GovGazette

Check possible exclusion matches

check_exclusions

Read-onlyIdempotent

Check 1 to 20 identities against a dated active SAM snapshot. Pass identities as an array of objects, not a record ID or page URL. Each identity needs a name, UEI, CAGE, or NPI. Exact identifier matches and name-only possible matches remain distinct. Read coverage.freshness; stale or unknown-source empty lookups report unavailable with snapshot_status no_match_in_snapshot. No match is not clearance.

Input Schema

TableJSON Schema

Name	Required	Description	Default
`generation`	No	Retained snapshot UUID; omit for the current snapshot.
`identities`	Yes	One to twenty identities to compare with the dated SAM snapshot.

Output Schema

TableJSON Schema

Name	Required	Description	Default
`results`	Yes
`coverage`	Yes
`generation`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

Changed2 schema fields changedOct 12, 2026

changedInput schema / $defs / Identity / properties / name / description

Previous value: -"Person or organization name; name-only matches are possible matches."New value: +"Person or organization name, within 256 UTF-8 bytes; name-only matches are possible matches."

changedOutput schema / $defs / Identity / properties / name / description

Previous value: -"Person or organization name; name-only matches are possible matches."New value: +"Person or organization name, within 256 UTF-8 bytes; name-only matches are possible matches."

Changed3 schema fields changedOct 8, 2026

addedOutput schema / $defs / SourceFreshness / properties / attention_required
```
Added value: +{
+  "type": "boolean"
+}
```

addedOutput schema / $defs / SourceFreshness / properties / warn_age_seconds

Added value: +{
+  "description": "Early-warning boundary, separate from the stale-source boundary.",
+  "format": "int64",
+  "type": "integer"
+}

changedOutput schema / $defs / SourceFreshness / required

Previous value: -[
-  "state",
-  "evaluated_at",
-  "max_age_seconds"
-]New value: +[
+  "state",
+  "evaluated_at",
+  "max_age_seconds",
+  "warn_age_seconds",
+  "attention_required"
+]

Changed7 schema fields changedOct 6, 2026

addedOutput schema / $defs / ExclusionCoverage

Added value: +{
+  "properties": {
+    "freshness": {
+      "$ref": "#/$defs/SourceFreshness",
+      "description": "Fresh, stale, unknown or unavailable, with age and the 24-hour warning policy."
+    },
+    "observed_at": {
+      "description": "Observation time does not replace the official source timestamp.",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "scope": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "sha256": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "source_date": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "source_url": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "status": {
+      "description": "Present as unavailable when no SAM coverage exists in this generation.",
+      "type": [
+        "string",
+        "null"
+      ]
+    }
+  },
+  "required": [
+    "freshness"
+  ],
+  "type": "object"
+}

addedOutput schema / $defs / ExclusionMatch / properties / snapshot_status

Added value: +{
+  "description": "Observed lookup outcome in the dated snapshot, even when status is unavailable.",
+  "type": "string"
+}

changedOutput schema / $defs / ExclusionMatch / properties / status / description

Previous value: -"Distinguishes exact-identifier, possible-name and no-match outcomes."New value: +"Exact or possible match, fresh-snapshot no-match, or unavailable. Stale,\nunknown and missing sources never produce a clean no-match status."

changedOutput schema / $defs / ExclusionMatch / required

Previous value: -[
-  "identity",
-  "status",
-  "records",
-  "truncated"
-]New value: +[
+  "identity",
+  "status",
+  "snapshot_status",
+  "records",
+  "truncated"
+]

addedOutput schema / $defs / FreshnessState

Added value: +{
+  "enum": [
+    "fresh",
+    "stale",
+    "unknown",
+    "unavailable"
+  ],
+  "type": "string"
+}

addedOutput schema / $defs / SourceFreshness

Added value: +{
+  "properties": {
+    "evaluated_at": {
+      "description": "UTC time when age was evaluated; source and observation dates are unchanged.",
+      "type": "string"
+    },
+    "max_age_seconds": {
+      "description": "Explicit warning threshold for this daily snapshot. Not a scheduler promise.",
+      "format": "int64",
+      "type": "integer"
+    },
+    "source_age_seconds": {
+      "description": "Age of the official source timestamp, never the import or enrichment timestamp.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
+    "state": {
+      "$ref": "#/$defs/FreshnessState"
+    },
+    "warning": {
+      "description": "User-facing warning, or null when within the warning threshold.",
+      "type": [
+        "string",
+        "null"
+      ]
+    }
+  },
+  "required": [
+    "state",
+    "evaluated_at",
+    "max_age_seconds"
+  ],
+  "type": "object"
+}

changedOutput schema / properties / coverage / $ref

Previous value: -"#/$defs/JsonObject"New value: +"#/$defs/ExclusionCoverage"

Changed2 schema fields changedOct 6, 2026
- addedInput schema / properties / identities / maxItems
```
Added value: +20
```
- addedInput schema / properties / identities / minItems
```
Added value: +1
```

Changed7 schema fields changedSep 24, 2026

addedInput schema / $defs / Identity / properties / cage / description
```
Added value: +"Exact five-character CAGE code, when known."
```

addedInput schema / $defs / Identity / properties / name / description

Added value: +"Person or organization name; name-only matches are possible matches."

addedInput schema / $defs / Identity / properties / npi / description

Added value: +"Exact ten-digit National Provider Identifier, when known."

addedInput schema / $defs / Identity / properties / uei / description
```
Added value: +"Exact 12-character Unique Entity ID, when known."
```

addedInput schema / properties / generation / description

Added value: +"Retained snapshot UUID; omit for the current snapshot."

addedInput schema / properties / identities / description

Added value: +"One to twenty identities to compare with the dated SAM snapshot."

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "$defs": {
+    "ExclusionMatch": {
+      "properties": {
+        "identity": {
+          "$ref": "#/$defs/Identity"
+        },
+        "records": {
+          "description": "Candidate exclusion records with match basis; not a clearance decision.",
+          "items": {
+            "$ref": "#/$defs/JsonObject"
+          },
+          "type": "array"
+        },
+        "status": {
+          "description": "Distinguishes exact-identifier, possible-name and no-match outcomes.",
+          "type": "string"
+        },
+        "truncated": {
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "identity",
+        "status",
+        "records",
+        "truncated"
+      ],
+      "type": "object"
+    },
+    "Identity": {
+      "additionalProperties": false,
+      "properties": {
+        "cage": {
+          "description": "Exact five-character CAGE code, when known.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "name": {
+          "description": "Person or organization name; name-only matches are possible matches.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "npi": {
+          "description": "Exact ten-digit National Provider Identifier, when known.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "uei": {
+          "description": "Exact 12-character Unique Entity ID, when known.",
+          "type": [
+            "string",
+            "null"
+          ]
+        }
+      },
+      "type": "object"
+    },
+    "JsonObject": {
+      "description": "Source-specific JSON map. The envelope is stable; map keys vary by official source.",
+      "type": "object"
+    }
+  },
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "properties": {
+    "coverage": {
+      "$ref": "#/$defs/JsonObject"
+    },
+    "generation": {
+      "type": "string"
+    },
+    "results": {
+      "items": {
+        "$ref": "#/$defs/ExclusionMatch"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "generation",
+    "results",
+    "coverage"
+  ],
+  "type": "object"
+}

AddedSep 23, 2026

TDQS

Score is being calculated.

All GovGazette tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.