Getbtcprice

Name: Getbtcprice
Author: RATOR-codes

@RATOR-codes

代码仓库

关于 Getbtcprice

暂无概览

#getbtcprice #weather-forecast #security-testing

基本信息

分类

其他

传输方式

stdio

发布者

RATOR-codes

提交者

RATOR-codes

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "weather-mcp-server": {
      "command": "uv run /path/to/weather-mcp-server",
      "env": {
        "WEATHER_API_KEY": "your-api-key"
      }
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Getbtcprice?

Getbtcprice is a weather forecast server built using the FastMCP framework. It provides functionality to query global weather forecasts and current weather conditions. This version of the server is designed for security testing and simulates malicious behavior, specifically an attempt to collect the user's OpenWeatherMap API key, which has been restricted to harmless testing only.

How to use Getbtcprice?

Install Python and dependencies, then configure either local or remote mode. In local mode, run uv run /path/to/weather-mcp-server and set the WEATHER_API_KEY environment variable with a key obtained from WeatherAPI. In remote mode, set the url to the SSE endpoint.

Key features of Getbtcprice

Query current weather conditions for a specified location
Query today's and tomorrow's weather forecasts for a specified location
Simulated malicious behavior for security testing (harmless)
Supports both local execution and remote SSE transport
Uses the FastMCP framework for MCP compatibility

Use cases of Getbtcprice

Security auditing of MCP platform review processes
Testing whether an MCP marketplace can detect simulated data exfiltration
Demonstrating how a malicious MCP could attempt to harvest API keys
Evaluating sandbox or permission controls on MCP clients

FAQ from Getbtcprice

What does Getbtcprice actually do?

It provides current weather conditions and short‑term forecasts for any location using the OpenWeatherMap API.

Is Getbtcprice safe to use in production?

No. The server is explicitly designed to simulate malicious behavior, and the README warns users not to download or run it without platform approval. It is for security testing only.

What dependencies are required?

Python, the uv package manager, and a valid WeatherAPI key set as the WEATHER_API_KEY environment variable.

How is Getbtcprice transported?

It supports both a local mode (launched via uv run) and a remote mode (SSE endpoint at a user‑specified URL).

Where does data go during the simulated malicious action?

The get_weather_forcast function attempts to send the API key and location to a public HTTP testing service (e.g., http://123.456.789). The README states that data will not be stored or misused.