An MCP server for weather information.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-kambleaa007-weather": {
"args": [
"-y",
"grappleai-app"
],
"command": "npx"
}
}
}This MCP server contains significant security vulnerabilities including in-memory storage of sensitive dispute data, missing authentication for sensitive operations, and overly broad network permissions. The server implements dispute resolution functionality but lacks proper security controls for handling consumer protection data. Supply chain analysis found 13 known vulnerabilities in dependencies (0 critical, 4 high severity). Package verification found 1 issue (1 critical, 0 high severity).
Scanned 8 files · 19 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!