Koot by Datakoot MCP server
online · 100% uptimeOne-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
0 stars
Reviews
Write oneNobody has reviewed Koot by Datakoot yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Koot by Datakoot tools (8)
write = sends, deletes, buys or postsbrief_companyFreeOne call briefs you on a US public company: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials. Give a ticker, name or CIK.
brief_domainFreeOne call checks a domain: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, and subdomains from certificate logs.
brief_placeFreeOne call briefs you on a US place: current conditions, forecast, active weather alerts for the state, nearby earthquakes and elevation.
brief_stackFreeOne call answers 'is my project safe?'. Checks every package for known vulnerabilities, tells you which are being EXPLOITED IN THE WILD right now (CISA KEV) or likely to be (EPSS), flags abandoned/deprecated packages, and returns a ranked fix-first list. Accepts a package list or a pasted package.json / requirements.txt.
koot_unwatchFreePRO. Stop watching some packages or companies, all: true to stop and forget everything, or stop_alerts: true to turn off Slack/Discord alerts.
koot_watchFreePRO. Tell Koot what to watch once: packages (or a pasted package.json) and/or companies (tickers). Koot remembers them and only reports what is NEW: newly exploited or likely-exploited vulnerabilities in your packages, and new SEC filings (8-K material events flagged) from your companies. Add notify_url (Slack or Discord webhook) and Koot posts new items there by itself, daily. Calling again adds to the list.
koot_watchesFreePRO. Lists what Koot is watching for you.
koot_whats_newFreePRO. Ask 'anything new?' and Koot reports only what changed since the last check: new exploited or likely-exploited issues in your watched packages and new SEC filings from your watched companies. Great to call at the start of every session.
Public scan report
scanner v0.1.10 · 2026-10-09 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 396ms20/20
- Tool poisoning8 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
How Koot by Datakoot compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 85% of 48,255 servers
- Tools
- 8
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 53 ms
- faster than 92% of 30,031 servers
What its tools let an agent do: 8 read
Install Koot by Datakoot in Claude Code, Cursor or VS Code
claude mcp add --transport http koot-briefings https://koot.datakoot.com/mcp
What the publisher says
From the Koot by Datakoot repository's README, as published. We do not edit it. Read it on GitHub
Koot — by Datakoot
One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.
https://koot.datakoot.com/mcpNo API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.
Tools
Quick start
claude mcp add --transport http koot https://koot.datakoot.com/mcpOr point any MCP client at https://koot.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
curl -s https://koot.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["lodash@4.17.15","express@4.17.1"]}}}'The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:lodash@4.17.15."
Or just ask your agent:
- "Is my package.json safe to ship?"
- "Brief me on Tesla's recent SEC filings."
- "What's the weather risk in Pine Grove, PA today?"
Pricing
- Free: 5 briefs a day, no key, no signup.
- Pay per brief: $0.01 in USDC on Base through x402, with no account, at https://x402.datakoot.com/mcp.
- Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as Authorization: Bearer (or X-Datakoot-Key: ). Pricing.
Data & attribution
Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.
Part of Datakoot: official-source data for AI agents, one keyless call.
Nothing above is checked by us. What we check is on the safety report.
Koot by Datakoot: common questions
- Is Koot by Datakoot MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Koot by Datakoot safety report
- How do I install Koot by Datakoot?
- It runs remotely at koot.datakoot.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Koot by Datakoot need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Koot by Datakoot maintained?
- The last commit was 26 days ago (2026-10-09). The latest release is v1.2.2.
- Is Koot by Datakoot up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Koot by Datakoot compare with other MCP servers?
- safety score 91/100 (higher than 85% of 48,255 servers); tools 8 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.