English Français العربية

Koot by Datakoot

Official registry AI and agents

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "koot-by-datakoot": {
            "type": "http",
            "url": "https://koot.datakoot.com/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Koot — by Datakoot
  2. Tools
  3. Quick start
  4. Try it in 10 seconds — no key, no signup
  5. Pricing
  6. Data & attribution

Koot — by Datakoot

One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.

https://koot.datakoot.com/mcp

No API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.

Tools

ToolWhat it doesSources
brief_stack"Is my project safe?" Checks every package for known vulnerabilities, ranks them by real-world exploitation (CISA KEV, FIRST EPSS), flags abandoned packages and npm malware placeholders, and returns a fix-first listOSV.dev, CISA KEV, FIRST EPSS, npm / PyPI / crates.io
brief_companyA US public company in one call: SEC profile, recent filings (8-K material events flagged), insider trades and reported financialsSEC EDGAR
brief_domainA domain in one call: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, subdomains from certificate logsRDAP, DNS, Certificate Transparency
brief_placeA US place in one call: current conditions, forecast, active alerts for the state, nearby earthquakes, elevationNWS, USGS, US Census
koot_watchPro. Tell Koot once what to watch (packages, a pasted package.json, and/or company tickers). Optional daily alerts to Slack or Discord
koot_whats_newPro. "Anything new?" Reports only what changed: newly exploited or likely-exploited issues in your packages, and new SEC filings from your companies
koot_watchesPro. Lists what Koot is watching
koot_unwatchPro. Stop watching some or all items, or turn alerts off

Quick start

claude mcp add --transport http koot https://koot.datakoot.com/mcp

Or point any MCP client at https://koot.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

curl -s https://koot.datakoot.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["lodash@4.17.15","express@4.17.1"]}}}'

The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:lodash@4.17.15."

Or just ask your agent:

  • "Is my package.json safe to ship?"
  • "Brief me on Tesla's recent SEC filings."
  • "What's the weather risk in Pine Grove, PA today?"

Pricing

  • Free: 5 briefs a day, no key, no signup.
  • Pay per brief: $0.01 in USDC on Base through x402, with no account, at https://x402.datakoot.com/mcp.
  • Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as Authorization: Bearer <key> (or X-Datakoot-Key: <key>). Pricing.

Data & attribution

Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.

Part of Datakoot: official-source data for AI agents, one keyless call.

Frequently asked questions

What is Koot by Datakoot?

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

How do I install Koot by Datakoot?

It runs as a remote server. In Claude Code: claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Koot by Datakoot need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Koot by Datakoot open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains Koot by Datakoot?

It is published by datakoot. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.