Koot by Datakoot

Working · 1.5 s

com.datakoot/koot-briefingsv1.2.2 Domain verified

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

Security Developer Tools

Source Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://koot.datakoot.com/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

brief_company Read-only

One call briefs you on a US public company: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials. Give a ticker, name or CIK.

companystring, required

Ticker (TSLA), company name (Tesla) or CIK.

Tools (8)

brief_company

One call briefs you on a US public company: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials. Give a ticker, name or CIK.

read-only

Argument	Type	Description
company*	string	Ticker (TSLA), company name (Tesla) or CIK.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "company"
  ],
  "properties": {
    "company": {
      "type": "string",
      "description": "Ticker (TSLA), company name (Tesla) or CIK."
    }
  }
}

brief_domain

One call checks a domain: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, and subdomains from certificate logs.

read-only

Argument	Type	Description
domain*	string	Domain, e.g. stripe.com.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "description": "Domain, e.g. stripe.com."
    }
  }
}

brief_place

One call briefs you on a US place: current conditions, forecast, active weather alerts for the state, nearby earthquakes and elevation.

read-only

Argument	Type	Description
place*	string	US city or address, e.g. 'Harrisburg, PA'.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "place"
  ],
  "properties": {
    "place": {
      "type": "string",
      "description": "US city or address, e.g. 'Harrisburg, PA'."
    }
  }
}

brief_stack

One call answers 'is my project safe?'. Checks every package for known vulnerabilities, tells you which are being EXPLOITED IN THE WILD right now (CISA KEV) or likely to be (EPSS), flags abandoned/deprecated packages, and returns a ranked fix-first list. Accepts a package list or a pasted package.json / requirements.txt.

read-only

Argument	Type	Description
manifest	string	Or paste a whole package.json or requirements.txt here.
packages	array	Packages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. ["[email protected]", "express"].
ecosystem	string	Registry for string packages (default npm).

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "manifest": {
      "type": "string",
      "description": "Or paste a whole package.json or requirements.txt here."
    },
    "packages": {
      "type": "array",
      "items": {
        "anyOf": [
          {
            "type": "string"
          },
          {
            "type": "object",
            "required": [
              "name"
            ],
            "properties": {
              "name": {
                "type": "string"
              },
              "version": {
                "type": "string"
              },
              "ecosystem": {
                "type": "string"
              }
            }
          }
        ]
      },
      "description": "Packages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. [\"[email protected]\", \"express\"]."
    },
    "ecosystem": {
      "enum": [
        "npm",
        "pypi",
        "cargo",
        "go",
        "maven",
        "rubygems",
        "nuget",
        "composer"
      ],
      "type": "string",
      "description": "Registry for string packages (default npm)."
    }
  }
}

koot_unwatch

PRO. Stop watching some packages or companies, all: true to stop and forget everything, or stop_alerts: true to turn off Slack/Discord alerts.

destructive

Argument	Type	Description
all	boolean
packages	array
companies	array
stop_alerts	boolean

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "all": {
      "type": "boolean"
    },
    "packages": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "companies": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "stop_alerts": {
      "type": "boolean"
    }
  }
}

koot_watch

PRO. Tell Koot what to watch once: packages (or a pasted package.json) and/or companies (tickers). Koot remembers them and only reports what is NEW: newly exploited or likely-exploited vulnerabilities in your packages, and new SEC filings (8-K material events flagged) from your companies. Add notify_url (Slack or Discord webhook) and Koot posts new items there by itself, daily. Calling again adds to the list.

Argument	Type	Description
manifest	string	Or paste a whole package.json or requirements.txt here.
packages	array	Packages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. ["[email protected]", "express"].
companies	array	US public companies to watch for NEW SEC filings: tickers, names or CIKs, e.g. ["TSLA", "AAPL"]. Up to 25.
ecosystem	string	Registry for string packages (default npm).
notify_url	string	Optional. A Slack or Discord incoming-webhook URL. Koot checks daily and posts there only when something NEW is exploited or likely to be.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "manifest": {
      "type": "string",
      "description": "Or paste a whole package.json or requirements.txt here."
    },
    "packages": {
      "type": "array",
      "items": {
        "anyOf": [
          {
            "type": "string"
          },
          {
            "type": "object",
            "required": [
              "name"
            ],
            "properties": {
              "name": {
                "type": "string"
              },
              "version": {
                "type": "string"
              },
              "ecosystem": {
                "type": "string"
              }
            }
          }
        ]
      },
      "description": "Packages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. [\"[email protected]\", \"express\"]."
    },
    "companies": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "US public companies to watch for NEW SEC filings: tickers, names or CIKs, e.g. [\"TSLA\", \"AAPL\"]. Up to 25."
    },
    "ecosystem": {
      "enum": [
        "npm",
        "pypi",
        "cargo",
        "go",
        "maven",
        "rubygems",
        "nuget",
        "composer"
      ],
      "type": "string",
      "description": "Registry for string packages (default npm)."
    },
    "notify_url": {
      "type": "string",
      "description": "Optional. A Slack or Discord incoming-webhook URL. Koot checks daily and posts there only when something NEW is exploited or likely to be."
    }
  }
}

koot_watches

PRO. Lists what Koot is watching for you.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {}
}

koot_whats_new

PRO. Ask 'anything new?' and Koot reports only what changed since the last check: new exploited or likely-exploited issues in your watched packages and new SEC filings from your watched companies. Great to call at the start of every session.

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {}
}