About Koot by Datakoot
Koot by Datakoot combines public-data lookups into concise briefings for AI agents on software dependencies, US public companies, domains and US places. It includes dependency risk ranking and, on Pro, monitoring with optional Slack or Discord alerts.
Key features
- 01Assess package vulnerabilities and risk
- 02Summarize SEC company data and filings
- 03Check domain registration, DNS and email security
- 04Brief current conditions and alerts for US places
- 05Monitor packages and companies on Pro
Use cases
- 01Prioritize fixes for vulnerable dependencies
- 02Review a company’s recent SEC filings
- 03Inspect a domain’s email security setup
- 04Check weather and active alerts for a US place
MCP support
Exposes briefing and monitoring tools through an MCP server, combining data from public sources. Pro monitoring tools include watches, change reports and optional Slack or Discord alerts.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://koot.datakoot.com/mcpclaude mcp add --transport http com-datakoot-koot-briefings https://koot.datakoot.com/mcp{"mcpServers":{"com-datakoot-koot-briefings":{"type":"http","url":"https://koot.datakoot.com/mcp"}}}Open in Cursor{"servers":{"com-datakoot-koot-briefings":{"type":"http","url":"https://koot.datakoot.com/mcp"}}}Open in VS Code{"mcpServers":{"com-datakoot-koot-briefings":{"type":"http","url":"https://koot.datakoot.com/mcp"}}}{"mcpServers":{"com-datakoot-koot-briefings":{"serverUrl":"https://koot.datakoot.com/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
8| Parameter | Type | Required | Description |
|---|---|---|---|
| manifest | string | No | Or paste a whole package.json or requirements.txt here. |
| packages | array | No | Packages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. ["[email protected]", "express"]. |
| ecosystem | enum | No | Registry for string packages (default npm).npm | pypi | cargo | go | maven | rubygems | nuget | composer |
Details
From the project READMEKoot — by Datakoot
One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.
https://koot.datakoot.com/mcp
No API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.
Tools
| Tool | What it does | Sources |
|---|---|---|
brief_stack | "Is my project safe?" Checks every package for known vulnerabilities, ranks them by real-world exploitation (CISA KEV, FIRST EPSS), flags abandoned packages and npm malware placeholders, and returns a fix-first list | OSV.dev, CISA KEV, FIRST EPSS, npm / PyPI / crates.io |
brief_company | A US public company in one call: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials | SEC EDGAR |
brief_domain | A domain in one call: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, subdomains from certificate logs | RDAP, DNS, Certificate Transparency |
brief_place | A US place in one call: current conditions, forecast, active alerts for the state, nearby earthquakes, elevation | NWS, USGS, US Census |
koot_watch | Pro. Tell Koot once what to watch (packages, a pasted package.json, and/or company tickers). Optional daily alerts to Slack or Discord | |
koot_whats_new | Pro. "Anything new?" Reports only what changed: newly exploited or likely-exploited issues in your packages, and new SEC filings from your companies | |
koot_watches | Pro. Lists what Koot is watching | |
koot_unwatch | Pro. Stop watching some or all items, or turn alerts off |
Quick start
claude mcp add --transport http koot https://koot.datakoot.com/mcp
Or point any MCP client at https://koot.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
curl -s https://koot.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["[email protected]","[email protected]"]}}}'
The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:[email protected]."
Or just ask your agent:
- "Is my package.json safe to ship?"
- "Brief me on Tesla's recent SEC filings."
- "What's the weather risk in Pine Grove, PA today?"
Pricing
- Free: 5 briefs a day, no key, no signup.
- Pay per brief: $0.01 in USDC on Base through x402, with no account, at
https://x402.datakoot.com/mcp. - Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as
Authorization: Bearer <key>(orX-Datakoot-Key: <key>). Pricing.
Data & attribution
Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.
Part of Datakoot: official-source data for AI agents, one keyless call.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.