Koot by Datakoot
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'
{
"mcpServers": {
"koot-by-datakoot": {
"type": "http",
"url": "https://koot.datakoot.com/mcp"
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Sommaire
Koot — by Datakoot
One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.
https://koot.datakoot.com/mcp
No API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.
Tools
| Tool | What it does | Sources |
|---|---|---|
brief_stack | "Is my project safe?" Checks every package for known vulnerabilities, ranks them by real-world exploitation (CISA KEV, FIRST EPSS), flags abandoned packages and npm malware placeholders, and returns a fix-first list | OSV.dev, CISA KEV, FIRST EPSS, npm / PyPI / crates.io |
brief_company | A US public company in one call: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials | SEC EDGAR |
brief_domain | A domain in one call: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, subdomains from certificate logs | RDAP, DNS, Certificate Transparency |
brief_place | A US place in one call: current conditions, forecast, active alerts for the state, nearby earthquakes, elevation | NWS, USGS, US Census |
koot_watch | Pro. Tell Koot once what to watch (packages, a pasted package.json, and/or company tickers). Optional daily alerts to Slack or Discord | |
koot_whats_new | Pro. "Anything new?" Reports only what changed: newly exploited or likely-exploited issues in your packages, and new SEC filings from your companies | |
koot_watches | Pro. Lists what Koot is watching | |
koot_unwatch | Pro. Stop watching some or all items, or turn alerts off |
Quick start
claude mcp add --transport http koot https://koot.datakoot.com/mcp
Or point any MCP client at https://koot.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
curl -s https://koot.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["lodash@4.17.15","express@4.17.1"]}}}'
The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:lodash@4.17.15."
Or just ask your agent:
- "Is my package.json safe to ship?"
- "Brief me on Tesla's recent SEC filings."
- "What's the weather risk in Pine Grove, PA today?"
Pricing
- Free: 5 briefs a day, no key, no signup.
- Pay per brief: $0.01 in USDC on Base through x402, with no account, at
https://x402.datakoot.com/mcp. - Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as
Authorization: Bearer <key>(orX-Datakoot-Key: <key>). Pricing.
Data & attribution
Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.
Part of Datakoot: official-source data for AI agents, one keyless call.
Questions fréquentes
Qu'est-ce que Koot by Datakoot ?
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
Comment installer Koot by Datakoot ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour Koot by Datakoot ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
Koot by Datakoot est-il open source ?
Oui. Son code est sur GitHub sous licence MIT.
Qui maintient Koot by Datakoot ?
Il est publié par datakoot. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.