
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
koko-call-mcp
Advanced tools
KokoCallMCP provides Japan government procurement bid search through the Model Context Protocol.
KokoCallMCP は、日本全国の官公需入札情報を Claude、Cursor、VS Code などのMCPクライアントから検索するための読み取り専用MCPサーバーです。
出典: 中小企業庁 官公需情報ポータルサイト 検索API。
search_bids、list_recent_bids、get_bid_detail、summarize_bids_by_org の4ツール。attribution を含め、出典明記を強制。query: 全文検索。複数キーワードや幅広い探索に使います。project_name: 件名だけを絞り込む場合に使います。organization_name: 発注機関名で探す場合に使います。prefecture: 都道府県で絞り込む場合に使います。issued_* は公告日、due_* は入札開始日、opening_* は開札日、period_end_* は納入期限日です。npm install
npm run build
npm start
Published package name:
npx koko-call-mcp
Check the CLI without starting an MCP session:
npx koko-call-mcp --help
HTTP:
npm run start:http
Streamable HTTP deployment is supported by the server, but the public MCP Registry metadata only advertises the stdio package until a live Cloud Run URL is deployed.
npm run check
npm run bench
npm run api:health
npm run build:repro
npm run release:gate
npm run publish:dry-run
docs/architecture.mddocs/inspector.mddocs/deployment-cloud-run.mddocs/release.mddocs/reproducible-builds.mddocs/api-health-check.mddocs/releases/v0.2.0.mddocs/demo-script.mdKokoCallMCP is a read-only MCP server for searching Japan government procurement bid information from MCP clients such as Claude, Cursor, and VS Code.
Source: Small and Medium Enterprise Agency KKJ procurement search API.
search_bids, list_recent_bids, get_bid_detail, and summarize_bids_by_org.attribution.query: full-text search for broad discovery.project_name: project-title filtering.organization_name: buyer or issuing organization filtering.prefecture: prefecture filtering.issued_* is notice date, due_* is tender submission date, opening_* is opening date, and period_end_* is delivery/end date.KokoCallMCP adalah server MCP read-only untuk mencari informasi tender pengadaan pemerintah Jepang dari klien MCP seperti Claude, Cursor, dan VS Code.
Sumber: API pencarian pengadaan KKJ dari Small and Medium Enterprise Agency.
search_bids, list_recent_bids, get_bid_detail, dan summarize_bids_by_org.attribution.query: pencarian full-text untuk eksplorasi luas.project_name: filter berdasarkan judul proyek.organization_name: filter berdasarkan instansi pembeli atau penerbit.prefecture: filter berdasarkan prefektur.issued_* untuk tanggal pengumuman, due_* untuk tanggal mulai tender, opening_* untuk tanggal pembukaan, dan period_end_* untuk tanggal akhir pengiriman.FAQs
KokoCallMCP provides Japan government procurement bid search through the Model Context Protocol.
We found that koko-call-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.