SAM Key?

To be a federal contractor, you also have to be registered with SAM. If you don't have a login with SAM then you need to go there now and set that up. Before you do that, though, make sure you have an authenticator app installed. The authenticators are tools for accessing One-Time Codes (TOTP services).

How Do I Get A SAM Key?

Once you login to the SAM web site (SAM.gov) you will see a section on the default landing page (it is titled Workspace) with your name, email address, and some links. One of those links is "Account Details," click that. If you have the authority on the account then you will see a section for "Public API Keys" and a button to generate a new key.

The first time you generate an API key there might be a delay while the govvies review your request. Once you have a key, you will see a text box with "****" in it and a link to view or copy the API key next to that box. This is also where you will see a notice about when the key will expire.

SAM Account Details Page

Why?

To download attachments and to access detailed SAM searching, you need to use the SAM.gov site, or use an API Key to access the SAM.gov internal search API. Any entity, person or business, offering SAM search results that are more than that offered on the public search (which is an abbreviated result) is in violation of these rules. We do not engage in the entity management API, we only use the SAM search API. You are welcome to a video call with us to see for yourself that we are only using the search API.

Trust is important to us. Our cage code is 3CGN0. We've had this code for 20+ years. We are former govvies, current federal contractors, and former military personnel. We take security of this information seriously.

Authenticator App?

Login.gov and AskUncleSam.AI both use authenticators as a second form of authentication challenge. These are apps that you install on your mobile device. The Google Authenticator works on Android and iOS devices. There is also the Microsoft Authenticator which also works on Android and iOS. You probably already have one of these installed on your phone today.

Google Authenticator Microsoft Authenticator

What Should I Do With The Key?

You don't need to look at the key. You only need to click the "copy" button and then paste it into your profile page on AskUncleSam.

Don't give away your API key. This key can be used to access your SAM account without a login. Protect it like you would protect FCI (Federal Contractor Information). We only use it to do searches. SAM's terms of use preclude ANY non-human engaged use of the query tools (aka. No Bots). This is why we require the API key.

Your API key is encrypted in our system. We can't see it and there are no tools for viewing it. Only you can update the key.