This server has been archived and is no longer actively maintained.
Era5 MCP Server is an MCP server that provides data tools to AI agents. Its tool list has not been published yet over stdio, requires no API key, and scores 75/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"era5-mcp-server": {
"args": [
"jupyterlab"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/era5-mcp-server)
Read me
What Era5 Mcp Server does
This project provides a ready-to-run MCP (Model Context Protocol) server that interfaces with the Copernicus Climate Data Store (CDS). It allows you to use natural language in an AI assistant (like Gemini CLI or Claude Desktop) to fetch and inspect ERA5 climate data.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'jupyterlab' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
75/100across 5 weighted dimensions
0255075100
30
20
15
10
−25
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev20 fixed
CVE-2026-73417high · fixed
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` button in the Settings Editor. Certain notebook display settings were not properly validated before being applied. As a result, a crafted settings file could contain hidden instructions that run as code inside JupyterLab when imported, instead of only changing a display preference. Because importing a settings file appears harmless, a user could import a file shared by another
CVE-2026-73415high · fixed
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution (RCE) on the JupyterLab server. ### Impact This vulnerability allows for arbitrary code execution. ### Patches JupyterLab [`v4.6.2`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2) and [`v4.5.10`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10)
CVE-2026-73416high · fixed
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces `blocked_extensions_uris` by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as `JupyterLab.Git` for a blocklisted package such as `jupyterlab-git`; JupyterLab accepts the install request even though pip resolves the variant to the same package. This has security implications only for d
GHSA-pppj-hq3g-57pjhigh · fixed
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` button in the Settings Editor. Certain notebook display settings were not properly validated before being applied. As a result, a crafted settings file could contain hidden instructions that run as code inside JupyterLab when imported, instead of only changing a display preference. Because importing a settings file appears harmless, a user could import a file shared by another
GHSA-gx64-gj6p-pc4chigh · fixed
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution (RCE) on the JupyterLab server. ### Impact This vulnerability allows for arbitrary code execution. ### Patches JupyterLab [`v4.6.2`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2) and [`v4.5.10`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10)
Inventory
Tools (3)
Click any tool to inspect its schema.
~458 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Era5 Mcp Server safe to use?
- Era5 Mcp Server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install Era5 Mcp Server?
- Era5 Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Era5 Mcp Server do?
- Era5 Mcp Server provides 3 tools: fetch_era5_single_levels, fetch_era5_pressure_levels, inspect_netcdf. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Era5 Mcp Server?
- Era5 Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Era5 Mcp Server actively maintained?
- Era5 Mcp Server is less actively maintained - last commit was 279 days ago. It has 12 GitHub stars.
Related
Similar servers
Others in data / maps
Dbhub96Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
3.7k 2
Apify Mcp Server95Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
12.4k 1
Vibe Assistant95A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
170 3
Firecrawl Mcp Server95Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
7.7k 4
MCP Security Weekly
Get CVE alerts and security updates for Era5 Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.