Mcp Grantiq — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Grantiq (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A paid MCP server that gives AI agents instant, structured access to every open US federal grant and contract opportunity. Backed by Grants.gov + SAM.gov, with 24-hour SQLite caching, per-key daily limits, and a Stripe-friendly upgrade hook.
https://mcp.grantiq.us/mcp/
Title: GrantIQ MCP — US Federal Grants & Contracts for AI Agents
Subtitle: Search, match, and monitor every open SAM.gov and Grants.gov opportunity from any LLM, in one tool call.
GrantIQ MCP turns the messy world of US government funding into a clean, agent-ready API. Eight typed tools cover everything from broad keyword search and NAICS-coded contract discovery to deadline radar and historical award lookups. Responses are normalized across both data sources, returned as plain JSON, and cached for 24 hours so repeat queries don't burn rate limit on the upstream agencies.
Built for procurement copilots, grant-finder agents, and B2G sales tools, GrantIQ MCP ships with a free tier (50 calls/day) that any developer can drop into Claude or Cursor in 15 seconds. Upgrade to Pro for $19/mo for unlimited calls, or pay $0.02 per call for bursty workloads — billing flips a key from free to pro via a single webhook, with no app rewrites required.
| Tier | Price | Limit |
|---|---|---|
| Free | $0 | 50 calls / day / key |
| Pro | $19 / month | Unlimited |
| Pay-as-you-go | $0.02 / call | Unlimited |
claude mcp add grantiq-mcp --url https://mcp.grantiq.us/mcp/Then add the API key Claude should use:
claude mcp env grantiq-mcp X-API-Key=your-api-keyThere is no shared public key. Mint one with the admin endpoint below (free tier is 50 calls/day) and store it in the client config or an environment variable.
| Tool | Args | Returns |
|---|---|---|
search_grants | keyword, agency, amount_min, amount_max, status, limit | List of matching grants |
get_grant_details | opportunity_id | Full grant object |
search_contracts | keyword, naics_code, agency, set_aside, limit | List of SAM contracts |
get_contract_details | notice_id | Full contract object |
match_opportunities | org_description, org_type, focus_areas | Top 10 matched opps (grants + contracts) |
get_agencies | type (grants / contracts / both) | Agencies with open opps, ranked by volume |
get_deadlines | days_ahead | Opportunities closing within N days |
search_awards | recipient_name, agency, year | Past SAM award history |
Every tool returns either:
{ "success": true, "cached": false, "data": { ... } }or, on failure:
{ "success": false, "error": "..." }When the daily limit is hit, the HTTP layer returns 429 with body:
{ "error": "Limit reached. Upgrade at mcpize.com/grantiq-mcp" }The MCP endpoint speaks the JSON-RPC streamable-HTTP protocol and is best used through an MCP client. For convenience, every tool also has a REST mirror at /tools/<tool>.
# Search grants
curl -s https://mcp.grantiq.us/tools/search_grants \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"keyword":"renewable energy","limit":5}'
# Get grant details
curl -s https://mcp.grantiq.us/tools/get_grant_details \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"opportunity_id":"345678"}'
# Search SAM.gov contracts (cyber, small-business set-aside)
curl -s https://mcp.grantiq.us/tools/search_contracts \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"keyword":"cybersecurity","set_aside":"SBA","limit":5}'
# Get contract details
curl -s https://mcp.grantiq.us/tools/get_contract_details \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"notice_id":"abc123"}'
# Match opportunities to an org profile
curl -s https://mcp.grantiq.us/tools/match_opportunities \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"org_description":"Battery storage R&D startup","org_type":"for-profit","focus_areas":["energy","battery","storage"]}'
# Top agencies right now
curl -s https://mcp.grantiq.us/tools/get_agencies \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"type":"both"}'
# Deadlines in the next 14 days
curl -s https://mcp.grantiq.us/tools/get_deadlines \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"days_ahead":14}'
# Past award history
curl -s https://mcp.grantiq.us/tools/search_awards \
-H 'Content-Type: application/json' \
-H 'X-API-Key: your-api-key' \
-d '{"recipient_name":"Acme Corp","year":2025}'Mint a fresh key (free or pro):
curl -s https://mcp.grantiq.us/admin/keys \
-H 'X-Admin-Token: $GRANTIQ_ADMIN_TOKEN' \
-H 'Content-Type: application/json' \
-d '{"tier":"free","daily_limit":50}'Promote a free key to pro (called from the Stripe checkout success webhook):
curl -s https://mcp.grantiq.us/billing/upgrade \
-H 'X-Admin-Token: $GRANTIQ_ADMIN_TOKEN' \
-H 'Content-Type: application/json' \
-d '{"key":"grantiq_xxxxx"}'python -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
# Replace the placeholders, then export them. The process refuses to start
# until GRANTIQ_ADMIN_TOKEN is a real value (not the example placeholder).
set -a && source .env && set +a
python server.py # http://localhost:8000
pytest -v # 31 tests, hermetic with respx mocksThe repo includes nixpacks.toml. After railway init, just railway up. The start command is python server.py (not uvicorn ...) because Railway exec's [start].cmd without a shell — server.py reads $PORT via os.getenv and starts uvicorn programmatically.
Set these on the Railway service:
SAM_API_KEY — your SAM.gov key (contract tools fail closed without it)GRANTIQ_ADMIN_TOKEN — long random string, required at startupGRANTIQ_DB_PATH — /data/grantiq.db if you mount a Volume (recommended so cache + keys survive deploys)A ready-to-run deploy.sh is in this directory.
ptype=a (Award Notice). For deeper award analytics (CFDA-level totals, recipient rollups), USAspending.gov is more appropriate and would be a v2 add./admin/keys to mint a key that bypasses cache (not yet exposed — see TODO)./billing/upgrade). The MCP server doesn't host the checkout page itself — that lives on the marketing site.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.