Developers

Build on the B2G platform contractors already use.

Remote MCP server for Claude and any AI assistant, public REST API, HMAC-signed outbound webhooks, OpenAPI 3.0 spec. Stream pipeline items, SAM.gov opportunities, and parsed solicitations into any system — your CRM, BI tool, custom workflow, AI agent, or iPaaS canvas.

OpenAPI 3.0 HMAC-SHA256 webhooks Tenant-scoped keys
# 1. Create an API key in Settings → Developer API
# 2. Call any /v1/ endpoint with Bearer auth
curl https://app.govmatrixiq.com/v1/pipeline \
  -H "Authorization: Bearer gmiq_xxxxxxxxxxxxxxxx"

# Response: paginated org-scoped pipeline items
{
  "items": [
    {
      "id": "uuid",
      "title": "USAF Logistics Modernization",
      "agency": "Department of the Air Force",
      "stage": "Pursuing",
      "value": 2400000
    }
  ],
  "total": 87,
  "limit": 20,
  "offset": 0
}
What you can build

From CRM bridges to BI dashboards.

Six endpoints cover 80% of integration needs. The rest comes via outbound webhooks fired on every state change in your org.

CRM bridges

Sync pipeline + leads + contacts into Pipedrive, Zoho, Dynamics 365, Unanet — anything that speaks REST or routes through Zapier/Make.

BI & reporting

Pipe pipeline + opportunity rows into Looker, Tableau, Power BI, Hex, or Snowflake via scheduled REST pulls.

Workflow automations

Trigger Slack alerts on stage transitions, post deadlines to Asana, fan-out compliance checklists. Receive webhooks; respond in your stack.

Custom portals

Build internal dashboards or partner-facing capture tools. Read-only or read/write — scope-gated keys keep the blast radius small.

AI agents & LLM apps

Feed your team's pipeline + parsed RFPs to LangChain, AutoGen, or custom agents. Authenticated tool calls; OpenAPI-discoverable.

iPaaS recipes

Connect Zapier, Make, n8n, Workato. Outbound webhooks subscribe to events; inbound REST writes records. No native connector required.

Model Context Protocol New

Bring GovMatrixIQ into Claude — and any MCP client.

GovMatrixIQ runs a remote MCP (Model Context Protocol) server, so your AI assistant can work directly against your live procurement data. Connect once with a secure sign-in — no password sharing, no data copied out — and let Claude search opportunities, manage your pipeline, and draft capture artifacts on your behalf. Every call stays scoped to your organization.

Search & discovery

Find opportunities across SAM.gov, state & local (SLED), SBIR/STTR, Grants.gov, GSA Schedule, DLA, and cooperative vehicles — plus USASpending award history — from a single prompt.

Pipeline & tasks

Read, add, update, assign, flag, and archive pipeline items and tasks. Sync straight to your connected boards — Trello, Jira, Monday, Asana, and more.

Capture & proposal drafting

Assess eligibility, extract evaluation factors and submission requirements, and generate capture briefs, compliance-matrix outlines, and proposal skeletons.

Intelligence & briefings

Pull your daily brief, BD events, competitor intel, teaming recommendations, and procurement briefings — and look up FAR/DFARS clauses in context.

Connect in a minute

  1. 1

    Add GovMatrixIQ as a custom connector in Claude — or any MCP-compatible client — using the server URL below, then sign in with your GovMatrixIQ account.

  2. 2

    Approve the connection with a secure OAuth sign-in. Your assistant gets access to your data only — never another tenant's.

  3. 3

    Prefer keys? Mint a scoped MCP key under Settings → API keys — read-only or read/write — and revoke it any time.

Secure OAuth sign-in Org-scoped data Scoped & revocable Any MCP client

Included on the Solo, Team, Agency, and Enterprise plans. Need help wiring it up? Email support@govmatrixiq.com.

Add the connector in your AI client

GovMatrixIQ isn't in a public connector directory yet, so you add it once as a custom connector using the server address below. It stays connected until you remove it. Sign in with your GovMatrixIQ account (OAuth) — or, for clients without built-in sign-in, paste a scoped API key.

MCP server URL
https://mcp.govmatrixiq.com/mcp
Need a key instead? Generate a read or read/write key under Settings → API keys and send it as an Authorization: Bearer header.

Claude (web & desktop)

  1. Open Settings → Connectors.
  2. Click Add custom connector.
  3. Paste https://mcp.govmatrixiq.com/mcp and click Add.
  4. Click Connect and sign in with your GovMatrixIQ account.

Claude Code (CLI)

Add the server, then approve the OAuth sign-in on first use:

claude mcp add --transport http \
  govmatrixiq https://mcp.govmatrixiq.com/mcp

For headless / CI use, skip OAuth and pass a key: --header "Authorization: Bearer gmiq_…"

Cursor

Add to ~/.cursor/mcp.json (or .cursor/mcp.json in your project):

{
  "mcpServers": {
    "govmatrixiq": {
      "url": "https://mcp.govmatrixiq.com/mcp",
      "headers": { "Authorization": "Bearer gmiq_…" }
    }
  }
}

ChatGPT & other MCP clients

In any client that supports custom MCP connectors (e.g. ChatGPT developer mode / connectors), add a new connector with the URL https://mcp.govmatrixiq.com/mcp. Clients with built-in sign-in use OAuth; clients without it accept a Settings → API key sent as an Authorization: Bearer header.

Quickstart

5 minutes from signup to first call.

1

Create an API key

Settings → Developer API → New key. Pick scope (read / write / admin). Copy the gmiq_… token — shown once.

2

Make a request

Send your key as Authorization: Bearer gmiq_… on any /v1/… endpoint. All responses are tenant-scoped to your org via team_members.

3

Subscribe to webhooks

Settings → Webhooks → Add endpoint. Pick events (pipeline.created, lead.created, etc). Every call is signed with HMAC-SHA256.

Code samples

Pick your language.

# List pipeline items
curl "https://app.govmatrixiq.com/v1/pipeline?limit=20&stage=Pursuing" \
  -H "Authorization: Bearer $GMIQ_KEY"

# Create a new pipeline item
curl "https://app.govmatrixiq.com/v1/pipeline" \
  -X POST \
  -H "Authorization: Bearer $GMIQ_KEY" \
  -H "Content-Type: application/json" \
  -d '{"title":"Cyber Modernization RFP","agency":"USAF","stage":"Identified","value":1800000,"due":"2026-08-15"}'
Endpoints

Six endpoints, OpenAPI 3.0.

Full schema, parameters, and response codes are published at app.govmatrixiq.com/docs/api + the live spec at openapi.json.

Method Path Summary
GET/v1/meCaller identity + scopes
GET/v1/pipelineList pipeline items (filterable by stage)
POST/v1/pipelineCreate pipeline item
GET/v1/pipeline/{id}Get pipeline item by id
PATCH/v1/pipeline/{id}Update pipeline item
DELETE/v1/pipeline/{id}Archive pipeline item
GET/v1/opportunitiesList SAM.gov opportunities (filterable by NAICS)
GET/v1/proposalsList parsed solicitations

Rate limits: 60 req/min on read + write scopes, 200 req/min on admin. Per-key.

Outbound webhooks

Real-time events, HMAC-signed.

Subscribe to state changes in your org. Every payload is signed with HMAC-SHA256 using your endpoint's shared secret. Idempotent delivery, exponential retry on 5xx.

Events
  • pipeline.created · new pipeline item added
  • pipeline.stage_changed · stage transition
  • pipeline.archived · item removed
  • lead.created / lead.updated · CRM Lead sync
  • contact.created / contact.updated · CRM Contact sync
  • proposal.parsed · solicitation upload finished
Verification

Each request carries X-Gmiq-Signature: sha256=<hex> and X-Gmiq-Timestamp. Reject if delta > 5 min.

// Verify signature in Node
const crypto = require("crypto");

function verify(req, secret) {
  const ts = req.headers["x-gmiq-timestamp"];
  const sig = req.headers["x-gmiq-signature"];
  const raw = ts + "." + req.rawBody;
  const expected = "sha256=" +
    crypto.createHmac("sha256", secret)
      .update(raw).digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(sig), Buffer.from(expected)
  );
}

// Example payload
{
  "event": "pipeline.stage_changed",
  "org_id": "uuid",
  "timestamp": "2026-05-14T03:42:11Z",
  "data": {
    "id": "uuid",
    "title": "USAF Logistics Modernization",
    "from_stage": "Pursuing",
    "to_stage": "Proposal"
  }
}
No-code integrations

Plug into the iPaaS canvas you already use.

Zapier, Make, n8n, and Workato all speak HTTP + webhooks natively — your customers can build cross-app workflows without waiting on a native connector.

Zapier

Use the Webhooks by Zapier trigger to receive GovMatrixIQ events. Use the OpenAPI integration to write back to /v1/pipeline.

Make

HTTP module + Webhooks. Map webhook events to Slack, Notion, Airtable, HubSpot, or any of 1,800+ Make apps.

n8n

Self-hosted or cloud. HTTP Request + Webhook nodes connect GovMatrixIQ to anything in your stack — no SaaS lock-in.

Workato

Enterprise iPaaS with HTTP connector + custom webhook listener. Ideal for primes connecting to ERP / finance systems.

Curated recipe gallery coming soon. Email support@govmatrixiq.com if you'd like help wiring a specific integration.

Security & isolation

Tenant-scoped, scope-gated, rate-limited.

Tenant isolation

Every request resolves through team_members; rows from other tenants are never returned. Postgres Row Level Security backs every read.

Scope-gated keys

read · GETs only · write · POST/PATCH/DELETE on your data · admin · privileged + higher rate limit. Mint a key per integration; rotate without taking the others down.

Rate limits

60 req/min on read+write, 200 req/min on admin. Per-key. 429 response includes Retry-After.

No data retention by LLM providers

Server-side LLM calls use no-training endpoints. Your data isn't used to train foundation models.

Ship your first integration today.

Free tier includes 60 req/min on read-scope keys. Upgrade to a paid plan for write + admin scopes.