change-intelligence-hubCAUTION
GovContract Radar — hourly US federal contract opportunity alerts from SAM.gov. NAICS-filtered, set-aside alerts, recompete radar, free public API, MCP server. https://pixharvest.com
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Hourly-synced intelligence on new U.S. federal contract opportunities from SAM.gov (the official government system of record). Built for small federal contractors, BD teams and AI agents.
Posted-to-radar latency ≤ 60 minutes — hourly sync, 24/7. Data is 100% public domain (SAM.gov + USAspending.gov).
- 🕐 Live radar: https://pixharvest.com/gov/daily
- 📊 Weekly industry ranking: https://pixharvest.com/gov/rank
- 🤖 MCP server for AI agents:
https://gov.pixharvest.com/mcp - 📦 npm data chip (MCP):
npm i pixharvest-us-trade-mcp— live US stacked tariff rates + SAM.gov opportunities, served to any AI agent - 🔓 Public API — no key required (see below)
🔓 Public API (no key, no login, CORS-enabled)
Pull the latest federal contract opportunities in one call — no registration, no key, works from the browser, curl, or an AI agent:
curl https://pixharvest.com/api/gov/today.json
Response — the 15 most recent opportunities from the last 7 days, refreshed hourly:
{
"ok": true,
"source": "SAM.gov (public domain)",
"note": "Deadlines, full descriptions and NAICS filtering are available to subscribers",
"count": 15,
"opportunities": [
{
"title": "36CES Vehicle and Aircraft Wash Rack Maintenance Services",
"agency": "DEPT OF DEFENSE...PACIFIC AIR FORCES",
"type": "Sources Sought",
"naics": ["811310"],
"setAside": "Small Business Set Aside - Total",
"postedAt": "2026-10-04T06:45:21Z",
"url": "https://sam.gov/opp/FA5240..."
}
]
}What's free: a live sample of the latest federal opportunities, so you can verify the data is real, fresh and traceable to SAM.gov.
💻 Ready-to-run code: see examples/ for curl, Python and MCP-client snippets.
📡 Live proof — real data, updated hourly
This repo is not a mockup. LIVE.md is a real snapshot pulled from the live public API —
dac73cea0e4dOBSERVED · 2026-10-11Exposed tools (4)
1 read · 3 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
analyze_tariff_impact | write | Analyse the US import tariff impact for a product (HS code or keyword) and origin country: base rate, stacked China rate, EU rate and landed-cost estimate. |
query | read | HS code or product keyword, e.g. |
tariff.export | write | Return the sample US tariff schedule as plain text (first 300 rows) for offline analysis or filtering. Call after tariff.lookup when you need the raw schedule rather than a single-rate answer. |
tariff.lookup | write | Look up live US import tariff rates by HS code or product keyword (e.g. 8703.24, laptop, steel pipe). Returns base MFN rate, 2026 China-stacked Section 301 rate, EU rate, MPF/HMF fees and a landed-cost example. Call this first for any tariff question, then use tariff.export for the raw schedule. |
Trust audit
CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (9 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (9)
async function beacon(kv, body) {__name(beacon, "beacon");
await beacon(kv, b);
export const FAVICON = "iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAACQUlEQVR4nO1bMVLDMBC8MHTMUMEPKPODfIJH8Ik0FDT5BI+g5QH5QUp+QKrMpIaCkccoknPW7cqWrK0wieXbvb2zZDkiDcvGKuWku/uHH3QgKJxPx1Gc1F+eM+kYNGLc
export const MATRIX_B64 = "iVBORw0KGgoAAAANSUhEUgAABkAAAAOECAIAAAB2L2r1AAAQAElEQVR4nOx9B7xdRfH/7EshvSekEUKXphQp0ntROojwAwEBEVFRpKn87VhQARsioFIVBGmC0qQX6TW0AAkJKZCQhBTSk/nfd8+Wmd3ZPefce18IeOaD4zd7z92dn
var MATRIX_B64 = "iVBORw0KGgoAAAANSUhEUgAABkAAAAOECAIAAAB2L2r1AAAQAElEQVR4nOx9B7xdRfH/7EshvSekEUKXphQp0ntROojwAwEBEVFRpKn87VhQARsioFIVBGmC0qQX6TW0AAkJKZCQhBTSk/nfd8+Wmd3ZPefce18IeOaD4zd7z92dnbI7u2fvvs
var FAVICON = "iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAACQUlEQVR4nO1bMVLDMBC8MHTMUMEPKPODfIJH8Ik0FDT5BI+g5QH5QUp+QKrMpIaCkccoknPW7cqWrK0wieXbvb2zZDkiDcvGKuWku/uHH3QgKJxPx1Gc1F+eM+kYNGLcaAYqkbyIL
var png = /* @__PURE__ */ __name((b64) => new Response(Uint8Array.from(atob(b64), (c) => c.charCodeAt(0)), { headers: { "content-type": "image/png", "cache-control": "public, max-age=86400" } }), "pngGates applied: no_behavioural_pass, no_license.
dac73cea0e4dfull audit observations/trust-audit/mcp-server/contentforge-press__change-intelligence-hub.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | dac73cea0e4d | CAUTION | B | 82 | first audit |
Questions
What is the change-intelligence-hub MCP server?
GovContract Radar — hourly US federal contract opportunity alerts from SAM.gov. NAICS-filtered, set-aside alerts, recompete radar, free public API, MCP server. https://pixharvest.com
What tools does change-intelligence-hub expose?
4 in total: 1 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is change-intelligence-hub safe to connect to an agent?
With care. The audit graded it B (82/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does change-intelligence-hub need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (dac73cea0e4d), read on 2026-10-11. The repository is watched and re-audited when it changes.