TappHQ is agent-operable by design.

Your team uses TappHQ through the browser. Your AI agents - Claude Desktop, custom-built, or your customers' - operate on the same data via MCP, A2A, and our REST API. One source of truth. Three integration paths. Audit, tier-gating, and org scoping consistent across all three.

Read API docs See Enterprise pricing Download Technical Brief (PDF)

228

Platform Tools

HQ Brands

Integration Paths

API Scopes

Three Integration Paths

One platform. Three ways to automate.

REST API, MCP server, and A2A protocol share the same org scoping, audit log, and tier-gating - consistent semantics regardless of how your agents connect.

Pro+

REST API

OpenAPI 3.1 spec - external and tenant variants
13 scopes, org-scoped keys with SHA-256 hashing, tier-based rate limiting
TypeScript SDK: @tapphq/sdk and @tapphq/sdk-tenant
Python SDK: tapphq-sdk and tapphq-sdk-tenant
Date-based versioning via TappHQ-Version header

Read API docs

Pro+ read · Enterprise write

MCP Server

Standards-based JSON-RPC 2.0 connection
307 read tools (Pro+), 45 write tools (Enterprise)
No SDK required - stateless, works with any MCP client
Claude Desktop config generator in Settings > API
Every call recorded in the append-only audit log

Agentic platform overview

Enterprise

A2A Protocol

Agent-to-agent task handoff across orgs and platforms
JSON-RPC 2.0 task primitive with audit trail
TappHQ acts as A2A server and A2A client
Configurable trust levels and encrypted per-agent credentials
Tier 2 integration for agent ecosystems

See pricing

Tool Inventory

What agents can read and write

Every brand exposes read tools at Pro+ tier. Write tools require Enterprise tier and explicit audit logging. Every tool has a clear, predictable name grouped by brand.

GrantsHQ

Search opportunities, get match scores, retrieve prospect recommendations, research funders via live web search, draft LOIs and narratives, check award probability, and query funder intelligence from anonymized community outcomes.

ComplianceHQ

Get credential status and expiring-soon lists, retrieve deadline summaries and renewal status, read posture reports, query board governance, get state registration status, list audit evidence packs.

FinanceHQ

Get 990 summary and financial ratios, retrieve financial health score and alerts, read budget variance, fund balances, peer benchmarks, and donation summary. Generate funder reports.

PeopleHQ

Get org chart, staff list with department structure, position metadata. Generate onboarding docs and draft position descriptions.

AgentHQ

Run agents, retrieve run status and step-by-step execution traces with tool call details and reasoning.

ContentHQ

Get brand colors, logos, boilerplate, voice guide, and bios. List and generate annual reports. Access Content Studio tools.

SiteHQ

Get site health, uptime, accessibility scores, PageSpeed reports, and deployment history. Request and approve content updates.

GrowthHQ

Get donor pipeline summary and entry detail, retrieve impact snapshot for stakeholders.

StakeholderHQ

List portal members by type, get board governance summary, retrieve recent portal activity.

LearningHQ

Get course catalog, enrollment status, certificate records, and learning completion stats.

SupportHQ

List open and recent support tickets with status and priority, get team workload and response metrics.

Platform

Search org knowledge base and wiki, save agent findings to org memory, retrieve completeness score.

216 tools across 11 HQ brands (171 read, 45 write). Full machine-readable catalog at /api/v1/capabilities.

Security and Audit

Enterprise-grade controls built in

Every API key scoped to a specific org - no cross-org access possible
Every MCP call recorded in the append-only audit log with agent, tool, cost, and result
Every write tool call requires Enterprise tier + write permission, enforced at runtime - downgrade-resilient
Webhook subscriptions with HMAC-SHA256 signing on every payload
ZDR mode available for AI operations (Pro+) - your key, your data
Per-org rate limits (30/min Starter, 120/min Pro, 500/min Enterprise) prevent runaway agents
Org-scoped API keys with SHA-256 hashing - rotate and revoke from the dashboard

You take responsibility for any BYOK key you mark as ZDR. TappHQ and our providers have no visibility into your agreements with your providers. By using BYOK, and bypassing our ZDR policy, you understand that data retention with your providers is at your own risk.

Use Cases

Who builds on top of TappHQ

Nonprofit CTO

“My dev team builds custom agents that operate on our TappHQ data for internal efficiency. The MCP server means they ship in hours, not weeks.”

Consultancy

“We provide white-glove services to our clients. Our agents ingest their TappHQ data via MCP with per-client scoped credentials - completely isolated.”

Claude Desktop user

“I drop the TappHQ MCP config into my Claude Desktop, and now Claude can answer questions about my grants, compliance, finance, and board without any coding.”

AI tool provider

“My company builds an AI product for nonprofits. Each customer provisions a TappHQ API key for my app to access their data - per-customer API key provisioning, not OAuth.”

Getting Started

Connect your first agent in minutes

Generate an API key

Go to Settings > API in your TappHQ dashboard (Pro+ or Enterprise). Click Generate Key, choose your scopes, and copy the key. Keys start with tphq_live_ for production or tphq_test_ for safe sandbox testing.

Connect Claude Desktop

Paste the generator-provided config block directly into your Claude Desktop config file. The generator pre-fills your org key and endpoint URL - no manual editing required.

Make your first API call

Use the REST API or MCP directly. The TypeScript SDK (@tapphq/sdk) wraps the external API, and @tapphq/sdk-tenant adds org-scoped tenant operations. Python equivalents are available as tapphq-sdk and tapphq-sdk-tenant.

Subscribe to a webhook

Register a webhook endpoint and choose events (compliance.credential.expiring, funding.grant.created, form.submission_received, etc.). Every payload is HMAC-SHA256 signed with your webhook secret. Verify the signature before processing.

// Quick start - REST API with @tapphq/sdk
// Install: npm install @tapphq/sdk
import { TappHQClient } from "@tapphq/sdk"

const client = new TappHQClient({
  apiKey: process.env.TAPPHQ_API_KEY,
})

// List open grant opportunities matching your org profile
const { data: grants } = await client.grants.search({
  limit: 10,
  minMatchScore: 0.7,
})

// Call an MCP tool directly via the REST API
const result = await client.mcp.call({
  tool: "compliance.get_expiring_soon",
  input: { expiringWithinDays: 30 },
})

Ready to build on agent-operable infrastructure?

Enterprise tier unlocks the full MCP write surface, A2A protocol, unlimited rate limits, and dedicated developer support.

See Enterprise pricing Contact sales