
    "board": {
      "type": "object",
      "properties": {
        "id": {
          "type": [
            "string",
            "null"
          ],
          "description": "The board's stable id (board_…): the {boardId} of the public careers API and the id of its recruit.board reference. Null until the board is first saved."
        },
        "slug": {
          "type": [
            "string",
            "null"
          ]
        },
        "title": {
          "type": [
            "string",
            "null"
          ]
        },
        "intro": {
          "type": [
            "string",
            "null"
          ]
        },
        "published": {
          "type": "boolean"
        },
        "publicUrl": {
          "type": [
            "string",
            "null"
          ]
        },
        "customDomain": {
          "type": [
            "string",
            "null"
          ]
        },
        "embedHtml": {
          "type": [
            "string",
            "null"
          ]
        },
        "openRoleCount": {
          "type": "integer"
        },
        "appearance": {
          "type": "object",
          "description": "The board's own appearance settings. A null field is not set: Brand's value applies when source is brand, else the neutral default.",
          "properties": {
            "source": {
              "enum": [
                "brand",
                "manual"
              ],
              "description": "brand: follow the organization's published Brand presentation (logo, light and dark palettes, name) for every field the board does not set. manual: use only these settings and the neutral defaults."
            },
            "logoUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "primaryColor": {
              "type": [
                "string",
                "null"
              ],
              "description": "#rrggbb"
            },
            "coverImageUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "headline": {
              "type": [
                "string",
                "null"
              ]
            },
            "font": {
              "type": [
                "string",
                "null"
              ],
              "enum": [
                "system",
                "grotesk",
                "serif",
                "rounded",
                null
              ]
            },
            "themeMode": {
              "enum": [
                "light",
                "dark",
                "auto"
              ],
              "description": "light (the default) or dark renders only that palette; auto follows the visitor's device setting. A board saved before this field existed reads as light."
            },
            "headerLinks": {
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "label": {
                    "type": "string"
                  },
                  "url": {
                    "type": "string"
                  }
                }
              }
            },
            "siteUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "footerLinks": {
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "label": {
                    "type": "string"
                  },
                  "url": {
                    "type": "string"
                  }
                }
              }
            },
            "showPoweredBy": {
              "type": "boolean"
            },
            "logoReversedUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "heroVariant": {
              "enum": [
                "text",
                "image"
              ]
            },
            "subheadline": {
              "type": [
                "string",
                "null"
              ]
            },
            "cover": {
              "type": [
                "object",
                "null"
              ],
              "description": "The hero image: url, alt (required), focalX and focalY (0-100)."
            },
            "sections": {
              "type": "object",
              "description": "about { enabled, body }, whyJoin { enabled, items }, benefits { enabled, items }, gallery { enabled, images }, hiringProcess { enabled, steps }, always in that order."
            },
            "rolesList": {
              "type": "object",
              "properties": {
                "groupBy": {
                  "enum": [
                    "none",
                    "team",
                    "location"
                  ]
                },
                "filters": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  }
                },
                "sort": {
                  "enum": [
                    "newest",
                    "title"
                  ]
                }
              }
            },
            "confirmationMessage": {
              "type": [
                "string",
                "null"
              ]
            },
            "seo": {
              "type": "object",
              "properties": {
                "metaTitle": {
                  "type": [
                    "string",
                    "null"
                  ]
                },
                "metaDescription": {
                  "type": [
                    "string",
                    "null"
                  ]
                },
                "shareImage": {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              }
            }
          }
        },
        "draftAppearance": {
          "type": [
            "object",
            "null"
          ],
          "description": "The unpublished next appearance (job_board.draft.update), the same shape as appearance; null without unpublished changes."
        },
        "destination": {
          "type": "object",
          "description": "Where the board's pages are stored to live. hosted (default): Recruit serves them at publicUrl. web_site: a Topolo Web site renders the board natively at origin + basePath; while destinationActive, publicUrl, canonicals, JobPosting url and role links point there, Recruit's hosted board and role pages answer 301 to it, and the public apply endpoint accepts applications only from origin.",
          "properties": {
            "kind": {
              "enum": [
                "hosted",
                "web_site"
              ]
            },
            "siteId": {
              "type": "string"
            },
            "origin": {
              "type": "string"
            },
            "basePath": {
              "type": "string"
            },
            "boundAt": {
              "type": "string"
            },
            "boundBy": {
              "type": "string"
            }
          }
        },
        "destinationActive": {
          "type": "boolean",
          "description": "Whether the stored destination is honoured in this environment (RECRUIT_CAREERS_DESTINATIONS on). False for a hosted board; a stored web_site destination that is not active changes nothing until it is."
        },
        "destinationHistory": {
          "type": "array",
          "description": "The latest destination changes, newest first (up to 5): bind or unbind, who, and the site, origin and basePath before and after.",
          "items": {
            "type": "object",
            "properties": {
              "action": {
                "enum": [
                  "bind",
                  "unbind"
                ]
              },
              "actorUserId": {
                "type": "string"
              },
              "siteId": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "origin": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "basePath": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "previousSiteId": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "previousOrigin": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "previousBasePath": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "createdAt": {
                "type": "string"
              }
            }
          }
        },
        "brand": {
          "type": "object",
          "description": "What Brand offers this board: status available (a published kit applies), none (nothing is published for the workspace), unavailable (Brand did not answer and nothing is cached) or unconfigured (Brand is not set up in this environment).",
          "properties": {
            "status": {
              "enum": [
                "available",
                "none",
                "unavailable",
                "unconfigured"
              ]
            },
            "name": {
              "type": [
                "string",
                "null"
              ]
            },
            "logoUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "primaryColor": {
              "type": [
                "string",
                "null"
              ]
            },
            "darkPrimaryColor": {
              "type": [
                "string",
                "null"
              ]
            }
          }
        },
        "effectiveAppearance": {
          "type": "object",
          "description": "What the public pages render now: the board's settings over Brand (when followed) over the neutral defaults. brand says whether Brand was applied, not_followed (manual), none or unavailable.",
          "properties": {
            "name": {
              "type": "string"
            },
            "logoUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "headline": {
              "type": [
                "string",
                "null"
              ]
            },
            "primaryLight": {
              "type": "string"
            },
            "primaryDark": {
              "type": "string"
            },
            "font": {
              "enum": [
                "system",
                "grotesk",
                "serif",
                "rounded",
                "brand"
              ]
            },
            "themeMode": {
              "enum": [
                "light",
                "dark",
                "auto"
              ]
            },
            "logoReversedUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "markUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "markReversedUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "heroVariant": {
              "enum": [
                "text",
                "image"
              ]
            },
            "headerLinks": {
              "type": "array",
              "items": {
                "type": "object"
              }
            },
            "siteUrl": {
              "type": [
                "string",
                "null"
              ]
            },
            "footerLinks": {
              "type": "array",
              "items": {
                "type": "object"
              }
            },
            "showPoweredBy": {
              "type": "boolean"
            },
            "brand": {
              "enum": [
                "applied",
                "not_followed",
                "none",
                "unavailable"
              ]
            }
          }
        }
      }
    }
  }
}

Worked examples

Actual dispatcher and migration-created SQLite or Worker handlers; Auth/workspace identity, object storage, mail and Notify dependencies are simulated. These synthetic fixtures establish no live authorization or delivery. A synthetic fixture identifier grants no access. Validate and inspect the planned request before executing. Commands with --confirm or MCP confirm:true assume the intended effect or data export has already been authorized.

Successful request

Actual dispatcher and migration-created SQLite; verified Auth/workspace context, object storage, mail and Notify dependencies are simulated. No live delivery or credential authorization is established. This complete response is a local fixture, not a deployed or delivered result.

Input · payload.json:

{
  "boardId": "board_980fa214f9dd486ba25e85ceafd4c7a5"
}

CLI:

topolo actions validate app_topolo_recruit.job_board.destination.unbind --data @payload.json --json
topolo actions plan app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --confirm --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_recruit.job_board.destination.unbind",
    "input": {
      "boardId": "board_980fa214f9dd486ba25e85ceafd4c7a5"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "board": {
    "id": "board_980fa214f9dd486ba25e85ceafd4c7a5",
    "slug": "acme",
    "title": "Acme",
    "intro": null,
    "published": true,
    "appearance": {
      "source": "brand",
      "logoUrl": null,
      "primaryColor": null,
      "coverImageUrl": null,
      "headline": null,
      "font": null,
      "footerLinks": [],
      "showPoweredBy": true
    },
    "destination": {
      "kind": "hosted"
    },
    "publicUrl": "https://recruit.test/jobs/acme",
    "customDomain": null,
    "embedHtml": "<iframe src=\"https://recruit.test/jobs/acme?embed=1\" title=\"Acme\" loading=\"lazy\" style=\"width:100%;min-height:640px;border:0\"></iframe>",
    "openRoleCount": 0,
    "brand": {
      "status": "unconfigured",
      "name": null,
      "logoUrl": null,
      "primaryColor": null,
      "darkPrimaryColor": null
    },
    "effectiveAppearance": {
      "name": "Acme",
      "logoUrl": null,
      "coverImageUrl": null,
      "headline": null,
      "primaryLight": "#0a76a9",
      "primaryDark": "#0a76a9",
      "font": "system",
      "footerLinks": [],
      "showPoweredBy": true,
      "brand": "none"
    },
    "destinationActive": false,
    "destinationHistory": [
      {
        "action": "unbind",
        "actorUserId": "u_admin",
        "siteId": null,
        "origin": null,
        "basePath": null,
        "previousSiteId": "site_42",
        "previousOrigin": "https://jobs.example.com",
        "previousBasePath": "/careers",
        "createdAt": "2026-10-05T09:00:00.000Z"
      },
      {
        "action": "bind",
        "actorUserId": "u_admin",
        "siteId": "site_42",
        "origin": "https://jobs.example.com",
        "basePath": "/careers",
        "previousSiteId": null,
        "previousOrigin": null,
        "previousBasePath": null,
        "createdAt": "2026-10-05T09:00:00.000Z"
      }
    ]
  }
}

HTTP 200. Call job_board.get and confirm board.destination.kind is hosted and board.publicUrl is the Recruit (or custom domain) address.

Another supported request

Input · payload.json:

{
  "boardId": "board_1801cf1f15284620abeaf6e460053d2a"
}

CLI:

topolo actions validate app_topolo_recruit.job_board.destination.unbind --data @payload.json --json
topolo actions plan app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --confirm --json

MCP tool and arguments:

{
  "tool": "topolo_call_action",
  "arguments": {
    "actionId": "app_topolo_recruit.job_board.destination.unbind",
    "input": {
      "boardId": "board_1801cf1f15284620abeaf6e460053d2a"
    },
    "resourceType": "workspace",
    "resourceId": "<identifier returned by resource discovery>",
    "confirm": true
  }
}

Captured local response · HTTP 200:

{
  "board": {
    "id": "board_1801cf1f15284620abeaf6e460053d2a",
    "slug": "acme",
    "title": "Acme",
    "intro": null,
    "published": false,
    "appearance": {
      "source": "brand",
      "logoUrl": null,
      "primaryColor": null,
      "coverImageUrl": null,
      "headline": null,
      "font": null,
      "footerLinks": [],
      "showPoweredBy": true
    },
    "destination": {
      "kind": "hosted"
    },
    "publicUrl": "https://recruit.test/jobs/acme",
    "customDomain": null,
    "embedHtml": "<iframe src=\"https://recruit.test/jobs/acme?embed=1\" title=\"Acme\" loading=\"lazy\" style=\"width:100%;min-height:640px;border:0\"></iframe>",
    "openRoleCount": 0,
    "brand": {
      "status": "unconfigured",
      "name": null,
      "logoUrl": null,
      "primaryColor": null,
      "darkPrimaryColor": null
    },
    "effectiveAppearance": {
      "name": "Acme",
      "logoUrl": null,
      "coverImageUrl": null,
      "headline": null,
      "primaryLight": "#0a76a9",
      "primaryDark": "#0a76a9",
      "font": "system",
      "footerLinks": [],
      "showPoweredBy": true,
      "brand": "none"
    },
    "destinationActive": false,
    "destinationHistory": [
      {
        "action": "unbind",
        "actorUserId": "u_admin",
        "siteId": null,
        "origin": null,
        "basePath": null,
        "previousSiteId": "site_42",
        "previousOrigin": "https://jobs.example.com",
        "previousBasePath": "/careers",
        "createdAt": "2026-10-05T09:00:00.000Z"
      },
      {
        "action": "bind",
        "actorUserId": "u_admin",
        "siteId": "site_42",
        "origin": "https://jobs.example.com",
        "basePath": "/careers",
        "previousSiteId": null,
        "previousOrigin": null,
        "previousBasePath": null,
        "createdAt": "2026-10-05T09:00:00.000Z"
      },
      {
        "action": "unbind",
        "actorUserId": "u_admin",
        "siteId": null,
        "origin": null,
        "basePath": null,
        "previousSiteId": "site_42",
        "previousOrigin": "https://jobs.example.com",
        "previousBasePath": "/careers",
        "createdAt": "2026-10-05T09:00:00.000Z"
      },
      {
        "action": "bind",
        "actorUserId": "u_admin",
        "siteId": "site_42",
        "origin": "https://jobs.example.com",
        "basePath": "/careers",
        "previousSiteId": null,
        "previousOrigin": null,
        "previousBasePath": null,
        "createdAt": "2026-10-05T09:00:00.000Z"
      }
    ]
  }
}

HTTP 200. Call job_board.get and confirm board.destination.kind is hosted and board.publicUrl is the Recruit (or custom domain) address.

Refused request · not_found

Input · payload.json:

{
  "boardId": "board_other"
}

CLI:

topolo actions validate app_topolo_recruit.job_board.destination.unbind --data @payload.json --json
topolo actions plan app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 404:

{
  "error": {
    "code": "not_found",
    "message": "Job board was not found in this workspace.",
    "messageKey": "recruit.api.notFound.board",
    "locale": "en"
  }
}

HTTP 404. Preserve the exact response code and details. Do not claim success.

Refused request · board_destination_mismatch

Input · payload.json:

{
  "boardId": "board_1801cf1f15284620abeaf6e460053d2a",
  "siteId": "site_other"
}

CLI:

topolo actions validate app_topolo_recruit.job_board.destination.unbind --data @payload.json --json
topolo actions plan app_topolo_recruit.job_board.destination.unbind --resource-type workspace --resource-id "$RECRUIT_WORKSPACE_ID" --data @payload.json --json

Captured local response · HTTP 409:

{
  "error": {
    "code": "board_destination_mismatch",
    "message": "This job board is shown on a different Topolo Web site, so it was not unbound.",
    "messageKey": "recruit.api.errors.destinationMismatch",
    "locale": "en",
    "details": {
      "siteId": "site_42"
    }
  }
}

HTTP 409. Preserve the exact response code and details. Do not claim success.

Verify the result

Call job_board.get and confirm board.destination.kind is hosted and board.publicUrl is the Recruit (or custom domain) address.

Errors and recovery

organization_context_required (HTTP 403): Select the organization authorized by the credential; do not send an organization id in the action input.
permission_denied (HTTP 403): Grant the credential the required Recruit workspace permission.
hiring_team_role_required (HTTP 403): Ask a recruiter to give the caller a hiring-team role that allows this action (team.members.set); error.details lists the allowed roles.
workspace_required (HTTP 409): Create a Recruit workspace, or pass the workspace resource context.
invalid_input (HTTP 422): Correct the fields named in error.details using inputSchema, then retry.
not_found (HTTP 404): boardId does not name this workspace's board. Read the id with job_board.get.
board_destination_mismatch (HTTP 409): The board is bound to a different site (error.details.siteId); this guarded request changed nothing. Read job_board.get and reconcile the current site with the intended placement. Retain siteId for placement-scoped removal; omit it only when restoring the board to hosted is the explicitly intended action for its current destination.
invalid_json (HTTP 400): Send a valid JSON object. The request is rejected before workspace resolution or record creation.
api_key_workspace_binding_required (HTTP 403): Create the API key bound to a workspace (an organization-wide key names a workspace nobody verified), then call again.
workspace_required (HTTP 400): Send the workspace the key is bound to with --resource-type workspace --resource-id <workspace id> (or the X-Topolo-Resource-Type and X-Topolo-Resource-Id headers).
workspace_forbidden (HTTP 403): Use a workspace the key is bound to; read the key's bindings in API key management.
workspace_access_insufficient (HTTP 403): Give the key the workspace permission this action needs: workspace:read to read and workspace:write to change. A delete also needs workspace:write, because the write permission is what grants the read_write level.
api_key_person_required (HTTP 403): This action needs a person signed in; an API key cannot run it. Ask the person to do it in the app.

Authentication or gateway failures may occur before the Recruit handler. Preserve the exact discovered service error, request id and credential context. The local fixtures do not establish live credential authorization.

Recovery boundary

Bind the board to the site again with its origin and basePath.

Show the job board on a Topolo Web site: Bind the job board to a Topolo Web site, which then renders its roles, role pages and application form natively in its own theme (Web calls this as the signed-in board admin when it places a recruit.board). Only where RECRUIT_CAREERS_DESTINATIONS is on (else 403 destinations_disabled) and only for an origin Recruit can prove belongs to the organization's Web site siteId (else 403 destination_unverified; refused until Web lands). boardId comes from job_board.get; origin is the site's https origin (no path, port, IP address, Topolo host or Recruit custom domain); basePath is "" or a path such as /careers. While bound, publicUrl, canonicals, JobPosting url and role links point to origin + basePath, hosted board and role pages answer 301 there, and the public apply endpoint accepts only that origin. Rebinding the same site updates origin and basePath; another site is refused until unbound. Recruiters only, signed in (not an API key).

Evidence

Actual dispatcher and migration-created SQLite or Worker handlers; Auth/workspace identity, object storage, mail and Notify dependencies are simulated. These synthetic fixtures establish no live authorization or delivery. Test capture provenance is retained with each fixture. API, database and integration outcomes require separate verification in the target environment.

Documentation history

2026-10-18: Added this action guide with reviewed request, response, permission, verification and recovery guidance from source 63171ed7c08aa066adb44cc01e64011e465302e1. Examples are retained local captures, not production execution or delivery proof. This publication includes the reviewed clarification: The captured409 says the board belongs to site_42 rather than site_other. Unconditionally dropping the supplied site guard changes the target from the intended stale placement to another current destination.

Stop showing the job board on a Topolo Web site

Outcome

Before you start

Discover the target

Request

Input fields

Effects

Interpret the response

Worked examples

Successful request

Another supported request

Refused request · not_found

Refused request · board_destination_mismatch

Verify the result

Errors and recovery

Recovery boundary

Related actions

Evidence

Documentation history