io.github.cyanheads/aviation-weather-mcp-server
REMOTE · AVIATION-WEATHER.CASEYJHAND.COM · 2 COMPONENTS · SCANNED SEP 21
Fetch METARs, TAFs, PIREPs, and domestic SIGMETs from the NWS Aviation Weather Center.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability77
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1886 tokens (~377/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the io.github.cyanheads/aviation-weather-mcp-server server?
io.github.cyanheads/aviation-weather-mcp-server is a hosted endpoint at https://aviation-weather.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · aviation-weather.caseyjhand.com
claude mcp add --transport http cyanheads-aviation-weather-mcp-server 'https://aviation-weather.caseyjhand.com/mcp'
{
"mcpServers": {
"cyanheads-aviation-weather-mcp-server": {
"url": "https://aviation-weather.caseyjhand.com/mcp"
}
}
} {
"servers": {
"cyanheads-aviation-weather-mcp-server": {
"type": "http",
"url": "https://aviation-weather.caseyjhand.com/mcp"
}
}
} [mcp_servers.cyanheads-aviation-weather-mcp-server] url = "https://aviation-weather.caseyjhand.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"cyanheads-aviation-weather-mcp-server": {
"type": "remote",
"url": "https://aviation-weather.caseyjhand.com/mcp",
"enabled": true
}
}
} openclaw mcp add cyanheads-aviation-weather-mcp-server --url 'https://aviation-weather.caseyjhand.com/mcp' --transport streamable-http
mcp_servers:
cyanheads-aviation-weather-mcp-server:
url: "https://aviation-weather.caseyjhand.com/mcp" {
"McpServers": {
"cyanheads-aviation-weather-mcp-server": {
"Transport": "http",
"Url": "https://aviation-weather.caseyjhand.com/mcp"
}
}
} assistant mcp add cyanheads-aviation-weather-mcp-server -t streamable-http -u 'https://aviation-weather.caseyjhand.com/mcp'
{
"mcpServers": {
"cyanheads-aviation-weather-mcp-server": {
"type": "http",
"url": "https://aviation-weather.caseyjhand.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 0
- Server version: 0.4.6 → 0.4.7 functional
- 10 Sept 26 0
- Tool “aviation_find_stations” rewrote its description, which is the text the model reads security
- Tool “aviation_get_pireps” rewrote its description, which is the text the model reads security
- Schema quality: 267 → 377 ▼ functional
- Schema quality: 267 → 300 ▼ functional
- Schema quality: 267 → 294 ▼ functional
- Server version: 0.4.5 → 0.4.6 functional
- Server version: 0.4.4 → 0.4.5 functional
- Server version: 0.4.3 → 0.4.4 functional
- Server version: 0.4.2 → 0.4.3 functional
- Server version: 0.4.1 → 0.4.2 functional
- “aviation_get_pireps” added an optional parameter “limit” cosmetic
- “aviation_find_stations” added an optional parameter “limit” cosmetic
- “aviation_get_pireps” added an optional parameter “min_intensity” cosmetic
- “aviation_find_stations” reworded the description of “station_ids” cosmetic
- “aviation_get_advisories” reworded the description of “hazard” cosmetic
- “aviation_get_metar” reworded the description of “hours” cosmetic
- 9 Sept 26 0
- Stability: 0.97 → pass security
- 8 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Sept 26 −1
- Stability: pass → 0.93 functional
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- MCP protocol version: 2025-11-25 → 2026-07-28 functional
- Server version: 0.4.0 → 0.4.1 functional
- 24 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 21 Sept 2026 · Probed https://aviation-weather.caseyjhand.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=caseyjhand.com | CN=WE1,O=Google Trust Services,C=US | 4 Sept 2026 | 3 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | a6985204ed51ae050e7738aa6be668e9 |
| SANs: caseyjhand.com, *.caseyjhand.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of aviation-weather.caseyjhand.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| caseyjhand.com. | present | 2371 | 13 | Verified |
| aviation-weather.caseyjhand.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| x-content-type-options | nosniff |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://aviation-weather.caseyjhand.com/mcp | Verified | 200 | |
| http (plaintext) | http://aviation-weather.caseyjhand.com/mcp | HTTPS enforced | 301 | https://aviation-weather.caseyjhand.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
aviation_find_stations Find Aviation Weather Stations ~472
Resolve an airport or weather reporting station by its identifier, or discover stations within a bounding box or US state. Returns all identifier variants (ICAO/IATA/FAA), coordinates, elevation, and available data types (METAR, TAF, SYNOP, etc.). A lookup matches the registry's own identifier, which for an airport is its 4-letter ICAO ID (e.g., KSEA, KJFK); buoys and mesonet sites carry identifiers of other shapes and resolve by those. At least one of station_ids, bbox, or state is required. limit bounds how many stations an area search returns without changing the area searched, and belongs to the bbox and state modes only.
| Name | Type | Req | Description |
|---|---|---|---|
| bbox | object | – | Geographic bounding box for spatial queries. |
| limit | integer | – | Maximum stations to return, applied after ordering by ICAO identifier ascending with identifier-less stations last — so the same query with the same limit returns the same stations, and airports rath… |
| state | string | – | Two-letter USPS code for one of the 50 US states or DC (e.g., "WA") to list all stations in that jurisdiction. US territories are not supported — use bbox for those. |
| station_ids | array | – | One or more station identifiers (e.g., KSEA, KJFK). A lookup matches the registry's own identifier: a 4-letter ICAO ID for an airport, and other shapes for the buoys and mesonet sites the registry al… |
| Name | Type | Req | Description |
|---|---|---|---|
| cap | number | – | The upstream row maximum that was applied to the draw. Present only on a truncated result. |
| error | object | – | Present when the call failed. Absent on success. |
| limited | boolean | – | True when the requested limit withheld stations that matched — the caller asked to see fewer of them. False affirms the limit did not bite, so every matching station is here. Present only when the ca… |
| matched | number | – | Stations that matched this query before the limit selected from them. Present only on a limited result. Where the result is also truncated this counts the capped draw and not the search area — the st… |
| missing | array | – | Requested identifiers absent from the result. Deduplicated the way returned is: a repeated or differently-cased identifier appears once, under its first spelling. Absent when none are missing. |
| notice | string | – | Guidance for whichever disclosures fired: the lever that narrows a truncated draw, what a requested limit withheld, or the cause and fix for identifiers that resolved to nothing. The cap and the limi… |
| partial | boolean | – | True when a requested identifier resolved to nothing. False affirms every requested identifier resolved, which a count cannot establish — upstream case-folds and deduplicates, so a shorter list is no… |
| requested | array | – | Station identifiers this call asked for, spelled as the caller wrote them and in the order given. Present only on a station_ids lookup — the bbox and state modes ask for an area, not a list. |
| returned | array | – | Requested identifiers that resolved, spelled as the caller wrote them rather than as upstream returned them. Deduplicated the way upstream deduplicates: a repeated or differently-cased identifier app… |
| shown | number | – | Stations in this result, counted after any client-side state filter and after any limit. |
| stations | array | – | Matching stations. |
| truncated | boolean | – | True when the upstream draw hit the AWC row cap, so stations inside the search area are missing from this result. False affirms the area was drawn in full, which a count alone cannot establish. |
| upstreamRows | number | – | Rows AWC returned before the client-side state filter ran. Present only on a truncated state query the filter then narrowed, where the post-filter count sits below the cap and so cannot reveal the tr… |
No examples provided.
aviation_get_advisories Get Active Aviation Advisories (SIGMETs) ~318
Get active domestic SIGMETs for a region. Returns each advisory with hazard type (CONVECTIVE, TURBULENCE, ICING, IFR), severity, altitude range, valid period, polygon coordinates, and raw text. Coverage is US-centric (NWS Aviation Weather Center). This tool reads the domestic SIGMET feed only and cannot return an AIRMET; requests for one are rejected rather than answered with SIGMETs. During fair-weather periods no advisories may be active — an empty result is normal, not an error. Filter by advisory_type, hazard, or bbox.
| Name | Type | Req | Description |
|---|---|---|---|
| advisory_type | string | – | Filter by advisory type. "sigmet" and "all" both return the active domestic SIGMET set, which is everything this tool serves. "airmet" is rejected with guidance: the upstream feed cannot return an AI… |
| bbox | object | – | Geographic bounding box to filter advisories by polygon overlap. |
| hazard | string | – | Optional hazard filter, applied upstream by AWC. CONVECTIVE, TURBULENCE, ICING, and IFR are the four hazard classes the domestic SIGMET feed carries, and an empty result under one of them means no ad… |
| Name | Type | Req | Description |
|---|---|---|---|
| advisories | array | – | Active advisories matching the filter criteria. May be empty during fair weather periods. |
| error | object | – | Present when the call failed. Absent on success. |
| notice | string | – | Present only when the result is empty, naming the stage that emptied it: no domestic SIGMETs are active at all, none carry the requested hazard, or none intersect the requested bbox — and which filte… |
No examples provided.
aviation_get_metar Get METAR Weather Observations ~242
Get current weather observations (METARs) for one or more airports. Returns decoded fields — wind direction/speed/gusts, visibility, ceiling with its kind (measured, or indefinite for vertical visibility into an obscuration), present weather, temperature, dewpoint, altimeter, cloud layers — plus the computed flight category (VFR/MVFR/IFR/LIFR) and the raw METAR string. Accepts 1–10 ICAO station IDs (e.g., KSEA, KJFK). Use aviation_find_stations to resolve or verify an ICAO ID, or to discover nearby stations.
| Name | Type | Req | Description |
|---|---|---|---|
| hours | integer | – | Lookback window in hours (1–12), not a row limit: every observation inside the window is returned, so a station reporting more often than hourly yields more than one row per hour. At the default of 1… |
| station_ids | array | yes | ICAO station IDs to query. 1–10 stations per call. |
| Name | Type | Req | Description |
|---|---|---|---|
| error | object | – | Present when the call failed. Absent on success. |
| missing | array | – | Requested station IDs absent from the result. Absent when none are missing. |
| notice | string | – | Recovery guidance naming the missing station IDs. Present only on a partial result. It lists the candidate causes without asserting one — upstream omits the row either way. |
| observations | array | – | Weather observations, one per station/time pair. Multiple entries per station when hours > 1. |
| partial | boolean | – | True when a requested station produced no observation. False affirms the result covers every requested station, so full coverage is distinguishable from a short batch rather than being inferred from… |
| requested | array | – | Station IDs this call asked for, in the order given. |
| returned | array | – | Distinct station IDs that produced at least one observation. Counted per station, not per row — with hours > 1 a station reporting six times still appears once. |
No examples provided.
aviation_get_pireps Get Pilot Reports (PIREPs) ~558
Get recent Pilot Reports (PIREPs) near an airport or within a bounding box. Returns decoded turbulence, icing, and cloud reports with altitude, aircraft type, intensity, and the raw PIREP string. Requires either station_id (ICAO center point for radial search, e.g., KSEA) or bbox (area search) — not both. distance_nm belongs to the station_id search only, and altitude_min_ft must not exceed altitude_max_ft. min_intensity restricts the result to reports carrying a turbulence or icing layer at that intensity or above. limit bounds how many reports come back without changing what is searched, keeping the most recent. Coverage is US-centric; PIREPs are sparse and absence of reports does not imply smooth conditions.
| Name | Type | Req | Description |
|---|---|---|---|
| altitude_max_ft | integer | – | Filter by maximum altitude in feet MSL (e.g., 35000 for FL350). Reports with an unknown altitude (altitude_ft null) cannot be shown to satisfy a bound and are dropped whenever either bound is set. Op… |
| altitude_min_ft | integer | – | Filter by minimum altitude in feet MSL (e.g., 18000 for FL180). Reports with an unknown altitude (altitude_ft null) cannot be shown to satisfy a bound and are dropped whenever either bound is set. Op… |
| bbox | object | – | Geographic bounding box for area PIREP search. |
| distance_nm | integer | – | Search radius in nautical miles around station_id, defaulting to 100 when omitted. Belongs to the station_id search only — supplying it alongside bbox is rejected. |
| hours | integer | – | How many hours of history to return. Default 3. |
| limit | integer | – | Maximum reports to return, applied last — after every filter and after ordering by observation time descending, so a limited result is the most recent reports rather than an arbitrary slice. It bound… |
| min_intensity | string | – | Return only reports carrying at least one turbulence or icing layer at this intensity or above. The filter selects reports, not layers — a matching report still carries its lighter layers, so a resul… |
| station_id | string | – | ICAO station ID as center point for radial search (e.g., KSEA). Use with distance_nm. |
| Name | Type | Req | Description |
|---|---|---|---|
| cap | number | – | The upstream row maximum that was applied to the page. Present only on a truncated result. |
| error | object | – | Present when the call failed. Absent on success. |
| limited | boolean | – | True when the requested limit withheld reports that matched — the caller asked to see fewer of them. False affirms the limit did not bite, so every matching report is here. Present only when the call… |
| matched | number | – | Reports that matched this query before the limit selected from them. Present only on a limited result. Where the result is also truncated this counts the capped page and not the search area — the rep… |
| notice | string | – | Guidance for whichever disclosures fired: the levers that narrow the query before the cap applies, and what a requested limit withheld. Both can fire on one result, and the text keeps them apart. |
| pireps | array | – | Pilot reports matching the search criteria, ordered by observation time descending. |
| shown | number | – | Reports in this result, counted after any altitude filter and after any limit. |
| truncated | boolean | – | True when the upstream page hit the AWC row cap, so reports inside the search area and time window are missing from this result. False affirms the whole window was searched, which a count alone canno… |
| upstreamRows | number | – | Reports AWC returned before the altitude filter ran. Present only on a truncated result the filter then narrowed, where the remaining count sits below the cap and so cannot reveal the truncation on i… |
No examples provided.
aviation_get_taf Get Terminal Aerodrome Forecast (TAF) ~148
Get the Terminal Aerodrome Forecast (TAF) for one or more airports. Returns each forecast period with valid times, surface wind, low-level wind shear, visibility, decoded weather conditions, cloud layers, and the vertical visibility into a forecast obscuration, plus the raw TAF string. TAFs cover the next 24–30 hours and are issued only for airports with scheduled commercial service; check data_types from aviation_find_stations to confirm TAF availability. Accepts 1–4 ICAO station IDs (e.g., KSEA, KJFK).
| Name | Type | Req | Description |
|---|---|---|---|
| station_ids | array | yes | ICAO station IDs to query. 1–4 stations per call. |
| Name | Type | Req | Description |
|---|---|---|---|
| error | object | – | Present when the call failed. Absent on success. |
| forecasts | array | – | TAF forecasts, one per requested station. |
| missing | array | – | Requested station IDs absent from the result. Absent when none are missing. |
| notice | string | – | Recovery guidance naming the missing station IDs. Present only on a partial result. It lists the candidate causes without asserting one — upstream omits the row either way. |
| partial | boolean | – | True when a requested station produced no forecast. False affirms the result covers every requested station, so full coverage is distinguishable from a short batch rather than being inferred from the… |
| requested | array | – | Station IDs this call asked for, in the order given. |
| returned | array | – | Distinct station IDs that produced a forecast. |
No examples provided.
What is the io.github.cyanheads/aviation-weather-mcp-server server?
io.github.cyanheads/aviation-weather-mcp-server is listed in the public MCP registry as io.github.cyanheads/aviation-weather-mcp-server. Fetch METARs, TAFs, PIREPs, and domestic SIGMETs from the NWS Aviation Weather Center. This page covers its hosted endpoint (https://aviation-weather.caseyjhand.com/mcp).
Is the io.github.cyanheads/aviation-weather-mcp-server server safe to use?
io.github.cyanheads/aviation-weather-mcp-server scores 82 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.cyanheads/aviation-weather-mcp-server server expose?
io.github.cyanheads/aviation-weather-mcp-server exposes 5 tools: aviation_find_stations, aviation_get_metar, aviation_get_taf, aviation_get_pireps, aviation_get_advisories. Their descriptions and schemas cost roughly 1,738 tokens of context every time the server is loaded.
Does the io.github.cyanheads/aviation-weather-mcp-server server require authentication?
No. We connected to io.github.cyanheads/aviation-weather-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.cyanheads/aviation-weather-mcp-server server still maintained?
io.github.cyanheads/aviation-weather-mcp-server is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.