GovInbox
REMOTE · MCP.GETGOVINBOX.COM
Federal contract opportunities for government contractors. Set-aside coverage is the deepest part.
Available components
Last scanned (5 hours ago)
Scores higher than 66% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
Recent critical change
Authorization (27 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (manage_watchlist). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 13220 tokens (~220/item across 60 items; 45 tools + 15 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage93
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 75% of tool parameters carry a description.Partial
- Structured output schemas are declared (82% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 45 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 4 Nov 26 +1
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 3 Nov 26 0
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 2 Nov 26 +1
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 1 Nov 26 0
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 31 Oct 26 +1
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- 30 Oct 26 0
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261022-fullscreen-contract → ui://govinbox/opportunities-v2.html?v=20261027-prompt-strip security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Tool “compare_notice_record_versions” rewrote its description, which is the text the model reads security
- Tool “get_notice_record” rewrote its description, which is the text the model reads security
- Tool “list_awards_by_period_end” rewrote its description, which is the text the model reads security
- Tool “list_reported_subawards” rewrote its description, which is the text the model reads security
- Tool “search_open_notices” rewrote its description, which is the text the model reads security
- Tool “show_govinbox” rewrote its description, which is the text the model reads security
- Tool “signin” rewrote its description, which is the text the model reads security
- 29 Oct 26 0
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-state-readiness → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261016-host-contracts → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-auto-panel → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261019-work-location → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261017-typed-watchlist → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-csp-commerce → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-href-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-public-preview → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-sam-fix → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-preview-refine → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
- Resource “govinbox-opportunities-widget-compat” now points somewhere else: ui://govinbox/opportunities-v2.html?v=20261015-bridge-init → ui://govinbox/opportunities-v2.html?v=20261016-free-visual-preview security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.getgovinbox.com/plugin
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.getgovinbox.com | CN=YE1,O=Let's Encrypt,C=US | 20 Sept 2026 | 19 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 5d4e2b627b84f68e4880d6938c5166e892d |
| SANs: mcp.getgovinbox.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.getgovinbox.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| getgovinbox.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.getgovinbox.com/plugin | Verified | 200 | |
| http (plaintext) | http://mcp.getgovinbox.com/plugin | HTTPS enforced | 308 | https://mcp.getgovinbox.com/plugin |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
search_opportunities Search opportunities ~700
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Search open federal contract opportunities from SAM.gov notices, presented as cards. Uses the same stored-notice engine as search_open_notices - one call, one search - with results sorted by posted date or deadline, not by a match score. Each card shows deadlines, the filter that matched it (e.g. the NAICS or set-aside you passed), and source links. Present as information only; Map industry or trade words in the request to NAICS prefixes and pass them as naics (construction -> 23; engineering -> 5413; IT services -> 5415; janitorial/housekeeping -> 5617; landscaping -> 5617; security guards -> 5616); a free-text keyword is not a substitute for NAICS. For 'veteran-owned' pass set_aside ['vosb','sdvosb'] (both); for 'service-disabled veteran-owned' pass ['sdvosb'] only. not a bid recommendation. Cite the source link when available; legacy DIBBS records without verified deep links retain the source name and record ID. For a known current or previous solicitation/reference number, use solicitation_number; for a SAM notice ID use notice_id. These exact lookups include stored closed/archived records, do not inherit the browsing set-aside default, and do not search award contract PIIDs. Stored records are not a complete live-source or version-history search. Follow-ups within 30 minutes after a search ride free (up to 30 per search); otherwise one accepted call counts as one use.
| Name | Type | Req | Description |
|---|---|---|---|
| agency | – | – | Literal substring of the recorded agency path, including its named offices. This is separate from performance geography; clarify ambiguous abbreviations before choosing constraints. |
| cursor | – | – | Returned continuation cursor. Keep the same search filters; changed matching records require restarting the search. |
| geography | – | – | State where the work is performed, e.g. TX for Texas; matches recorded structured place of performance, not buyer address or title text. Records with unknown work state are excluded. |
| keywords | – | – | Literal text in stored titles, briefs, current-version fetched scope, inline source descriptions, solicitation numbers and notice IDs. URL-only and known stale descriptions are excluded; filtered bef… |
| limit | integer | – | Maximum 25 opportunity leads; minimum 1; default 10. Stored versions remain grouped. |
| match_mode | string | – | – |
| naics | – | – | NAICS codes, 2-6 digits each |
| notice_id | – | – | Exact SAM notice ID, a separate identifier from solicitation numbers and award PIIDs. Includes stored closed notices. Omit browsing filters. |
| set_aside | – | – | Recorded notice restriction: vosb (veteran-owned), sdvosb (service-disabled veteran-owned), 8a, hubzone, wosb, edwosb, small. VOSB and SDVOSB are distinct; do not infer a firm's credentials. Omit or… |
| solicitation_number | – | – | Exact current/previous solicitation or reference number; case, spaces and hyphens normalized. Includes stored closed notices. Omit browsing filters. Not an award PIID. |
| Name | Type | Req | Description |
|---|---|---|---|
| analytical_disclaimer | string | – | – |
| applied_filters | object | – | – |
| count | integer | – | – |
| coverage | object | – | – |
| coverage_note | string | – | – |
| next_cursor | – | – | Opaque continuation cursor. Follow coverage.continuation using its named tool and the same search filters. If the tool reports changed matching records, restart the search without a cursor. Results c… |
| opportunities | array | – | – |
| quota | object | – | – |
| quota_exhausted | boolean | – | – |
| related_records | array | – | – |
| solicitation_groups | array | – | – |
No examples provided.
search_ota_awards Search DoD Other Transaction Authority awards ~296
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Department of Defense Other Transaction Authority (OTA) awards, prototype, research, and production agreements that bypass the FAR and never appear in USAspending, sourced from FPDS. Filter by keyword, agency, vendor, or agreement type (research, prototype, production). CRITICAL: FPDS typically names the consortium MANAGEMENT organization as awardee, not the actual performing company. GAO has confirmed DoD cannot identify the real performers from this data. Treat a named vendor as likely the consortium manager - actual performer unknown. Obligated dollars are the action delta, not the ceiling value. DoD reporting lags about 90 days. Present as information only; verify every fact against the official FPDS record before acting. Follow-ups within 30 minutes after a search ride free (up to 30 per search); otherwise one accepted call counts as one use, regardless of how many records are returned. Every record carries a direct source link (or source name and record ID) so you can verify and cite the underlying record.
| Name | Type | Req | Description |
|---|---|---|---|
| agency | – | – | Awarding agency substring filter |
| agreement_type | – | – | Agreement type: research, prototype, or production |
| limit | integer | – | – |
| query | – | – | Keyword filter over description, PIID, and vendor |
| vendor | – | – | Awardee name substring filter |
| Name | Type | Req | Description |
|---|---|---|---|
| analytical_disclaimer | string | yes | – |
| awards | array | yes | – |
| count | integer | yes | – |
| coverage | – | yes | – |
| data_caveat | string | – | Data quality caveat |
| quota | – | yes | – |
No examples provided.
search_sole_source Search sole-source Justification & Approval notices ~390
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Justification & Approval (J&A) notices from SAM.gov, the documents agencies publish to justify non-competitive awards. Under FAR 6.305, most J&As post 14 days AFTER award (30 days for urgency) - brand-name justifications may post with the solicitation instead (FAR 6.305(c)) - so these are usually post-decision records, not pipeline leads - the protest clock may have already run. Shows who received sole-source work, the FAR authority cited (e.g. 6.302-1 only one source, 6.302-2 urgency), the contract value, period of performance, and whether it is a bridge contract. Filter by keyword, agency, vendor name, NAICS code, or FAR authority. Vendor names and values are parsed from notice text and may be incomplete. Empty results do not mean competitive - below-threshold and exempt actions never post. Present as information only; verify every fact against the official J&A on SAM.gov before acting. One search counts as one use, regardless of how many records are returned. Every record carries a direct source link (or source name and record ID) so you can verify and cite the underlying record.
| Name | Type | Req | Description |
|---|---|---|---|
| agency | – | – | Agency substring filter, e.g. 'DEFENSE' or 'VA' |
| authority | – | – | FAR authority filter, e.g. '6.302-1' or '8.405-6' |
| bridge_only | boolean | – | When true, return only bridge contracts/extensions |
| limit | integer | – | – |
| naics | – | – | NAICS code filter, e.g. '541511' |
| query | – | – | Keyword filter over title, description, and solicitation number |
| vendor | – | – | Vendor/incumbent name substring filter |
| Name | Type | Req | Description |
|---|---|---|---|
| analytical_disclaimer | string | yes | – |
| count | integer | yes | – |
| coverage | – | yes | – |
| data_caveat | string | – | Data quality caveat |
| quota | – | yes | – |
| records | array | yes | – |
No examples provided.
search_subawards Search reported subawards ~239
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Individual reported first-tier subaward records: which subcontractor worked under which prime, for how much. Filter by prime contractor name. Amounts are prime-reported subaward amounts, often incomplete or duplicated; they are not cash paid and not obligations. Not a partnership suggestion. Present as information only; do not frame results as a bid/no-bid recommendation, eligibility determination, or partnership recommendation. One search counts as one use, regardless of how many records are returned. Every record carries a direct source link (or source name and record ID) so you can verify and cite the underlying record.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | – | – | – |
| date_from | – | – | Recorded subaward action date |
| date_to | – | – | – |
| keyword | – | – | – |
| limit | integer | – | Maximum 50 records; minimum 1; default 20. |
| naics | – | – | NAICS prefixes, 2-6 digits |
| piid | – | – | – |
| prime | – | – | – |
| sort | string | – | – |
| subaward_number | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| analytical_disclaimer | string | yes | – |
| applied_filters | object | – | – |
| count | integer | yes | – |
| coverage | – | yes | – |
| data_caveat | string | – | Data quality caveat |
| next_cursor | – | – | – |
| quota | – | yes | – |
| subawards | array | yes | – |
| total_count | – | – | – |
No examples provided.
search_ustda Search USTDA business opportunities ~204
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. US Trade and Development Agency business opportunities, feasibility studies, pilot projects, and technical assistance in developing countries. USTDA grants go to foreign project sponsors, who select US firms to perform the work. Filter by keyword, country, or sector. Present as information only; verify every fact against the USTDA opportunity page before acting. Follow-ups within 30 minutes after a search ride free (up to 30 per search); otherwise one accepted call counts as one use, regardless of how many records are returned. Every record carries a direct source link (or source name and record ID) so you can verify and cite the underlying record.
| Name | Type | Req | Description |
|---|---|---|---|
| country | – | – | Project country substring filter |
| limit | integer | – | – |
| query | – | – | Keyword filter over title and summary |
| sector | – | – | Sector substring filter, e.g. energy, telecom |
| Name | Type | Req | Description |
|---|---|---|---|
| analytical_disclaimer | string | yes | – |
| count | integer | yes | – |
| coverage | – | yes | – |
| data_caveat | string | – | Data quality caveat |
| opportunities | array | yes | – |
| quota | – | yes | – |
No examples provided.
show_govinbox Show the GovInbox dashboard ~143
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Open the visual GovInbox preview before searching, including when a search allowance is exhausted. No account is required to see this preview. It runs no search, applies no filters, uses no search allowance and returns no matched notices. It reads only public stored notice facts for up to three unfiltered examples first recorded today or yesterday in America/Los_Angeles, with their actual recording dates and source links. Older or expired examples are omitted. These are recorded data, not a live verification of SAM.gov. Use search_opportunities for actual filtered results.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| applied_filters | object | – | – |
| count | integer | – | – |
| opportunities | array | – | – |
| preview_as_of | – | – | – |
| preview_cached | boolean | – | – |
| preview_date | – | – | – |
| preview_examples | array | – | – |
| preview_freshness | string | – | – |
| preview_notice | string | – | – |
| preview_only | boolean | – | – |
| preview_source | string | – | – |
| preview_timezone | string | – | – |
No examples provided.
signin Sign in to GovInbox ~69
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Start the GovInbox sign-in flow to connect your GovInbox account. Signed-in users get 20 searches per month instead of the guest limit. This sign-in action does not consume quota.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
track_recompete Track recompetes ~118
Not affiliated with the U.S. government, GSA, or SAM.gov. Not a U.S. government service. Find contracts nearing end of performance and likely recompete candidates. Dates are estimates from recorded periods of performance. Not a prediction that a solicitation will happen. Present as information only. Follow-ups within 30 minutes after a search ride free (up to 30 per search); otherwise one accepted call counts as one use.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| naics | – | – | NAICS codes to scan for recompetes |
No output schema declared.
No examples provided.
How do I install the GovInbox MCP server?
GovInbox is a hosted endpoint at https://mcp.getgovinbox.com/plugin, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.getgovinbox.com
claude mcp add --transport http com-getgovinbox-govinbox 'https://mcp.getgovinbox.com/plugin'
What is the GovInbox MCP server?
GovInbox is an MCP server listed in the public MCP registry as com.getgovinbox/govinbox. Federal contract opportunities for government contractors. Set-aside coverage is the deepest part. This page covers its hosted endpoint (https://mcp.getgovinbox.com/plugin).
Is the GovInbox MCP server safe to use?
GovInbox scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the GovInbox MCP server expose?
GovInbox exposes 45 tools: search_open_notices, list_awards_by_period_end, get_notice_record, compare_notice_record_versions, list_reported_subawards, and 40 more. Their descriptions and schemas cost roughly 12,130 tokens of context every time the server is loaded.
Does the GovInbox MCP server require authentication?
No. We connected to GovInbox without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the GovInbox MCP server still maintained?
GovInbox is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.