{
  "name": "@cliwant/mcp-sam-gov",
  "version": "1.14.0",
  "mcpName": "io.github.cliwant/mcp-sam-gov",
  "description": "Most comprehensive keyless-first MCP server for US federal + state/local (SLED) contracting + spending + regulation: SAM.gov, USAspending, Federal Register, eCFR, Grants.gov, plus SLED procurement bids (OpenGov, Bonfire, ArcGIS, Socrata 53 hosts). 152 tools (147 need no API key), plug into Claude Desktop / Claude Code / Codex CLI / Cursor / Continue / Gemini CLI.",
  "keywords": [
    "mcp",
    "model-context-protocol",
    "sam.gov",
    "usaspending",
    "federal-contracting",
    "govcon",
    "claude-desktop",
    "claude-code",
    "codex",
    "cursor",
    "continue",
    "gemini-cli",
    "ai-tools",
    "sled",
    "state-local",
    "procurement",
    "opengov",
    "bonfire",
    "arcgis",
    "socrata",
    "bid-opportunities"
  ],
  "license": "MIT",
  "author": "Cliwant contributors",
  "homepage": "https://github.com/cliwant/mcp-sam-gov",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/cliwant/mcp-sam-gov.git"
  },
  "bugs": {
    "url": "https://github.com/cliwant/mcp-sam-gov/issues"
  },
  "publishConfig": {
    "access": "public"
  },
  "type": "module",
  "main": "./dist/server.js",
  "types": "./dist/server.d.ts",
  "bin": {
    "mcp-sam-gov": "./dist/server.js"
  },
  "exports": {
    ".": {
      "import": "./dist/server.js",
      "types": "./dist/server.d.ts"
    },
    "./sam-gov": {
      "import": "./dist/sam-gov/index.js",
      "types": "./dist/sam-gov/index.d.ts"
    },
    "./usaspending": {
      "import": "./dist/usaspending.js",
      "types": "./dist/usaspending.d.ts"
    },
    "./federal-register": {
      "import": "./dist/federal-register.js",
      "types": "./dist/federal-register.d.ts"
    },
    "./ecfr": {
      "import": "./dist/ecfr.js",
      "types": "./dist/ecfr.d.ts"
    },
    "./grants": {
      "import": "./dist/grants.js",
      "types": "./dist/grants.d.ts"
    }
  },
  "files": [
    "dist",
    "src",
    "README.md",
    "README.ko.md",
    "README.ja.md",
    "LICENSE"
  ],
  "scripts": {
    "build": "tsc",
    "start": "node dist/server.js",
    "dev": "tsx src/server.ts",
    "smoke": "node smoke-test.mjs",
    "test:edge": "node edge-case-test.mjs",
    "test:fault": "node fault-injection-test.mjs",
    "test:snapshot": "node registry-snapshot-test.mjs",
    "gen:keys": "node scripts/gen-api-keys-md.mjs",
    "lint:invariants": "node lint-invariants.mjs",
    "coverage": "c8 node fault-injection-test.mjs",
    "perf": "node --expose-gc perf-test.mjs",
    "gate": "npm run lint:invariants && npm run build && npm run test:fault && npm run test:edge",
    "prepublishOnly": "npm run build"
  },
  "engines": {
    "node": ">=20"
  },
  "dependencies": {
    "@modelcontextprotocol/sdk": "^1.20.0",
    "unpdf": "^1.6.2",
    "zod": "^3.24.0"
  },
  "//overrides": "Patch transitive advisories in @modelcontextprotocol/sdk's bundled HTTP/SSE transport (express/hono/ajv). This server uses ONLY the stdio transport, so these are not reachable here — but we patch them (all within-major, no breaking bump) for supply-chain hygiene + a clean `npm audit`. Revisit when the SDK bumps them upstream (we track the latest SDK).",
  "overrides": {
    "hono": "4.12.27",
    "fast-uri": "3.1.3",
    "qs": "6.15.3",
    "ip-address": "10.2.0"
  },
  "devDependencies": {
    "@anthropic-ai/mcpb": "^2.1.2",
    "@types/node": "^20.0.0",
    "c8": "^11.0.0",
    "tsx": "^4.20.0",
    "typescript": "^5.5.0"
  }
}