Remote MCP server for Claude and any AI assistant, public REST API, HMAC-signed outbound webhooks, OpenAPI 3.0 spec. Stream pipeline items, SAM.gov opportunities, and parsed solicitations into any system — your CRM, BI tool, custom workflow, AI agent, or iPaaS canvas.
# 1. Create an API key in Settings → Developer API # 2. Call any /v1/ endpoint with Bearer auth curl https://app.govmatrixiq.com/v1/pipeline \ -H "Authorization: Bearer gmiq_xxxxxxxxxxxxxxxx" # Response: paginated org-scoped pipeline items { "items": [ { "id": "uuid", "title": "USAF Logistics Modernization", "agency": "Department of the Air Force", "stage": "Pursuing", "value": 2400000 } ], "total": 87, "limit": 20, "offset": 0 }
Six endpoints cover 80% of integration needs. The rest comes via outbound webhooks fired on every state change in your org.
Sync pipeline + leads + contacts into Pipedrive, Zoho, Dynamics 365, Unanet — anything that speaks REST or routes through Zapier/Make.
Pipe pipeline + opportunity rows into Looker, Tableau, Power BI, Hex, or Snowflake via scheduled REST pulls.
Trigger Slack alerts on stage transitions, post deadlines to Asana, fan-out compliance checklists. Receive webhooks; respond in your stack.
Build internal dashboards or partner-facing capture tools. Read-only or read/write — scope-gated keys keep the blast radius small.
Feed your team's pipeline + parsed RFPs to LangChain, AutoGen, or custom agents. Authenticated tool calls; OpenAPI-discoverable.
Connect Zapier, Make, n8n, Workato. Outbound webhooks subscribe to events; inbound REST writes records. No native connector required.
GovMatrixIQ runs a remote MCP (Model Context Protocol) server, so your AI assistant can work directly against your live procurement data. Connect once with a secure sign-in — no password sharing, no data copied out — and let Claude search opportunities, manage your pipeline, and draft capture artifacts on your behalf. Every call stays scoped to your organization.
Find opportunities across SAM.gov, state & local (SLED), SBIR/STTR, Grants.gov, GSA Schedule, DLA, and cooperative vehicles — plus USASpending award history — from a single prompt.
Read, add, update, assign, flag, and archive pipeline items and tasks. Sync straight to your connected boards — Trello, Jira, Monday, Asana, and more.
Assess eligibility, extract evaluation factors and submission requirements, and generate capture briefs, compliance-matrix outlines, and proposal skeletons.
Pull your daily brief, BD events, competitor intel, teaming recommendations, and procurement briefings — and look up FAR/DFARS clauses in context.
Add GovMatrixIQ as a custom connector in Claude — or any MCP-compatible client — using the server URL below, then sign in with your GovMatrixIQ account.
Approve the connection with a secure OAuth sign-in. Your assistant gets access to your data only — never another tenant's.
Prefer keys? Mint a scoped MCP key under Settings → API keys — read-only or read/write — and revoke it any time.
Included on the Solo, Team, Agency, and Enterprise plans. Need help wiring it up? Email support@govmatrixiq.com.
GovMatrixIQ isn't in a public connector directory yet, so you add it once as a custom connector using the server address below. It stays connected until you remove it. Sign in with your GovMatrixIQ account (OAuth) — or, for clients without built-in sign-in, paste a scoped API key.
https://mcp.govmatrixiq.com/mcp
Authorization: Bearer header.
https://mcp.govmatrixiq.com/mcp and click Add.Add the server, then approve the OAuth sign-in on first use:
claude mcp add --transport http \ govmatrixiq https://mcp.govmatrixiq.com/mcp
For headless / CI use, skip OAuth and pass a key: --header "Authorization: Bearer gmiq_…"
Add to ~/.cursor/mcp.json (or .cursor/mcp.json in your project):
{
"mcpServers": {
"govmatrixiq": {
"url": "https://mcp.govmatrixiq.com/mcp",
"headers": { "Authorization": "Bearer gmiq_…" }
}
}
}
In any client that supports custom MCP connectors (e.g. ChatGPT developer mode / connectors), add a new connector with the URL https://mcp.govmatrixiq.com/mcp. Clients with built-in sign-in use OAuth; clients without it accept a Settings → API key sent as an Authorization: Bearer header.
Settings → Developer API → New key. Pick scope (read / write / admin). Copy the gmiq_… token — shown once.
Send your key as Authorization: Bearer gmiq_… on any /v1/… endpoint. All responses are tenant-scoped to your org via team_members.
Settings → Webhooks → Add endpoint. Pick events (pipeline.created, lead.created, etc). Every call is signed with HMAC-SHA256.
# List pipeline items curl "https://app.govmatrixiq.com/v1/pipeline?limit=20&stage=Pursuing" \ -H "Authorization: Bearer $GMIQ_KEY" # Create a new pipeline item curl "https://app.govmatrixiq.com/v1/pipeline" \ -X POST \ -H "Authorization: Bearer $GMIQ_KEY" \ -H "Content-Type: application/json" \ -d '{"title":"Cyber Modernization RFP","agency":"USAF","stage":"Identified","value":1800000,"due":"2026-08-15"}'
Full schema, parameters, and response codes are published at app.govmatrixiq.com/docs/api + the live spec at openapi.json.
| Method | Path | Summary |
|---|---|---|
| GET | /v1/me | Caller identity + scopes |
| GET | /v1/pipeline | List pipeline items (filterable by stage) |
| POST | /v1/pipeline | Create pipeline item |
| GET | /v1/pipeline/{id} | Get pipeline item by id |
| PATCH | /v1/pipeline/{id} | Update pipeline item |
| DELETE | /v1/pipeline/{id} | Archive pipeline item |
| GET | /v1/opportunities | List SAM.gov opportunities (filterable by NAICS) |
| GET | /v1/proposals | List parsed solicitations |
Rate limits: 60 req/min on read + write scopes, 200 req/min on admin. Per-key.
Subscribe to state changes in your org. Every payload is signed with HMAC-SHA256 using your endpoint's shared secret. Idempotent delivery, exponential retry on 5xx.
pipeline.created · new pipeline item addedpipeline.stage_changed · stage transitionpipeline.archived · item removedlead.created / lead.updated · CRM Lead synccontact.created / contact.updated · CRM Contact syncproposal.parsed · solicitation upload finishedEach request carries X-Gmiq-Signature: sha256=<hex> and X-Gmiq-Timestamp. Reject if delta > 5 min.
// Verify signature in Node const crypto = require("crypto"); function verify(req, secret) { const ts = req.headers["x-gmiq-timestamp"]; const sig = req.headers["x-gmiq-signature"]; const raw = ts + "." + req.rawBody; const expected = "sha256=" + crypto.createHmac("sha256", secret) .update(raw).digest("hex"); return crypto.timingSafeEqual( Buffer.from(sig), Buffer.from(expected) ); } // Example payload { "event": "pipeline.stage_changed", "org_id": "uuid", "timestamp": "2026-05-14T03:42:11Z", "data": { "id": "uuid", "title": "USAF Logistics Modernization", "from_stage": "Pursuing", "to_stage": "Proposal" } }
Zapier, Make, n8n, and Workato all speak HTTP + webhooks natively — your customers can build cross-app workflows without waiting on a native connector.
Use the Webhooks by Zapier trigger to receive GovMatrixIQ events. Use the OpenAPI integration to write back to /v1/pipeline.
HTTP module + Webhooks. Map webhook events to Slack, Notion, Airtable, HubSpot, or any of 1,800+ Make apps.
Self-hosted or cloud. HTTP Request + Webhook nodes connect GovMatrixIQ to anything in your stack — no SaaS lock-in.
Enterprise iPaaS with HTTP connector + custom webhook listener. Ideal for primes connecting to ERP / finance systems.
Curated recipe gallery coming soon. Email support@govmatrixiq.com if you'd like help wiring a specific integration.
Every request resolves through team_members; rows from other tenants are never returned. Postgres Row Level Security backs every read.
read · GETs only · write · POST/PATCH/DELETE on your data · admin · privileged + higher rate limit. Mint a key per integration; rotate without taking the others down.
60 req/min on read+write, 200 req/min on admin. Per-key. 429 response includes Retry-After.
Server-side LLM calls use no-training endpoints. Your data isn't used to train foundation models.
Free tier includes 60 req/min on read-scope keys. Upgrade to a paid plan for write + admin scopes.