# KokoCallMCP (npm · koko-call-mcp)

Read-only MCP server for searching Japan government procurement bid information from the KKJ portal.

- Trust score: 66/100 (medium)
- Change this week: +15
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `koko-call-mcp`: 66/100 (this document), [markdown](https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp.md), [page](https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp)

## Channel facts

- Registry: `npm`
- Package: `koko-call-mcp`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (103 of 104), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (103 of 104), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 93 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 67/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (fair).
  - Tool/resource definitions use about 624 tokens (~89/item across 7 items; 4 tools + 3 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 87/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 54% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add sugukurukabe-koko-call -- npx -y koko-call-mcp
```

### Codex

```bash
codex mcp add sugukurukabe-koko-call -- npx -y koko-call-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sugukurukabe-koko-call": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "koko-call-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add sugukurukabe-koko-call --command npx --arg -y --arg koko-call-mcp
```

### Hermes

```yaml
mcp_servers:
  sugukurukabe-koko-call:
    command: "npx"
    args: ["-y", "koko-call-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "sugukurukabe-koko-call": {
      "command": "npx",
      "args": [
        "-y",
        "koko-call-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 66, +4)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 62, +37)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → fair
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: Apache-2.0

### 2026-07-31 (score 25, −8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 33, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 51)

First indexed and scored.

## MCP tools (4)

### `search_bids` (~304 tokens)

官公需入札検索

日本全国の官公需入札情報を検索する。全文検索は query、件名だけの絞り込みは project_name、発注機関は organization_name を使う。公告日、入札開始日、開札日、納入期限日でも絞り込める。

Input parameters:

- `category` (string)
- `certification` (array)
- `due_after` (string): 入札開始日 YYYY-MM-DD 以降
- `due_before` (string): 入札開始日 YYYY-MM-DD 以前
- `issued_after` (string): 公告日 YYYY-MM-DD 以降
- `issued_before` (string): 公告日 YYYY-MM-DD 以前
- `limit` (integer)
- `opening_after` (string): 開札日 YYYY-MM-DD 以降
- `opening_before` (string): 開札日 YYYY-MM-DD 以前
- `organization_name` (string)
- `period_end_after` (string): 納入期限日 YYYY-MM-DD 以降
- `period_end_before` (string): 納入期限日 YYYY-MM-DD 以前
- `prefecture`
- `procedure_type` (string)
- `project_name` (string): 件名で絞り込む場合に指定します。
- `query` (string): 自由記述キーワード。複数キーワードはAND結合で検索されます。

Output parameters:

- `attribution` (object)
- `bids` (array)
- `query` (object)
- `returnedCount` (integer)
- `searchHits` (integer)

### `list_recent_bids` (~78 tokens)

直近の官公需入札一覧

過去1日から30日間に公告された新着官公需入札を一覧する。毎朝の営業チェックや地域別の新着確認に使う。

Input parameters:

- `category` (string)
- `days` (integer)
- `limit` (integer)
- `prefecture` (string)

Output parameters:

- `attribution` (object)
- `bids` (array)
- `query` (object)
- `returnedCount` (integer)
- `searchHits` (integer)

### `get_bid_detail` (~61 tokens)

官公需入札詳細

入札Keyから1件の詳細を取得する。添付資料は保存せず、公式サイトのURIのみ返す。

Input parameters:

- `bid_key` (string, required): search_bids または list_recent_bids が返した Key フィールド

Output parameters:

- `attribution` (object)
- `bids` (array)
- `query` (object)
- `returnedCount` (integer)
- `searchHits` (integer)

### `summarize_bids_by_org` (~88 tokens)

発注機関別の入札傾向分析

発注機関名を指定して、カテゴリ別・公示種別別の入札傾向と直近案件を集計する。

Input parameters:

- `limit` (integer)
- `organization_name` (string, required): 分析対象の発注機関名
- `since` (string): YYYY-MM-DD 以降。未指定なら過去1年。

Output parameters:

- `attribution` (object)
- `categories` (object)
- `organizationName` (string)
- `procedureTypes` (object)
- `recentProjects` (array)
- `returnedCount` (integer)
- `totalHits` (integer)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 62
- 2026-08-01: 25
- 2026-07-31: 25
- 2026-07-30: 33
- 2026-07-28: 51
- 2026-07-27: 51

## Links

- npm package: https://www.npmjs.com/package/koko-call-mcp
- Socket report: https://socket.dev/npm/package/koko-call-mcp
- Repository: https://github.com/sugukurukabe/koko-call-mcp
- Changelog RSS feed: https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/sugukurukabe-koko-call/koko-call-mcp