Build on TappHQ

curl https://api.tapphq.com/v1/grants/search \
  -H "Authorization: Bearer fde_live_xxxxx" \
  -H "Content-Type: application/json" \
  -d '{"query":"environmental education","location":"CA"}'

# 200 OK
{
  "data": [
    {
      "id": "grnt_01J4K2MNP3QRSTUVWXYZ",
      "funder": "California Environmental Fund",
      "amount_max": 50000,
      "deadline": "2024-11-15",
      "match_score": 94
    }
  ],
  "total": 847,
  "page": 1
}

import crypto from "crypto"

function verifyWebhook(
  payload: string,
  signature: string,
  secret: string
): boolean {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(payload)
    .digest("hex")
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(`sha256=${expected}`)
  )
}

app.post("/webhooks/tapphq", (req, res) => {
  const sig = req.headers["x-tapphq-signature"] as string
  if (!verifyWebhook(req.rawBody, sig, process.env.WEBHOOK_SECRET!)) {
    return res.status(401).send("Unauthorized")
  }
  const { event, data } = req.body
  // grant.matched, agent.completed, monitor.alert...
  res.sendStatus(200)
})

import { TappHQClient } from "@tapphq/sdk"

const client = new TappHQClient({
  apiKey: process.env.TAPPHQ_API_KEY,
})

// Full type safety on every call
const results = await client.grants.search({
  query: "workforce development",
  location: "TX",
  amountMin: 10_000,
  amountMax: 100_000,
})

for (const grant of results.data) {
  console.log(`${grant.funder}: $${grant.amount_max}`)
  console.log(`Match score: ${grant.match_score}%`)
  // TypeScript knows the shape - no casting needed
}