io.github.CSOAI-ORG/weather-ai-mcp

The material explicitly states that no keys or environment variables are required. No API key, token, or account credential requirement is shown, so credential exposure and abuse risk appears low.

The known material lists remote endpoint host as 'none', and the README does not disclose outbound destinations; based on the available facts, no explicit data egress design is shown. However, weather-query functionality may typically involve networking, and the missing documentation leaves implementation details unconfirmed.

System checks indicate that the tool executes code. As an MCP tool, this implies local process startup/program execution, which is a normal capability for this class of tool. The material does not show requests for unusual system privileges or high-risk actions unrelated to weather functionality.

The description only covers weather lookup, forecast, and historical data. It does not declare local file read/write, sensitive directory access, databases, or other user resources; no signs of excessive data access are evident in the provided material.

The source is an official registry entry, open-source, and updated within the last year, all of which are positive risk-reducing signals. However, the repository has 0 stars, no declared license, and no README, so community validation and usage constraints are weak; review the source and dependency list before installation.