# io.github.sandsower/vedurstofa-mcp (npm · vedurstofa-mcp)

MCP server for Icelandic weather, forecasts, warnings, and earthquakes from vedur.is.

- Trust score: 65/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `vedurstofa-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp.md), [page](https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp)

## Channel facts

- Registry: `npm`
- Package: `vedurstofa-mcp`
- Version: `1.0.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (106 of 110), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (106 of 110), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 108 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 76/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 812 tokens (~135/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add sandsower-vedurstofa-mcp -- npx -y vedurstofa-mcp
```

### Codex

```bash
codex mcp add sandsower-vedurstofa-mcp -- npx -y vedurstofa-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sandsower-vedurstofa-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "vedurstofa-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add sandsower-vedurstofa-mcp --command npx --arg -y --arg vedurstofa-mcp
```

### Hermes

```yaml
mcp_servers:
  sandsower-vedurstofa-mcp:
    command: "npx"
    args: ["-y", "vedurstofa-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "sandsower-vedurstofa-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "vedurstofa-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 65, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-07-31 (score 20, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 45)

First indexed and scored.

## MCP tools (6)

### `get_weather_now` (~129 tokens)

Get current weather observations for locations in Iceland. Returns temperature (°C), wind speed and direction (m/s, cardinal + degrees), pressure (hPa), humidity (%), precipitation (mm/h), and snow/visibility data when available. Accepts station IDs or names — call list_weather_stations to discover available stations.

Input parameters:

- `lang` (string): Language for description fields. Defaults to 'en'.
- `stations` (array): Station IDs or names, e.g. ['1470', 'Akureyri']. Diacritics optional. Defaults to ['Reykjavík'] when omitted.

### `get_weather_forecast` (~167 tokens)

Get multi-day hourly weather forecasts for locations in Iceland. Returns hour-by-hour predictions for temperature, wind, precipitation, cloud cover, and dew point. Forecasts are regional (covering one of 10 IMO forecast regions) and scraped from vedur.is; if scraping fails the response falls back to the national text forecast and is marked 'degraded'.

Input parameters:

- `hours` (integer): How many hours of forecast to return, starting from now. Defaults to 72 (3 days). Max 240 (10 days). Keep this tight when the user asks about a specific near-term time.
- `lang` (string): Language for the text-forecast fallback. Defaults to 'en'.
- `stations` (array): Station IDs or names. Defaults to ['Reykjavík'].

### `get_weather_text` (~94 tokens)

Get written (prose) weather forecasts for Iceland from the Icelandic Meteorological Office. Use for narrative forecasts and text weather warnings. For structured per-station observations use get_weather_now. For structured warnings use get_weather_warnings.

Input parameters:

- `category` (string): Which text forecast to fetch. Defaults to 'national'.
- `lang` (string): Language. Icelandic versions are often more detailed. Defaults to 'en'.

### `get_weather_warnings` (~100 tokens)

Get active severe-weather warnings (CAP alerts) for Iceland from the Icelandic Meteorological Office. Returns structured alert metadata including severity, certainty, urgency, effective/expiry times, affected areas, and multilingual headlines + descriptions. For narrative text warnings use get_weather_text with category='warnings'.

Input parameters:

- `include_expired` (boolean): Include expired alerts (default false).
- `lang` (string): Filter to info blocks in this language. Default returns all.

### `get_earthquakes` (~201 tokens)

Get recent earthquakes in Iceland with magnitude, location, depth, and timestamp. Filter by named region preset (reykjanes, mydalsjokull, bardarbunga, tjornes, katla, askja, hekla, grimsvotn) or a custom lat/lon radius. Defaults to the last 48 hours and excludes automatic (unreviewed) detections.

Input parameters:

- `hours` (integer): Time window in hours. Max 168 (7 days). Defaults to 48.
- `include_unreviewed` (boolean): Include automatic unreviewed detections. Defaults to false.
- `min_magnitude` (number): Minimum magnitude (Mlw). Defaults to 0 (all events).
- `near` (object): Custom point + radius filter. Mutually exclusive with 'region'.
- `region` (string): Named region preset. Mutually exclusive with 'near'. Useful for monitoring specific volcanic systems.

### `list_weather_stations` (~121 tokens)

List weather stations in Iceland with their IDs, names, types, and coordinates. Use this to look up station IDs for get_weather_now and get_weather_forecast, or to help users discover stations near a region. Stations are loaded from the Icelandic Meteorological Office (api.vedur.is).

Input parameters:

- `limit` (integer): Maximum number of stations to return. Defaults to all.
- `region` (string): Case-insensitive substring match against the station's region label (e.g. 'north', 'capital', 'westfjords'). Optional.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 65
- 2026-08-01: 20
- 2026-07-31: 20
- 2026-07-30: 45
- 2026-07-28: 45
- 2026-07-27: 45

## Links

- npm package: https://www.npmjs.com/package/vedurstofa-mcp
- Socket report: https://socket.dev/npm/package/vedurstofa-mcp
- Repository: https://github.com/sandsower/vedurstofa-mcp
- Changelog RSS feed: https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/sandsower-vedurstofa-mcp/vedurstofa-mcp