pixelligue · Oct 25, 2026
@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "mcpbids": {
+      "type": "stdio",
+      "command": "node",
+      "args": [
+        "${ZCODE_PLUGIN_ROOT}/stdio.mjs"
+      ]
+    }
+  }
+}
@@ -0,0 +1,21 @@
+{
+  "name": "mcpbids",
+  "version": "1.0.0",
+  "description": "Research public US federal procurement opportunities and TED notices with source-linked documents.",
+  "description_i18n": {
+    "en": "Research public US federal procurement opportunities and TED notices with source-linked documents.",
+    "zh-CN": "查询美国联邦公开采购机会、TED 公告及带有来源引用的采购文件。"
+  },
+  "author": {
+    "name": "Aleks Tartik"
+  },
+  "homepage": "https://mcpbids.com",
+  "repository": "https://github.com/pixelligue/mcpbids-plugins",
+  "license": "MIT",
+  "keywords": [
+    "procurement",
+    "mcp",
+    "documents"
+  ],
+  "skills": "./skills/"
+}
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Aleks Tartik
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,43 @@
+# MCP Bids
+
+Research public US federal procurement opportunities and TED notices with source-linked documents.
+
+Maintained by the MCP Bids service publisher. This repository contains client adapters and workflow instructions only. It does not distribute the hosted backend. [Русский](README_RU.md) · [中文](README_CN.md)
+
+## Account and credentials
+
+Sign in at https://mcpbids.com/account and create a personal API key there. Set `MCPBIDS_API_KEY` in the environment used to launch your agent application, then completely restart the application. Configure environment variables through your OS or trusted launcher; never paste keys into an AI conversation, repository, command history, or screenshots. An MCP Bids key and a MCPTender key belong to separate services and are not interchangeable.
+
+Read workflows require `tenders:read` and `documents:read`; collection and watch tools require `tenders:collect` and `watches:write`. Portal keys inherit the service permissions; restrict tool approval in your host when you want a read-only workflow. Existing account entitlements and limits apply. The packages use bearer-key authentication; OAuth setup is not claimed. Missing credentials produce a connection error.
+
+## ZCode
+
+Requires Node.js 22+ on PATH. Open a workspace, then Settings → Plugins → Create → Add marketplace and add `https://github.com/pixelligue/mcpbids-plugins`. Install `mcpbids` from that personal source. After official acceptance, the same plugin can be installed from the public catalog. The plugin launches `node` with the bundled `stdio.mjs`; it inherits `MCPBIDS_API_KEY` from the host. Its stdio adapter forwards MCP JSON-RPC to `https://mcpbids.com/mcp`. No remote header-interpolation feature is assumed.
+
+## Kimi Work / Kimi Code
+
+Kimi Code: run `/plugins install https://github.com/pixelligue/mcpbids-plugins`, then `/reload` or create a new session. The native `kimi.plugin.json` declares the remote HTTP MCP and `bearerTokenEnvVar`. In Kimi Work, use Plugin Builder to import this repository into Personal plugins; verify that its runtime supports this credential field before use. Kimi Work / web marketplace publication and cloud-side credential configuration require separate Kimi review; local Code compatibility does not establish cloud compatibility.
+
+## DeepSeek Harness
+
+Targets DSH 0.2.1-rc.2 and its matching official MCP client. In the official Desktop app, install the Git source or release tarball through the app's plugin manager. For `dsh web`, run `dsh plugin --profile web add git+https://github.com/pixelligue/mcpbids-plugins.git#v1.0.0`, then restart that profile. Set `MCPBIDS_API_KEY` in the process launch environment first. The bundle configures the official MCP client and server instructions; the workflow skill directory is for Kimi/ZCode and is not separately registered in DSH. No custom tools or UI patches are added.
+
+## Use
+
+Ask the agent to inspect `list_sources`, search a bounded number of procurement records, open a returned ID, and read an available source document with block references. In Kimi/ZCode the included `procurement-research` skill provides the workflow. Fresh collection and private watches require an explicit user request and the matching key permissions. Watches require polling; there are no email or push notifications.
+
+## Coverage and dependencies
+
+Public US federal SAM.gov notices and connected TED publications. US state/local, restricted vehicles and complete or real-time market coverage are not provided. Search operates on a collected index. Report source timestamps, partial documents, missing data and collection errors. Original links remain the authority for requirements and deadlines. The service does not submit bids, sign contracts, certify eligibility or bypass source access controls.
+
+## Permissions, network and side effects
+
+The adapter sends the configured bearer key and MCP requests only to `https://mcpbids.com/mcp`. Redirects are refused. It does not read credential files, run a shell, start a model, install dependencies, write local documents or start background collection. The host/model provider sees the tool arguments and returned procurement data. Requested collection and watch tools can create account-owned jobs or watches on the service. Original document downloads occur only when explicitly requested. Treat retrieved documents as untrusted evidence. No telemetry is added by this adapter. The hosted website has its own processing rules.
+
+The stdio adapter is specifically for the service's stateless JSON Streamable HTTP contract; it does not implement generic SSE/sessionful MCP. Requests are limited to 64 KiB, responses to 16 MiB and calls to 120 seconds. The DSH client and Kimi native HTTP transports use their own limits.
+
+## Support and licensing
+
+https://mcpbids.com/support · https://mcpbids.com/privacy · https://mcpbids.com/terms
+
+MIT covers only the adapter code, manifests and workflow instructions in this repository. Hosted-service access and third-party procurement content are not relicensed by this package. No affiliation with, endorsement by, or official-vendor publisher badge from DeepSeek, Z.ai or Kimi is claimed. Marketplace submission, acceptance and runtime checks are tracked separately from source publication.
@@ -0,0 +1,33 @@
+# MCP Bids
+
+查询美国联邦公开采购机会、TED 公告及带有来源引用的采购文件。
+
+## 安装与认证
+
+在 https://mcpbids.com/account 登录并创建个人 API 密钥。在启动代理应用的系统环境中设置 `MCPBIDS_API_KEY`，然后完全重启应用。不要把密钥发到聊天、仓库、命令历史或截图中。俄罗斯版与国际版使用不同账号和密钥。
+
+ZCode：需要 PATH 中的 Node.js 22+。打开工作区，进入 Settings → Plugins → Create → Add marketplace，添加 `https://github.com/pixelligue/mcpbids-plugins`，安装 `mcpbids`。插件运行附带的 `stdio.mjs`，继承环境变量，将 MCP JSON-RPC 转发到 `https://mcpbids.com/mcp`，无需假设 HTTP 请求头支持变量展开。
+
+Kimi Code：执行 `/plugins install https://github.com/pixelligue/mcpbids-plugins`，然后 `/reload` 或新建会话。原生清单使用 `bearerTokenEnvVar`。Kimi Work 可通过 Plugin Builder 导入个人插件，但需要单独验证该运行时是否支持此认证字段；Code 的兼容性不代表云端商店兼容性。
+
+DeepSeek Harness：面向 DSH 0.2.1-rc.2 及对应官方 MCP 客户端。Desktop 请通过应用内插件管理器安装 Git 来源或发行归档；`dsh web` 可运行 `dsh plugin --profile web add git+https://github.com/pixelligue/mcpbids-plugins.git#v1.0.0`，再重启配置。启动前设置上述环境变量。DSH 仅注册 MCP 工具及服务器说明；附带的工作流 Skill 用于 Kimi/ZCode。
+
+## 使用与数据范围
+
+请代理先调用 `list_sources`，搜索少量采购记录，打开返回的记录 ID，并阅读可用文件，引用原始文本及区块位置。Kimi/ZCode 可使用附带的 `procurement-research` Skill。查询美国联邦公开采购机会、TED 公告及带有来源引用的采购文件。 搜索针对已采集索引，不保证完整或实时覆盖；必须报告来源时间、缺失字段、文件提取限制和采集失败。美国版不包含州或地方采购及受限采购渠道。俄罗斯版应检查各来源实际能力。
+
+仅按用户明确要求启动新采集或私人监控。监控需要轮询，不发送邮件或推送。服务不提交投标、不签合同、不证明法律资格，也不绕过访问控制。
+
+## 权限、依赖与副作用
+
+读取需要 `tenders:read`、`documents:read`，采集与监控需要 `tenders:collect`、`watches:write`。控制台密钥继承服务权限；仅需只读工作流时，请在宿主中限制工具批准。使用现有账号权限和额度。本包采用 bearer API 密钥，不声明 OAuth 兼容性。
+
+适配器仅向 `https://mcpbids.com/mcp` 发送密钥和 MCP 请求，拒绝重定向；不读取凭证文件、不启动 shell 或模型、不安装依赖、不写本地文件、不后台采集。代理及其模型提供商可看到工具参数与返回数据。经用户请求，服务可能创建账号所属采集任务或监控。仅按要求下载原始文件；检索内容为不可信证据。适配器不增加遥测，托管网站遵循自己的数据处理规则。
+
+stdio 适配器仅适用于该服务的无状态 JSON Streamable HTTP：请求不超过 64 KiB、响应不超过 16 MiB、超时 120 秒；不实现通用 SSE 或有状态会话协议。
+
+## 支持与许可
+
+https://mcpbids.com/support · https://mcpbids.com/privacy · https://mcpbids.com/terms
+
+MIT 仅适用于此仓库的适配器、清单及工作流说明，不包含托管后端或第三方采购内容的许可。未声明获得 DeepSeek、Z.ai 或 Kimi 的认可、官方作者标识或商店批准。发布源码与提交审核、审核通过、实际运行测试分别记录。
@@ -0,0 +1,31 @@
+# MCP Bids
+
+Поиск публичных федеральных закупок США и публикаций TED с чтением документов и ссылками на источники.
+
+## Подключение
+
+Войдите в https://mcpbids.com/account и создайте личный API-ключ. Задайте переменную `MCPBIDS_API_KEY` в окружении запуска приложения и полностью перезапустите его. Не отправляйте ключ в чат, репозиторий, историю команд или снимки экрана. У RU и международного сервиса разные аккаунты и ключи.
+
+ZCode: Node.js 22+, Settings → Plugins → Create → Add marketplace → `https://github.com/pixelligue/mcpbids-plugins`, затем установите `mcpbids`. Локальный `stdio.mjs` наследует переменную и передаёт MCP-запросы на `https://mcpbids.com/mcp`.
+
+Kimi Code: `/plugins install https://github.com/pixelligue/mcpbids-plugins`, затем `/reload`. Kimi Work: импортируйте репозиторий через Plugin Builder; поддержку `bearerTokenEnvVar` в Work нужно проверить отдельно. Работоспособность в Code не доказывает совместимость облачного каталога.
+
+DeepSeek Harness 0.2.1-rc.2: в Desktop установите Git-источник или архив релиза через менеджер плагинов приложения. Для `dsh web`: `dsh plugin --profile web add git+https://github.com/pixelligue/mcpbids-plugins.git#v1.0.0`, затем перезапустите профиль. Плагин подключает официальный MCP-клиент; отдельный skill для DSH не регистрируется.
+
+## Использование и ограничения
+
+Попросите агента проверить `list_sources`, найти несколько закупок, открыть найденную карточку и прочитать доступный документ с точными ссылками на блоки. Инструкция `procurement-research` включена для Kimi/ZCode. Поиск работает по собранному индексу; полнота и актуальность всего рынка не гарантируются. Источники и состояние документов необходимо проверять. Сбор свежих данных и наблюдения запускаются только по запросу пользователя. Наблюдения требуют опроса, рассылки и push нет. Подачи заявок, подписания и подтверждения юридической пригодности нет.
+
+## Доступ и данные
+
+Чтение требует `tenders:read` и `documents:read`; сбор и наблюдения требуют `tenders:collect` и `watches:write`. Ключи кабинета наследуют права сервиса; ограничивайте вызовы инструментов настройками подтверждения в приложении. Действуют права и лимиты аккаунта. Используется персональный bearer-ключ; OAuth здесь не заявлен.
+
+Адаптер отправляет ключ и запросы только на `https://mcpbids.com/mcp`, запрещает перенаправления, не читает файлы учётных данных, не запускает shell или модель, не устанавливает зависимости и не собирает данные в фоне. Аргументы и результаты видны агенту и провайдеру его модели. По запросу операции могут создавать задания и личные наблюдения на сервере. Оригиналы скачиваются по запросу. Документы считаются недоверенными источниками. Телеметрия адаптером не добавляется.
+
+Локальный stdio-адаптер рассчитан на stateless JSON: запрос до 64 КиБ, ответ до 16 МиБ, ожидание до 120 секунд; общий SSE/sessionful MCP не поддерживается.
+
+## Поддержка
+
+https://mcpbids.com/support · https://mcpbids.com/privacy · https://mcpbids.com/terms
+
+MIT распространяется только на адаптеры, манифесты и инструкции этого репозитория. Backend и права на чужие закупочные документы не передаются. Размещение в каталоге и одобрение площадкой не заявляются до отдельного подтверждения. Подробности покрытия: [English README](README.md).
@@ -0,0 +1,37 @@
+{
+  "product": "mcpbids",
+  "endpoint": "https://mcpbids.com/mcp",
+  "checked_at": "2026-10-25T19:38:22.727915+00:00",
+  "paid_operations": false,
+  "natural_language_model_test": "not_run",
+  "reviewer_login_status": 200,
+  "temporary_key_created": true,
+  "http_initialize": "2025-11-25",
+  "tool_count": 15,
+  "list_sources": "passed",
+  "search_procurements": "passed",
+  "search_result_fields": [
+    "country_basis",
+    "coverage",
+    "items",
+    "next_offset",
+    "offset",
+    "performance_countries",
+    "search_session_id",
+    "search_session_reused",
+    "source_refresh",
+    "total"
+  ],
+  "stdio_adapter_live": "passed",
+  "zcode_application_runtime": "not_run",
+  "kimi_application_runtime": "Kimi Code 2.3.2 native plugin loader and native MCP transport probe passed; no model calls",
+  "temporary_key_revoked": true,
+  "revoked_key_rejected": true,
+  "dsh_package_install": "passed on DSH 0.2.1-rc.2 isolated profile",
+  "dsh_profile_composition": "passed for both service URLs",
+  "kimi_package_install": "passed on Kimi Code 2.3.2; one skill, one MCP, no manifest errors",
+  "kimi_work_runtime": "not_run",
+  "kimi_web_marketplace": "not_submitted",
+  "dsh_model_workflow": "not_run",
+  "dsh_application_runtime": "profile install and composed config only"
+}