# Koot by Datakoot

Answers questions about dependencies, public companies, domains and US places in a single call, with the details tucked under a one-line reply.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: datakoot
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/datakoot/koot-mcp
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/mcp/koot-by-datakoot

## What it does

Koot pulls from official sources and hands your agent a short answer instead of a pile of raw lookups. Four tools cover the ground: `brief_stack` scans packages for known vulnerabilities, orders them by how likely they are to be exploited for real, and marks abandoned packages and npm malware placeholders; `brief_company` returns a SEC EDGAR profile, recent filings, insider trades and reported financials; `brief_domain` covers registration, DNS, SPF/DKIM/DMARC, tech stack and subdomains from certificate logs; `brief_place` gives current conditions, forecast, state alerts, nearby earthquakes and elevation.

Setup is one line: `claude mcp add --transport http koot-briefings https://koot.datakoot.com/mcp`. No key is required for the free tier of 5 briefs a day. Past that you either pay per call in USDC on Base through x402 or take Pro at $15/mo, which lifts the limit and unlocks Koot Watch — a list of packages and tickers the server tracks, with optional daily Slack or Discord alerts and a report of only what changed.

The Koot Watch tools are Pro-only, so on the free tier they simply won't run. Data comes from NIST NVD, CISA KEV, FIRST EPSS, OSV.dev, SEC EDGAR, NWS, USGS and the US Census Bureau, and it isn't resold.

## Requirements
- Remote server: `https://koot.datakoot.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http koot-briefings https://koot.datakoot.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add koot-by-datakoot --url https://koot.datakoot.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "koot-by-datakoot": {
            "url": "https://koot.datakoot.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "koot-by-datakoot": {
            "type": "http",
            "url": "https://koot.datakoot.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http koot-by-datakoot https://koot.datakoot.com/mcp
```

## When to use it
- check a project's packages for known vulnerabilities before shipping
- decide which issues to fix first by exploitation likelihood
- read a public company's recent filings and insider trades
- assess a domain's email security via SPF, DKIM and DMARC records
- track changes in packages and company filings without manual checks

## Example prompts
- Check my `package.json` — what should I fix first?
- Brief me on Tesla's recent SEC filings.

## Similar
- [ghost-scan-deps](https://affpapa.org/en/nevibecode/skills/ghost-scan-deps.md) — skill · 4300 installs
- [ghost-repo-context](https://affpapa.org/en/nevibecode/skills/ghost-repo-context.md) — skill · 3800 installs
- [dependency-checker](https://affpapa.org/en/nevibecode/hooks/dependency-checker.md) — hook · 2314 installs
- [dependencies-audit](https://affpapa.org/en/nevibecode/skills/dependencies-audit.md) — skill · 1900 installs
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1816
- [shodan](https://affpapa.org/en/nevibecode/mcp/w0h1v-shodan.md) — MCP server · ★ 180

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md