Back to Browse

Koot MCP Server

Developer ToolsLow Risk10.0MCP RegistryRemote
Free

Server data from the Official MCP Registry

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

About

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

Remote endpoints: streamable-http: https://koot.datakoot.com/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 0 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

8 tools verified · Open access · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "com-datakoot-koot-briefings": {
      "url": "https://koot.datakoot.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Koot — by Datakoot

One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.

https://koot.datakoot.com/mcp

No API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.

Tools

ToolWhat it doesSources
brief_stack"Is my project safe?" Checks every package for known vulnerabilities, ranks them by real-world exploitation (CISA KEV, FIRST EPSS), flags abandoned packages and npm malware placeholders, and returns a fix-first listOSV.dev, CISA KEV, FIRST EPSS, npm / PyPI / crates.io
brief_companyA US public company in one call: SEC profile, recent filings (8-K material events flagged), insider trades and reported financialsSEC EDGAR
brief_domainA domain in one call: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, subdomains from certificate logsRDAP, DNS, Certificate Transparency
brief_placeA US place in one call: current conditions, forecast, active alerts for the state, nearby earthquakes, elevationNWS, USGS, US Census
koot_watchPro. Tell Koot once what to watch (packages, a pasted package.json, and/or company tickers). Optional daily alerts to Slack or Discord
koot_whats_newPro. "Anything new?" Reports only what changed: newly exploited or likely-exploited issues in your packages, and new SEC filings from your companies
koot_watchesPro. Lists what Koot is watching
koot_unwatchPro. Stop watching some or all items, or turn alerts off

Quick start

claude mcp add --transport http koot https://koot.datakoot.com/mcp

Or point any MCP client at https://koot.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

curl -s https://koot.datakoot.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["lodash@4.17.15","express@4.17.1"]}}}'

The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:lodash@4.17.15."

Or just ask your agent:

  • "Is my package.json safe to ship?"
  • "Brief me on Tesla's recent SEC filings."
  • "What's the weather risk in Pine Grove, PA today?"

Pricing

  • Free: 5 briefs a day, no key, no signup.
  • Pay per brief: $0.01 in USDC on Base through x402, with no account, at https://x402.datakoot.com/mcp.
  • Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as Authorization: Bearer <key> (or X-Datakoot-Key: <key>). Pricing.

Data & attribution

Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.

Part of Datakoot: official-source data for AI agents, one keyless call.

Reviews

No reviews yet

Be the first to review this server!