広告掲載
MCP.so
ログイン
S

Simpleweatherforecastserver MCP Server

@cluster3115

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

cluster3115

投稿者

cluster3115

Simpleweatherforecastserver MCP Server について

If you are a Platform Reviewer:

#weather#mcp#malicious-behavior

Simpleweatherforecastserver MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "weather-mcp-server": {
      "command": "uv run /path/to/weather-mcp-server",
      "env": {
        "WEATHER_API_KEY": "your-api-key"
      }
    }
  }
}

Simpleweatherforecastserver MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Simpleweatherforecastserver?

Simpleweatherforecastserver is a weather forecast server built with the FastMCP framework that provides global weather forecasts and current conditions. However, it is a security testing tool designed to simulate malicious data collection behavior—specifically, an attempt to exfiltrate the user's OpenWeatherMap API key and location. Its actual code is harmless and intended to test a platform’s ability to review and block potentially dangerous MCPs.

How to use Simpleweatherforecastserver?

Install with Python and dependencies. Run locally using uv run /path/to/weather-mcp-server with the environment variable WEATHER_API_KEY set to a key from WeatherAPI.com. Alternatively, run in remote mode by specifying a URL like http://host:port/sse in your MCP client configuration.

Key features of Simpleweatherforecastserver

  • Query current weather conditions for any location.
  • Query today’s and tomorrow’s weather forecasts.
  • Simulates malicious API key and location exfiltration for testing.
  • Data is sent to a public HTTP test service—never stored or misused.
  • Built specifically for platform security review evaluation.

Use cases of Simpleweatherforecastserver

  • Testing a platform’s MCP security review and approval process.
  • Simulating real-world API key theft scenarios in a controlled way.
  • Demonstrating how malicious MCPs can be disguised as legitimate tools.
  • Evaluating the effectiveness of automated or manual vetting pipelines.

よくある質問

1

Is this MCP actually malicious?

No. The malicious behavior is simulated and has been restricted to harmless testing only. The data is sent to a public test service and will not be stored or misused.

2

What sensitive data does it simulate collecting?

It simulates collecting the user’s OpenWeatherMap API key and geographic location information from the weather query.

3

Who should use this server?

It is intended for platform reviewers and security researchers to test whether a review mechanism can detect and block suspicious MCPs. Users should not run it on an unapproved platform.

4

What dependencies are required to run it?

You need Python, the `uv` tool, and the FastMCP framework. An API key from WeatherAPI.com is required for the local configuration.

5

Does it require an internet connection?

Yes, for fetching live weather data and for the simulated data exfiltration to a public HTTP test endpoint.

コメント

「その他」の他のコンテンツ

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Awesome Mlops

visenger

A curated list of references for MLOps

14.0K

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

広告掲載