Back to Home
blencorp icon

capture-mcp-server

Verified Safe

by blencorp

Overview

An AI-native server that integrates SAM.gov, USASpending.gov, and Tango APIs to analyze federal procurement and spending data through natural language queries.

Installation

Run Command
npm start

Environment Variables

  • SAM_GOV_API_KEY
  • TANGO_API_KEY
  • API_KEY_BUCKET
  • API_KEY_PREFIX
  • AWS_REGION
  • POWERTOOLS_SERVICE_NAME
  • POWERTOOLS_LOG_LEVEL
  • POWERTOOLS_METRICS_NAMESPACE
  • NODE_OPTIONS
  • MCP_TRANSPORT
  • PORT
  • DEBUG
  • ENVIRONMENT
  • AWS_ACCOUNT
  • DOMAIN_NAME

Security Notes

The server demonstrates strong security practices including hashing API keys (never storing them in raw form in S3) via the `s3-api-key.ts` middleware, thorough input sanitization (`ApiClient.sanitizeInput`), and queue-based rate limiting to protect external APIs from accidental abuse. AWS infrastructure defined via CDK (`infrastructure/`) enforces S3 public access blocking, SSL, and server-side encryption, and follows least-privilege IAM policies for Lambda. No `eval` or code obfuscation found. The `SECURITY.md` outlines a clear vulnerability reporting and disclosure policy.

Similar Servers

Stats

Interest Score29
Security Score9
Cost ClassMedium
Avg Tokens2500
Stars12
Forks4
Last Update2026-01-02

Tags

federal dataprocurementgovernment contractsspending analysisAPI integration