{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:29:21.304Z","url":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending.md","server":{"slug":"pipeworx-io-usaspending","name":"Usaspending","registryName":"io.github.pipeworx-io/usaspending","description":"USAspending MCP — Federal spending data from USAspending.gov API","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-usaspending","type":"npm","identifier":"@pipeworx/mcp-usaspending","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending","version":"0.2.0","transport":"stdio","scoredAt":"2026-11-05T01:00:03.074Z"},"score":{"total":79,"tier":"medium","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":79},{"date":"2026-11-04","total":79},{"date":"2026-11-03","total":79},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-usaspending).","Clear OSI-approved license (MIT).","Actively maintained (last published 6 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-usaspending"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"6"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1964 tokens (~280/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"280","items":"7","tools":"7","tokens":"1964","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"usaspending-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/usaspending/mcp","withdrawn":false,"score":63,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-usaspending/usaspending-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-usaspending/usaspending-mcp.md"},{"slug":"pipeworx-mcp-usaspending","type":"npm","identifier":"@pipeworx/mcp-usaspending","withdrawn":false,"score":79,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-usaspending"},{"label":"Version","value":"0.2.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"usa_spending_by_agency","title":null,"description":"Break down US federal contract spending by agency for a given fiscal year (default: current year) and optional quarter (1-4). Returns agency names, abbreviations, and dollar amounts from USAspending.gov.","inputs":[{"name":"fiscal_year","type":"string","required":false,"description":"Four-digit fiscal year (e.g., \"2025\"). Defaults to current year."},{"name":"quarter","type":"number","required":false,"description":"Fiscal quarter (1-4). Omit for full year."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":98},{"name":"usa_award_search","title":null,"description":"Search US federal PROCUREMENT CONTRACTS / government contract awards for goods and services. Use recipient_name for \"contracts won by Lockheed Martin\"; keywords searches award descriptions/topics, not contractor identity. Dates are optional and default to the last 12 months for \"recent\" questions. Dates select awards ACTIVE in the window (not signed in it) and award_amount is the award's LIFETIME obligation, so do not sum it as spending for the period. Results are paged: 100 per page max — pass `page` (and read `page_metadata.has_next`) to reach the rest. Returns recipient, award amount, outlays (with an outlays_reported flag, since DoD awards usually report none), dates, and contract type. Umbrella contracts (IDVs — CRS-2, NASA Launch Services II, CCtCap) are a SEPARATE result set in `idvs`, not in `awards`: read both, and `idv_status` says which you got. IDV and child-order amounts are disjoint, so `totals.combined_amount` is the correct total.","inputs":[{"name":"agency","type":"string","required":false,"description":"Awarding agency — full toptier name (\"Department of Defense\") or the common abbreviation (DOD, DHS, VA, HHS, DOE, NASA, GSA, USDA, EPA…), which is expanded for you."},{"name":"end_date","type":"string","required":false,"description":"End date in YYYY-MM-DD format"},{"name":"include_idvs","type":"boolean","required":false,"description":"Include umbrella contracts (indefinite delivery vehicles) as a separate `idvs` array. Default true. Leave it on: these are often a recipient's largest awards, and excluding them understates a total s…"},{"name":"keywords","type":"array","required":false,"description":"Search keywords (e.g., [\"cybersecurity\", \"cloud\"] or [\"goods\", \"services\"])"},{"name":"limit","type":"number","required":false,"description":"Number of results per page (1-100, default 10)"},{"name":"naics","type":"string","required":false,"description":"NAICS code to filter by (e.g., \"541512\")"},{"name":"page","type":"number","required":false,"description":"1-based page number (default 1). total_results can exceed limit; page through with this and read page_metadata.has_next / total_pages to reach every row. The `idvs` array is served on page 1 only."},{"name":"recipient_name","type":"string","required":false,"description":"Contractor/recipient name (e.g., \"Lockheed Martin\"). Use for awards won by a company; do not put company names in keywords. Matched as a SUBSTRING of the registered legal name, so a brand name can mi…"},{"name":"set_aside","type":"string","required":false,"description":"Small-business set-aside filter. Accepts a family name (\"HUBZone\", \"8(a)\", \"WOSB\", \"EDWOSB\", \"SDVOSB\", \"Veteran\", \"Small business\", \"Indian\"), a FAR code (\"HZC\", \"8AN\", \"SDVOSBC\"), or the literal USA…"},{"name":"start_date","type":"string","required":false,"description":"Start date in YYYY-MM-DD format"},{"name":"state","type":"string","required":false,"description":"Place-of-performance US state, 2-letter code (e.g., \"MD\", \"TX\"). Filters to contracts performed in that state."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":778},{"name":"usa_spending_by_category","title":null,"description":"Analyze federal spending by industry, product/service, recipient, or agency. Returns spending totals per category. Use for market research and identifying government contracting opportunities.","inputs":[{"name":"agency","type":"string","required":false,"description":"Optional awarding agency name filter"},{"name":"category","type":"string","required":true,"description":"Category to group by: naics, psc, recipient, awarding_agency, awarding_subagency"},{"name":"end_date","type":"string","required":true,"description":"End date in YYYY-MM-DD format"},{"name":"keywords","type":"array","required":false,"description":"Optional keywords to filter spending"},{"name":"limit","type":"number","required":false,"description":"Number of results (1-100, default 10)"},{"name":"start_date","type":"string","required":true,"description":"Start date in YYYY-MM-DD format"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":140},{"name":"usa_recipient_profile","title":null,"description":"Answer \"what federal contracts did [company] win recently?\" and get a contractor's federal contract awards. Dates are optional and default to the last 12 months; the response always states the window used.","inputs":[{"name":"end_date","type":"string","required":false,"description":"End date in YYYY-MM-DD format"},{"name":"limit","type":"number","required":false,"description":"Number of results (1-100, default 10)"},{"name":"recipient_name","type":"string","required":true,"description":"Recipient/contractor name to search for (e.g., \"Lockheed Martin\"). Matched as a substring of the registered legal name; a known brand name that matches nothing is retried under its legal name (`recip…"},{"name":"start_date","type":"string","required":false,"description":"Start date in YYYY-MM-DD format"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":168},{"name":"usa_spending_trends","title":null,"description":"\"How has [agency] contract spending trended over the last N fiscal years?\" / \"is [agency] spending on X growing?\" / \"federal spending history for [topic]\" — US FEDERAL contract/award spending over time from USAspending.gov, grouped by fiscal year, quarter, or month. Filter by keywords or by federal agency (DHS/Homeland Security, DOD/Defense, HHS, VA, DOE, NASA, State, Treasury). Returns the historical dollar amount per period for trend and budget-forecasting questions. Federal only — for state & county award data use gov_contracts_search.","inputs":[{"name":"agency","type":"string","required":false,"description":"Awarding agency name. Use instead of, or alongside, keywords."},{"name":"end_date","type":"string","required":false,"description":"End date YYYY-MM-DD. Optional — defaults to today."},{"name":"group","type":"string","required":false,"description":"Time grouping: fiscal_year, quarter, or month (default fiscal_year)"},{"name":"keywords","type":"array","required":false,"description":"Keywords to track spending for (e.g., [\"artificial intelligence\"])"},{"name":"start_date","type":"string","required":false,"description":"Start date YYYY-MM-DD. Optional — defaults to five years ago; the window actually used comes back under `period`."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":250},{"name":"usa_expiring_awards","title":null,"description":"Federal contracts EXPIRING soon -- the recompete calendar. \"Which VA IT contracts over $10M expire in the next 12 months?\" / \"what is up for recompete at DHS next year\" / \"find follow-on opportunities in NAICS 5415\" / \"whose contract is ending\". Returns the incumbent holding each award, its period of performance, obligated dollars, agency, NAICS/PSC, and a usaspending.gov link. Filter by agency, sub-agency, NAICS or PSC prefix, incumbent name, and minimum obligated dollars. Covers awarded CONTRACTS already held by a vendor; for open solicitations still accepting bids use samgov/govcon tools.","inputs":[{"name":"agency","type":"string","required":false,"description":"Awarding agency, substring match (e.g. \"Department of Veterans Affairs\", \"Defense\")."},{"name":"limit","type":"number","required":false,"description":"Max awards to return (default 25, max 200)."},{"name":"min_amount","type":"number","required":false,"description":"Minimum total OBLIGATED dollars on the award (not the ceiling). 10000000 for \"over $10M\"."},{"name":"months_ahead","type":"number","required":false,"description":"Window size in months from today (default 12)."},{"name":"naics","type":"string","required":false,"description":"NAICS code or prefix. Hierarchical: \"5415\" matches all 6-digit computer-services codes beneath it."},{"name":"psc","type":"string","required":false,"description":"Product/Service Code or prefix (e.g. \"D3\" for IT services)."},{"name":"recipient","type":"string","required":false,"description":"Incumbent contractor name, substring match."},{"name":"sub_agency","type":"string","required":false,"description":"Awarding sub-agency, substring match (e.g. \"Veterans Health Administration\")."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":343},{"name":"usa_incumbent_profile","title":null,"description":"Federal contract portfolio for one contractor -- \"what does Leidos hold and when does it expire\", \"which of Booz Allen's contracts come up for recompete\", incumbent research before a bid. Returns active award count, total obligated, ceiling, expirations at 6/12/18 months, top agencies and NAICS, and the next awards to expire with dates.","inputs":[{"name":"limit","type":"number","required":false,"description":"How many upcoming expirations to list (default 10, max 100)."},{"name":"recipient","type":"string","required":true,"description":"Contractor name, substring match (e.g. \"Leidos\", \"Booz Allen\")."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":133}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T01:00:02.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a199c5-4c9c-79c9-b65c-85bc3d0c36cc","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending#chg-chg_01a199c5-4c9c-79c9-b65c-85bc3d0c36cc"},{"id":"chg_01a18742-0866-772c-96f9-9841d818b0dc","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending#chg-chg_01a18742-0866-772c-96f9-9841d818b0dc"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending","markdown":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-usaspending/pipeworx-mcp-usaspending.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-usaspending"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-usaspending"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-usaspending"},{"label":"Website","href":"https://pipeworx.io/packs/usaspending"}]}}