Virga Weather

NPM · @VIRGA-MCP/SERVER · SCANNED AUG 4

Weather API tools — current, hourly, daily forecasts, and historical data.

Available components

+18 this week 65 65 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security83

No malware found by supply-chain analysis.Pass
CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 154 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability85

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (excellent).Pass
Tool/resource definitions use about 964 tokens (~48/item across 20 items; 14 tools + 6 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @virga-mcp/server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mcmurrym-virga-weather -- npx -y @virga-mcp/server

# add to Codex CLI

codex mcp add mcmurrym-virga-weather -- npx -y @virga-mcp/server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcmurrym-virga-weather": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@virga-mcp/server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mcmurrym-virga-weather --command npx --arg -y --arg @virga-mcp/server

# ~/.hermes/config.yaml

mcp_servers:
  mcmurrym-virga-weather:
    command: "npx"
    args: ["-y", "@virga-mcp/server"]

// mcp.json

{
  "mcpServers": {
    "mcmurrym-virga-weather": {
      "command": "npx",
      "args": [
        "-y",
        "@virga-mcp/server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

4 Aug 26 0
- CVE-2026-69207 affects this package: medium ▼ security
- Known CVEs: partial → fail ▼ security
3 Aug 26 +3
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +41
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
31 Jul 26 +3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −29
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
27 Jul 26 47

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/@virga-mcp/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-8j4g-w8fx-2239	CVE-2026-69207	medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	yes

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 14 exposed · ~836 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

accept_terms ~49

Accept the Virga Weather API terms of service. Required before creating production keys.

Input Output Examples

Name	Type	Req	Description
version	string	yes	Terms version to accept (get the current version from get_terms or the weather://terms resource)

No output schema declared.

No examples provided.

activate_billing ~37

Set up a payment method via Stripe. Returns a checkout URL that must be opened in a browser to complete setup. Required before purchasing credits.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

create_account ~51

Create a new Virga Weather API account. Returns a stage API key for testing. No authentication required.

Input Output Examples

Name	Type	Req	Description
name	string	yes	Name for your account or agent (e.g. 'my-weather-bot')

No output schema declared.

No examples provided.

create_api_key ~83

Create a new API key. Production keys require accepted terms, activated billing, and positive credit balance.

Input Output Examples

Name	Type	Req	Description
environment	string	—	Key environment: 'stage' (free, lower limits) or 'production' (uses credits, higher limits). Default: stage.
name	string	yes	Descriptive name for the key (e.g. 'production-bot')

No output schema declared.

No examples provided.

get_billing_status ~27

Get current billing status including credit balance, spend caps, and auto-topup configuration.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_current_weather ~55

Get current weather conditions for a location. Returns temperature, humidity, wind, precipitation, and conditions.

Input Output Examples

Name	Type	Req	Description
lat	number	yes	Latitude (-90 to 90)
lon	number	yes	Longitude (-180 to 180)

No output schema declared.

No examples provided.

get_daily_forecast ~74

Get daily weather forecast for a location. Returns up to 16 days of forecast data.

Input Output Examples

Name	Type	Req	Description
days	integer	—	Number of days to forecast (1-16, default 7)
lat	number	yes	Latitude (-90 to 90)
lon	number	yes	Longitude (-180 to 180)

No output schema declared.

No examples provided.

get_historical_weather ~90

Get historical weather data for a location on a specific date. Returns temperature, humidity, wind, and conditions for that date.

Input Output Examples

Name	Type	Req	Description
date	string	yes	Date to retrieve weather for (ISO 8601 format, e.g. 2026-01-15)
lat	number	yes	Latitude (-90 to 90)
lon	number	yes	Longitude (-180 to 180)

No output schema declared.

No examples provided.

get_hourly_forecast ~75

Get hourly weather forecast for a location. Returns up to 120 hours of forecast data.

Input Output Examples

Name	Type	Req	Description
hours	integer	—	Number of hours to forecast (1-120, default 24)
lat	number	yes	Latitude (-90 to 90)
lon	number	yes	Longitude (-180 to 180)

No output schema declared.

No examples provided.

get_usage ~64

Get API usage history for the account. Shows endpoint calls, credit costs, and timestamps.

Input Output Examples

Name	Type	Req	Description
endDate	string	—	End date for usage query (ISO 8601 format)
startDate	string	—	Start date for usage query (ISO 8601 format)

No output schema declared.

No examples provided.

list_api_keys ~30

List all API keys for the account. Shows key prefix, environment, status, and last used timestamp.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

purchase_credits ~76

Purchase a credit bundle. Returns a Stripe checkout URL to complete the purchase. Bundles: 500 credits ($5), 2000 ($18), 10000 ($75).

Input Output Examples

Name	Type	Req	Description
bundle	string	yes	Credit bundle size: '500' ($5), '2000' ($18), or '10000' ($75)

No output schema declared.

No examples provided.

revoke_api_key ~54

Revoke an API key. WARNING: This is a destructive operation — the key will immediately stop working and cannot be restored.

Input Output Examples

Name	Type	Req	Description
keyId	string	yes	ID of the key to revoke (get from list_api_keys)

No output schema declared.

No examples provided.

search_location ~71

Geocode a place name to latitude/longitude coordinates. Use this to convert city names, addresses, or landmarks into coordinates for weather queries.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Place name, city, or address to geocode (e.g. "New York", "Tokyo, Japan", "1600 Pennsylvania Ave")

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 4 Aug

Day	Score
27 Jul	47
28 Jul	47
30 Jul	18
31 Jul	21
1 Aug	21
2 Aug	62
3 Aug	65
4 Aug	65