security-intel

endpoint

https://security.datakoot.com/mcp

protocol

streamable-http ·2025-06-18

authentication

none observed

public key

none — nobody has proven they own this listing · is it yours? claim it

karma

0 · newcomer

Is security-intel live?

Yes — it answered the hub's last check (checked 5m ago). It answered 100% of checks over the last 30 days.

Is security-intel free to use?

Yes — the hub reached it with no key and no payment.

What tools does security-intel have?

5 tools: package_vulnerabilities, epss_score, cve_lookup, audit_dependencies, known_exploited.

Is security-intel safe to connect?

The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

• known_exploited reads open 5m ago

  Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_only). Source: CISA KEV, updated ~daily.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [],
    "properties": {
      "limit": {
        "type": "number",
        "description": "When listing, how many newest entries to return (default 20, max 100)."
      },
      "cve_id": {
        "type": "string",
        "description": "Optional. Check a single CVE, e.g. CVE-2021-44228."
      },
      "vendor": {
        "type": "string",
        "description": "Optional. Filter by vendor or product name substring."
      },
      "ransomware_only": {
        "type": "boolean",
        "description": "Optional. Only vulns CISA links to known ransomware campaigns."
      }
    }
  }

  arguments 22 lines copy
• package_vulnerabilities reads unknown 16h ago

  List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "required": [
      "ecosystem",
      "name"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Exact package name as published in that registry, e.g. lodash for npm, requests for pypi."
      },
      "version": {
        "type": "string",
        "description": "Optional; if given, only vulns affecting that version are returned"
      },
      "ecosystem": {
        "type": "string",
        "description": "Package registry to look in. One of: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex."
      }
    }
  }

  arguments 21 lines copy
• epss_score reads unknown 5m ago

  Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [],
    "properties": {
      "cve_id": {
        "type": "string",
        "description": "A single CVE id."
      },
      "cve_ids": {
        "type": "array",
        "items": {
          "type": "string"
        },
        "description": "Multiple CVE ids (or pass a comma-separated string)."
      }
    }
  }

  arguments 17 lines copy
• cve_lookup reads unknown 16h ago

  Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) and its EPSS exploit-probability. Sources: NVD (NIST), CISA KEV, FIRST EPSS.

  mcp-tool

  123456789101112

  {
    "type": "object",
    "required": [
      "cve_id"
    ],
    "properties": {
      "cve_id": {
        "type": "string",
        "description": "CVE identifier, e.g. CVE-2021-44228 (case-insensitive; a bare 2021-44228 also works)."
      }
    }
  }

  arguments 12 lines copy
• audit_dependencies reads unknown 5m ago

  Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "required": [],
    "properties": {
      "manifest": {
        "type": "string",
        "description": "Raw package.json contents"
      },
      "ecosystem": {
        "type": "string",
        "description": "Package registry for the dependencies: npm (default), pypi, cargo, go, maven, rubygems, nuget, composer, pub, or hex."
      },
      "dependencies": {
        "type": "array",
        "items": {
          "type": "object"
        },
        "description": "[{name, version}] entries"
      }
    }
  }

  arguments 21 lines copy

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.

Served from the same domain, which is what was measured. Not a claim that one owner runs them: ownership is what a passport proves, and each of these says for itself.

• x402.datakoot.com datakoot-x402 mcp · 52 tools · karma 10
• koot.datakoot.com koot mcp · 8 tools
• domain.datakoot.com domain-intel mcp · 6 tools
• package.datakoot.com package-intel mcp · 6 tools
• weather.datakoot.com weather-intel mcp · 6 tools
• base.datakoot.com base-intel mcp · 5 tools
• economy.datakoot.com economy-intel mcp · 5 tools
• filings.datakoot.com filings-intel mcp · 5 tools

2 more sit on this domain. All of them.