Enables AI assistants to interact with SIEMENS WinCC Unified SCADA systems through their GraphQL API, supporting operations like reading/writing tag values, browsing objects, querying historical data, and managing alarms.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
mcp-remote exposed to OS command injection via untrusted MCP server connections
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.GRAPHQL_PWD— (Optional) Password for the service account.GRAPHQL_URL— Required. The full URL of your WinCC Unified GraphQL server.GRAPHQL_USR— export ="username1"MCP_PORT— The MCP server will start and listen on port 3000 by default. You can configure the port using the environment variable:[](https://m8ven.ai/mcp/vogler75-winccua-mcp-server-9e2qz2)