CyberGrants API
CyberGrants (now part of Bonterra) is an enterprise corporate social responsibility platform that powers grants management, employee giving, matching gifts, and volunteering for corporations and foundations. CyberGrants does not offer a public API, so an unofficial API lets you programmatically pull grant applications, awards, donations, matching gifts, volunteer hours, and vetted nonprofit records—and push updates like application status changes, disbursements, and match approvals back into CyberGrants.
What is CyberGrants?
CyberGrants, now part of Bonterra, is an enterprise corporate social responsibility (CSR) platform that gives CSR teams the configurability, compliance controls, and reporting depth that complex global programs demand. Corporations and foundations use CyberGrants to run the full grantmaking lifecycle—application intake, review and approval, award disbursement, impact tracking, and reporting—alongside employee giving, matching gifts, volunteering, nonprofit vetting, and disaster-relief programs, with multi-country compliance and multi-currency processing built in.
Core product areas include:
- CyberGrants grantmaking (configurable workflows, foundation grants, compliance controls, real-time reporting)
- Employee giving and matching gifts (offline, credit card, and payroll-deduction donations with matching)
- Deed Engage (mobile-first employee participation to discover causes, donate, and volunteer)
- Volunteer management (group events and individual volunteer-hour tracking)
- Nonprofit vetting and disbursement services (verified nonprofits through the Bonterra Network)
- Disaster-relief programs and impact reporting and analytics
Common data entities:
- Grant Applications, Reviews, Awards, Disbursements, Budgets
- Employee Donations, Matching Gifts, Pledges, Payroll Deductions
- Volunteer Events, Volunteer Hours, Participation Records
- Nonprofits/Grantees, Eligibility and Vetting Status, Watchlist Results
- Workflow Steps, Statuses, Approvals, Roles and Permissions
- Compliance Documentation, Tax Status, Impact Reports
The CyberGrants Integration Challenge
Enterprise CSR teams run mission-critical grantmaking and giving programs on CyberGrants, but turning its portal- and workflow-driven processes into API-driven automation is non-trivial:
- No public API: CyberGrants does not expose a documented public API, so programmatic access to grants, donations, and volunteer data has historically meant manual exports
- Per-program configuration: Workflows, statuses, eligibility quizzes, and forms are tailored per client—generic integrations break across program configurations
- Workflow-engine state: A dynamic workflow engine enforces permissions and executes rules per step, so data is gated behind roles and approval stages rather than open endpoints
- Multi-program spread: Grantmaking, employee giving, matching gifts, and Deed volunteering each have their own object models, IDs, and lifecycle states that must be reconciled
- Compliance and vetting gates: Nonprofit vetting, tax-status checks, and watchlist scanning add review steps that headless automation has to respect
- Authentication complexity: Enterprise SSO and MFA are common in CSR deployments and complicate unattended automation
How Supergood Creates CyberGrants APIs
Supergood reverse-engineers authenticated browser flows across the CyberGrants grantmaking, employee giving, and volunteering surfaces to deliver a resilient, normalized API layer for your CSR program—without waiting on a public API that does not exist.
- Handles username/password, enterprise SSO, and MFA (SMS, email, TOTP) securely
- Maintains session continuity with automated refresh and change detection
- Normalizes responses across grant applications, awards, donations, matches, and volunteer hours so you integrate once and rely on consistent objects
- Aligns with your program-specific workflows, statuses, roles, and entitlements to ensure compliant access
Use CyberGrants with AI agents: CyberGrants MCP Server →
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your programs, modules, and authentication model.
- Supergood Generates and Validates Your API
We deliver a production-ready CyberGrants adapter tailored to your program configuration and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as CyberGrants evolves.
API Endpoints
Authentication
/authenticateAuthenticate to a CyberGrants tenant using username/password, enterprise SSO, or MFA and obtain a session token for downstream calls.
Grants
/applicationsList grant applications with filters for program, status, review stage, and submission date range.
Grants
/update_application_statusAdvance a grant application through the configured workflow—review, approval, decline, or award.
Grants
/awardsRetrieve awards, budgets, and disbursement activity for funded grants with status and grantee filters.
Giving
/donationsPull employee donations and matching gifts across offline, credit card, and payroll-deduction channels.
Volunteering
/volunteer_hoursRetrieve volunteer events, individual and group hours, and participation records from the engagement program.
Use Cases
Sync grants and awards into a warehouse
- Pull grant applications, reviews, awards, and disbursements into a single reporting warehouse - Stream status changes through the workflow engine to downstream BI and finance tools - Reconcile grantee/nonprofit records and budgets across programs for unified impact reporting
Automate employee giving and matching gifts
- Pull employee donations and matched gifts across offline, credit card, and payroll channels - Push match approvals and status updates back into CyberGrants without portal clicks - Reconcile pledges and disbursements against payroll and accounting systems
Track volunteering and CSR engagement
- Sync volunteer events and hours from Deed and CyberGrants into engagement dashboards - Connect employee participation data with grantmaking outcomes for combined impact metrics - Surface high-engagement causes and employees to program managers automatically
Keep nonprofit and compliance data in sync
- Pull vetted nonprofit/grantee records, tax status, and watchlist results for due diligence - Trigger compliance and eligibility checks as applications move through review - Export impact reports and compliance documentation to corporate reporting systems
Technical Specifications
Authentication
Username/password, enterprise SSO, and MFA (SMS, email, TOTP) handled in a managed session
Connectivity
Authenticated browser flows across the CyberGrants grantmaking, giving, and volunteering surfaces—no public API required
Response format
Normalized JSON across Applications, Awards, Donations, Matches, and Volunteer Hours objects
Rate limits
Adaptive throttling tuned to your tenant to avoid platform-side limits
Session management
Automatic session refresh, MFA replay handling, and credential rotation
Data freshness
Near real-time pulls for applications, donations, and volunteer hours with optional scheduled batch syncs
Security
Encrypted credential vault, scoped access tokens, SOC 2-aligned controls, and audit logging
Webhooks
Event-style callbacks for application status changes, award disbursement, match approval, and volunteer logging
Latency
Sub-second reads on cached entities; multi-second writes when posting through workflow and approval steps
Throughput
Horizontally scaled workers sized to enterprise grantmaking and giving volume
Reliability
Retry, backoff, and idempotency keys for application updates, disbursements, and match approvals
Adaptation
Continuous monitoring of CyberGrants and Bonterra platform releases and per-program configuration drift
Frequently asked questions
No. CyberGrants does not offer a documented public API. Supergood delivers an unofficial API by automating authenticated sessions, so you get programmatic access to grants, donations, and volunteer data without waiting on a vendor API.
Yes. Supergood normalizes data across CyberGrants grantmaking, employee giving and matching gifts, and Deed volunteering, so you can integrate applications, awards, donations, matches, and volunteer hours once across all programs.
Each program is profiled against its configured workflows, statuses, forms, and roles. Supergood preserves your program-specific fields, lifecycle states, and entitlements rather than forcing a generic schema.
Yes. Beyond reads, the API supports writes such as advancing application status, approving matching gifts, and recording disbursements, executed through the platform's workflow engine with proper permissions.
Vetted nonprofit/grantee records, tax status, and watchlist results are exposed through the same normalized surface, so due-diligence and compliance data sits alongside grant and giving entities for reporting.