Skip to main content
Glama

Koot by Datakoot

by com.datakoot
OverviewDiscussionsAdmin

Server Details

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
Repository
datakoot/koot-mcp
GitHub Stars
0

TDQS

Score is being calculated.

Available Tools

8 tools
brief_companyAsk Koot: Brief Me on a Company
Read-onlyIdempotent
Inspect

One call briefs you on a US public company: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials. Give a ticker, name or CIK.

ParametersJSON Schema
NameRequiredDescriptionDefault
companyYesTicker (TSLA), company name (Tesla) or CIK.

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
brief_domainAsk Koot: Check a Domain
Read-onlyIdempotent
Inspect

One call checks a domain: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, and subdomains from certificate logs.

ParametersJSON Schema
NameRequiredDescriptionDefault
domainYesDomain, e.g. stripe.com.

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
brief_placeAsk Koot: What's Happening at a Place?
Read-onlyIdempotent
Inspect

One call briefs you on a US place: current conditions, forecast, active weather alerts for the state, nearby earthquakes and elevation.

ParametersJSON Schema
NameRequiredDescriptionDefault
placeYesUS city or address, e.g. 'Harrisburg, PA'.

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
brief_stackAsk Koot: Is My Stack Safe?
Read-onlyIdempotent
Inspect

One call answers 'is my project safe?'. Checks every package for known vulnerabilities, tells you which are being EXPLOITED IN THE WILD right now (CISA KEV) or likely to be (EPSS), flags abandoned/deprecated packages, and returns a ranked fix-first list. Accepts a package list or a pasted package.json / requirements.txt.

ParametersJSON Schema
NameRequiredDescriptionDefault
manifestNoOr paste a whole package.json or requirements.txt here.
packagesNoPackages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. ["lodash@4.17.15", "express"].
ecosystemNoRegistry for string packages (default npm).

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
koot_unwatchKoot Watch: Stop Watching (Pro)
DestructiveIdempotent
Inspect

PRO. Stop watching some packages or companies, all: true to stop and forget everything, or stop_alerts: true to turn off Slack/Discord alerts.

ParametersJSON Schema
NameRequiredDescriptionDefault
allNo
packagesNo
companiesNo
stop_alertsNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
koot_watchKoot Watch: Watch My Stack & Companies (Pro)
Idempotent
Inspect

PRO. Tell Koot what to watch once: packages (or a pasted package.json) and/or companies (tickers). Koot remembers them and only reports what is NEW: newly exploited or likely-exploited vulnerabilities in your packages, and new SEC filings (8-K material events flagged) from your companies. Add notify_url (Slack or Discord webhook) and Koot posts new items there by itself, daily. Calling again adds to the list.

ParametersJSON Schema
NameRequiredDescriptionDefault
manifestNoOr paste a whole package.json or requirements.txt here.
packagesNoPackages as 'name' or 'name@version' strings (or {name, version, ecosystem} objects), e.g. ["lodash@4.17.15", "express"].
companiesNoUS public companies to watch for NEW SEC filings: tickers, names or CIKs, e.g. ["TSLA", "AAPL"]. Up to 25.
ecosystemNoRegistry for string packages (default npm).
notify_urlNoOptional. A Slack or Discord incoming-webhook URL. Koot checks daily and posts there only when something NEW is exploited or likely to be.

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
koot_watchesKoot Watch: What Are You Watching? (Pro)
Read-onlyIdempotent
Inspect

PRO. Lists what Koot is watching for you.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.
koot_whats_newKoot Brief: Anything New for Me? (Pro)Inspect

PRO. Ask 'anything new?' and Koot reports only what changed since the last check: new exploited or likely-exploited issues in your watched packages and new SEC filings from your watched companies. Great to call at the start of every session.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
kootYesKoot's one-line answer.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 8 tool updates
    • First observedbrief_company
    • First observedbrief_domain
    • First observedbrief_place
    • First observedbrief_stack
    • First observedkoot_unwatch
    • First observedkoot_watch
    • First observedkoot_watches
    • First observedkoot_whats_new

Related MCP Connectors

Related MCP Servers

  • contrastapi

    UPinar
    A
    license
    A
    quality
    A
    maintenance
    Security intelligence API for AI models. CVE lookup with EPSS/KEV, domain recon (DNS, WHOIS, SSL, subdomains, WAF), and code security checks (secrets, injection, headers). 16 tools, no API key required.
    55
    33
    MIT

  • vuln-intel-mcp

    rohanrajnist
    A
    license
    Not graded
    quality
    D
    maintenance
    Provides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.
    1
    MIT

  • Security Intel MCP

    datakoot
    A
    license
    Not graded
    quality
    B
    maintenance
    Vulnerability intelligence for AI agents that enables CVE lookup, package vulnerability checks, and dependency auditing without API keys.
    MIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources