Koot by Datakoot MCP Server

Install Koot by Datakoot MCP server

claude mcp add --transport http koot https://koot.datakoot.com/mcp

{
  "mcpServers": {
    "koot": {
      "url": "https://koot.datakoot.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "koot": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://koot.datakoot.com/mcp"
      ]
    }
  }
}

{
  "servers": {
    "koot": {
      "type": "http",
      "url": "https://koot.datakoot.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "koot": {
      "serverUrl": "https://koot.datakoot.com/mcp"
    }
  }
}

Context tax

Connecting this server adds ~1,125 tokens of tool definitions to every model turn (moderate, 8 tools). Measured 2026-10-19 via its hosted endpoint; o200k tokenizer, worst case for clients that load all tools up front. How we measure

Input prices as of 2026-10-06. Excludes your own prompt and output.

Tools (8)

• koot_watch361 tok

  PRO. Tell Koot what to watch once: packages (or a pasted package.json) and/or companies (tickers). Koot remembers them and only reports what is NEW: newly exploited or likely-exploited vulnerabilities in your packages, and new SEC filings (8-K material events flagged) from your companies. Add notify_url (Slack or Discord webhook) and Koot posts new items there by itself, daily. Calling again adds to the list.

• brief_stack250 tok

  One call answers 'is my project safe?'. Checks every package for known vulnerabilities, tells you which are being EXPLOITED IN THE WILD right now (CISA KEV) or likely to be (EPSS), flags abandoned/deprecated packages, and returns a ranked fix-first list. Accepts a package list or a pasted package.json / requirements.txt.

• koot_unwatch93 tok

  PRO. Stop watching some packages or companies, all: true to stop and forget everything, or stop_alerts: true to turn off Slack/Discord alerts.

• brief_company84 tok

  One call briefs you on a US public company: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials. Give a ticker, name or CIK.

• brief_place74 tok

  One call briefs you on a US place: current conditions, forecast, active weather alerts for the state, nearby earthquakes and elevation.

• koot_whats_new73 tok

  PRO. Ask 'anything new?' and Koot reports only what changed since the last check: new exploited or likely-exploited issues in your watched packages and new SEC filings from your watched companies. Great to call at the start of every session.

• brief_domain72 tok

  One call checks a domain: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, and subdomains from certificate logs.

• koot_watches33 tok

  PRO. Lists what Koot is watching for you.

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 9d ago. The newest of the signals below sets the band.

1. Last commit (default branch)

   2026-10-09 · 9d ago · GitHub

2. Latest release

   no data · GitHub

3. Package published

   no data · npm/PyPI

4. Registry entry updated

   2026-10-09 · 9d ago · official registry · v1.2.2