grade F

10 days ago

glama

MCP Weather Server

Provides real-time weather information and multi-day forecasts using the Open-Meteo API through a robust, enterprise-grade architecture. It enables AI assistants to retrieve current conditions, 7-day forecasts, and contextual weather data for any location.

→ kumaran-is/mcp-weather-server · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 7 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 1 credential: API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_ORIGINS

🔐 secretAPI_KEY

configAPI_TIMEOUT

configAUDIT_LOGGING_ENABLED

configAUDIT_LOG_FILE

configAUDIT_LOG_SYSLOG

configBASE_RETRY_DELAY

configBODY_TIMEOUT

configBULKHEAD_MAX_CONCURRENT

configBULKHEAD_MAX_QUEUE_SIZE

configBULKHEAD_QUEUE_TIMEOUT

configCONNECT_TIMEOUT

configHEADERS_TIMEOUT

configHOST

configJITTER_FACTOR

configKEEP_ALIVE_MAX_TIMEOUT

configKEEP_ALIVE_TIMEOUT

configLOG_LEVEL— "": "info",

configMAX_CONCURRENT_REQUESTS

configMAX_INPUT_TOKENS

configMAX_OUTPUT_TOKENS

configMAX_RETRIES

configMAX_RETRY_DELAY

configMAX_TOTAL_TOKENS

configMCP_HTTP_PORT— 8080 # For HTTP transport

configMCP_SERVER_API_KEYS

configMCP_TRANSPORT— "": "stdio",

configPOOL_CONNECTIONS

configPOOL_PIPELINING

configPORT

configPREFERRED_RESPONSE_SIZE

configRATE_LIMIT_BURST

configRATE_LIMIT_PER_SECOND

configRATE_LIMIT_REQUESTS

configRATE_LIMIT_SLIDING

configRATE_LIMIT_WINDOW_MS

configREQUEST_TIMEOUT

configTOKEN_BUCKET_CAPACITY

configTOKEN_BUCKET_REFILL_RATE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/kumaran-is-mcp-weather-server-i5wnps)](https://m8ven.ai/mcp/kumaran-is-mcp-weather-server-i5wnps)

commit: bc0f89c9dfb587492c408d1cd72881ee20d17e68

code hash: 8526f9447628aa4845cb98c3c3f7e7897594b808cc83f5466088e36d6e2cf02e

verified: 4/11/2026, 2:43:21 PM

view raw JSON →