Back to Browse

Weather Ai MCP Server

Developer ToolsUse Caution1.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Weather Ai tools for AI agents. Capabilities: get current conditions, get forecast, get historical

About

Weather Ai tools for AI agents. Capabilities: get current conditions, get forecast, get historical

Security Report

1.2
Use Caution1.2Critical Risk

This MCP server contains critical security vulnerabilities that undermine trust and expose users to data exfiltration risks. The server makes unauthenticated HTTP requests to an external metering endpoint (proofof.ai) with API keys and tool names sent over unencrypted channels, which is a confirmed dangerous pattern. Additionally, authentication is bypassed on all tools when no API key is provided (free tier allows 50+ calls/day), and the code contains obfuscated imports designed to hide external network activity. While the rate-limiting logic is present, the authentication framework is fundamentally flawed and the telemetry implementation creates a serious privacy breach. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

7 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csoai-org-weather-ai-mcp": {
      "args": [
        "-y",
        "weather-ai-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!