Is Weatherxm Pro Mcp safe to use?

Weatherxm Pro Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Weatherxm Pro Mcp?

Weatherxm Pro Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Weatherxm Pro Mcp?

Weatherxm Pro Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is Weatherxm Pro Mcp actively maintained?

Weatherxm Pro Mcp is not actively maintained — last commit was 394 days ago. It has 7 GitHub stars.

Weatherxm Pro Mcp

Name: Weatherxm Pro Mcp
Author: WeatherXM

Official

npm · by WeatherXM

This MCP server exposes the WeatherXM PRO APIs as MCP tools, allowing clients to access weather station data, observations, and forecasts through the MCP protocol.

7 12.9M/wk 0 tools GitHub npm

No known CVEs

MIT license

Stale

Last commit 394d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Maps & Geo Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "weatherxm-pro": {
      "env": {
        "WEATHERXMPRO_API_KEY": "your-api-key"
      },
      "args": [
        "-y",
        "path to mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/weatherxm-pro-mcp)](https://mcppedia.org/s/weatherxm-pro-mcp)

Read me

What Weatherxm Pro Mcp does

An MCP server implementation exposing the WeatherXM PRO APIs as MCP tools, allowing clients to access weather station data, observations, and forecasts through the MCP protocol.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'npm' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

52/100across 5 weighted dimensions

How we score →

0255075100

−48

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

8 fixed

CVE-2022-29244low · fixedCVSS 3.1

Packing does not respect root-level ignore files in workspaces

### Impact `npm pack` ignores root-level `.gitignore` & `.npmignore` file exclusion directives when run in a workspace or with a workspace flag (ie. `--workspaces`, `--workspace=<name>`). Anyone who has run `npm pack` or `npm publish` with workspaces, as of [v7.9.0](https://github.com/npm/cli/releases/tag/v7.9.0) & [v7.13.0](https://github.com/npm/cli/releases/tag/v7.13.0) respectively, may be affected and have published files into the npm registry they did not intend to include. ### Patch - Up

Affected: >= 7.9.0Fixed in 8.11.0source →

CVE-2018-7408low · fixedCVSS 3

Incorrect Permission Assignment for Critical Resource in NPM

An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as "next: 5.7.0" and therefore automatically installed by an "npm upgrade -g npm" command, and also announced in the vendor's blog without mention of pre-release status). It might allow local users to bypass intended filesystem access restrictions because ownerships of /etc and /usr directories are being changed unexpectedly, related to a "correctMkdir" issue.

Affected: >= 0Fixed in 5.7.1source →

CVE-2013-4116info · fixed

Local Privilege Escalation in npm

Affected versions of `npm` use predictable temporary file names during archive unpacking. If an attacker can create a symbolic link at the location of one of these temporary file names, the attacker can arbitrarily write to any file that the user which owns the `npm` process has permission to write to, potentially resulting in local privilege escalation. ## Recommendation Update to version 1.3.3 or later.

Affected: >= 0Fixed in 1.3.3source →

CVE-2020-15095low · fixedCVSS 3.1

npm CLI exposing sensitive information through logs

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like `<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>`. The password value is not redacted and is printed to stdout and also to any generated log files.

Affected: >= 0Fixed in 6.14.6source →

CVE-2019-16777low · fixedCVSS 3.1

npm Vulnerable to Global node_modules Binary Overwrite

Versions of the npm CLI prior to 6.13.4 are vulnerable to a Global node_modules Binary Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a `serve` binary, any subsequent installs of packages that also create a `serve` binary would overwrite the first binary. This will not overwrite system binaries but only binaries put into the global node_modules directory. This b

Affected: >= 0Fixed in 6.13.4source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Weatherxm Pro Mcp safe to use?: Weatherxm Pro Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Weatherxm Pro Mcp?: Weatherxm Pro Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Weatherxm Pro Mcp?: Weatherxm Pro Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Weatherxm Pro Mcp actively maintained?: Weatherxm Pro Mcp is not actively maintained — last commit was 394 days ago. It has 7 GitHub stars.

Similar servers

Others in maps / data

View all →

PostgreSQL MCP Server98

Query and manage PostgreSQL databases directly from AI assistants

86.4k 1

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.4k 4

Supabase MCP Server95

Manage Supabase projects — databases, auth, storage, and edge functions

2.7k 4

Alpha Vantage Mcp95

Real-time financial market data: stocks, forex, crypto, commodities, and economic indicators

158 3

MCP Security Weekly

Get CVE alerts and security updates for Weatherxm Pro Mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Maps & Geo Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "weatherxm-pro": {
      "env": {
        "WEATHERXMPRO_API_KEY": "your-api-key"
      },
      "args": [
        "-y",
        "path to mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/weatherxm-pro-mcp)](https://mcppedia.org/s/weatherxm-pro-mcp)

Read me

What Weatherxm Pro Mcp does

An MCP server implementation exposing the WeatherXM PRO APIs as MCP tools, allowing clients to access weather station data, observations, and forecasts through the MCP protocol.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'npm' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

WeatherXM PRO MCP Server

An MCP server implementation exposing the WeatherXM PRO APIs as MCP tools, allowing clients to access weather station data, observations, and forecasts through the MCP protocol.

Features

Get stations near a location (latitude, longitude, radius)
Get stations within a bounding box (min/max latitude and longitude)
Get all available stations
Get the latest observation for a specific station
Get historical observations for a station on a specific date
Search for H3 cells by region name
Get stations in a specific H3 cell
Get weather forecast (daily or hourly) for a specific H3 cell
Get hyperlocal forecast for a station and variable
Get forecast performance (FACT) for a station and variable
Get forecast ranking (FACT) for a station

Prerequisites

Node.js and npm installed
A valid WeatherXM PRO API key

Configuration

Clone the repository to your local machine.

git clone https://github.com/WeatherXM/weatherxm-pro-mcp.git

Installation

After cloning the repository, you need to install the dependencies and build the project before running the MCP server.

npm install
npm run build

Server Configuration for MCP Clients

This is the common configuration for MCP clients such as Claude Desktop, Cursor, Windsurf Editor, VSCode and plugins such as RooCode and Cline.

{
  "mcpServers": {
    "weatherxm-pro": {
      "command": "npx",
      "args": [
        "-y",
        "path to mcp"
      ],
      "env": {
        "WEATHERXMPRO_API_KEY": "your-api-key"
      }
    }
  }
}

Replace "path to mcp" with the actual path to the MCP server or package name, and "your-api-key" with your WeatherXM PRO API key.

Note: If you have other MCP servers in use in the client, you can add it to the existing mcpServers object.

Claude Desktop

Follow the steps below to use the WeatherXM PRO MCP server with Claude Desktop MCP client:

Edit the MCP settings file located at:

~/Library/Application Support/Claude/claude_desktop_config.json

Add the WeatherXM PRO MCP server configuration under the mcpServers object.
Restart Claude Desktop to apply the changes.
You can now use the server in Claude Desktop to run queries on the WeatherXM PRO MCP server.

Cursor

Follow the steps below to use the WeatherXM PRO MCP server with Cursor:

Install Cursor on your machine.
In Cursor, go to Cursor > Cursor Settings > MCP > Add a new global MCP server.
Specify the same configuration as in the Server Configuration for MCP Clients section.
Save the configuration.
You will see weatherxm-pro as an added server in MCP servers list.
You can now use the WeatherXM PRO MCP server in Cursor to run queries.

Windsurf Editor

Follow the steps below to use the WeatherXM PRO MCP server with Windsurf Editor:

Install Windsurf Editor on your machine.
Navigate to Command Palette > Windsurf MCP Configuration Panel or Windsurf - Settings > Advanced > Cascade > Model Context Protocol (MCP) Servers.
Click on Add Server and then Add custom server.
Add the WeatherXM PRO MCP Server configuration from the Server Configuration for MCP Clients section.
Save the configuration.
You will see weatherxm-pro as an added server in MCP Servers list.
You can now use the WeatherXM PRO MCP server in Windsurf Editor to run queries.

Docker Image

The MCP server can be built and run as a Docker container.

Build

docker build -t weatherxm-pro-mcp .

Run

docker run -d -p 3000:3000 -e WEATHERXMPRO_API_KEY="your-api-key" -e PORT=3000 weatherxm-pro-mcp

Replace "your-api-key" with your actual WeatherXM PRO API key.

Troubleshooting Tips

Ensure the path to your MCP server repository is correct in the configuration.
Verify that your WeatherXM PRO API key is set correctly.
Check that the MCP client configuration matches the server settin

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

52/100across 5 weighted dimensions

How we score →

0255075100

−48

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

8 fixed

CVE-2022-29244low · fixedCVSS 3.1

Packing does not respect root-level ignore files in workspaces

Affected: >= 7.9.0Fixed in 8.11.0source →

CVE-2018-7408low · fixedCVSS 3

Incorrect Permission Assignment for Critical Resource in NPM

Affected: >= 0Fixed in 5.7.1source →

CVE-2013-4116info · fixed

Local Privilege Escalation in npm

Affected: >= 0Fixed in 1.3.3source →

CVE-2020-15095low · fixedCVSS 3.1

npm CLI exposing sensitive information through logs

Affected: >= 0Fixed in 6.14.6source →

CVE-2019-16777low · fixedCVSS 3.1

npm Vulnerable to Global node_modules Binary Overwrite

Affected: >= 0Fixed in 6.13.4source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Weatherxm Pro Mcp safe to use?: Weatherxm Pro Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Weatherxm Pro Mcp?: Weatherxm Pro Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Weatherxm Pro Mcp?: Weatherxm Pro Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Weatherxm Pro Mcp actively maintained?: Weatherxm Pro Mcp is not actively maintained — last commit was 394 days ago. It has 7 GitHub stars.