Next free-source huntWe check for new free data every weekday.
WeatherMCP serverFirst audited Nov 13, 2026

Vibe Springs

Pay-per-use weather, environment, finance, and on-chain intelligence tools for AI agents via x402.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 25 of 25 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 171 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://vibesprings.net/mcp

Source code Website Streamable HTTP · protocol 2025-06-18 · server version 1.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 25 of 25 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • health
    • search_services
    • get_forecast
    • get_weather_history
    • get_delay_risk
    • get_delay_risk_demo
    • get_exchange_rates
    • convert_currency
    • and 17 more

Tools

  • Passed: 25 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (25)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • healthService health, upstream data-source probes, facilitator reachability, and 7-day paid-call reliability (p95 latency, paid-but-failed rate) for Vibe Springs. [FREE]Doesn't say
  • search_servicesSearch the full Vibe Springs catalog of 53 pay-per-use x402 endpoints by keyword, category, or max price. Returns endpoint URLs, prices, params, and example requests. [FREE]Doesn't say
  • get_forecastUp to 16-day weather forecast for any location. Temperature, precipitation probability, wind, UV index. [PAID: $0.002 USDC per call via x402 on Base. First call without payment_signature returns the…Doesn't say
  • get_weather_historyHistorical daily weather for any location worldwide. Temperature, precipitation, wind speed, and conditions. [PAID: $0.002 USDC per call via x402 on Base. First call without payment_signature returns…Doesn't say
  • get_delay_riskOutdoor delay & disruption risk score. Combines 7-day precipitation history, NRCS soil characteristics (drainage class, hydrologic group), ground-drying dynamics, temperature, freeze/thaw state, and…Doesn't say
  • get_delay_risk_demoDemo: weather-driven delay-risk score for 5 fixed US locations. Same schema as the full endpoint but cheaper. Locations span clay, wet coast, semi-arid, fast-drain, and silt. [PAID: $0.002 USDC per c…Doesn't say
  • get_exchange_ratesCurrent and historical foreign exchange rates from the European Central Bank. 30+ currencies supported. [PAID: $0.002 USDC per call via x402 on Base. First call without payment_signature returns the…Doesn't say
  • convert_currencyConvert any amount between 30+ fiat currencies with real-time ECB rates. Returns converted amount, rate, and inverse rate. [PAID: $0.002 USDC per call via x402 on Base. First call without payment_sig…Doesn't say
  • get_crypto_pricesLive cryptocurrency prices, market caps, volume, and percentage changes for top tokens. Supports custom coin lists and multiple quote currencies. [PAID: $0.005 USDC per call via x402 on Base. First c…Doesn't say
  • get_crypto_newsAggregated real-time cryptocurrency news feed with lexicon-based sentiment analysis and cross-outlet story clustering. Filters by topic, time-range, and sentiment bands. [PAID: $0.008 USDC per call v…Doesn't say
  • get_defi_yieldsPremium cross-protocol DeFi yield aggregator and scanner powered by DefiLlama. Scans Aave, Compound, Uniswap, Morpho, and 100+ protocols for the best APY opportunities across chains. Filter by token,…Doesn't say
  • get_gas_pricesReal-time gas price oracle for Base, Ethereum, Arbitrum, and Optimism. Returns slow/standard/fast fee tiers, estimated costs for common operations, and network congestion status. [PAID: $0.001 USDC p…Doesn't say
  • get_wallet_intelPremium wallet intelligence and profiling for Base, Ethereum, and Sepolia. Checks address profile, EOA vs smart contract, ERC-20 token balances (USDC, USDT, WETH, LINK, etc.), total transaction count…Doesn't say
  • get_risk_reportComprehensive on-chain due-diligence report. Combines 6+ risk signals (known-risky address, wallet age, contract bytecode, proxy detection, selfdestruct patterns) with full wallet profiling and token…Doesn't say
  • get_market_pulseReal-time market snapshot in one call: top crypto prices (CoinGecko), major FX rates (ECB), Base gas fees, and top USDC DeFi yields (DefiLlama). All four sources fetched in parallel. [PAID: $0.05 USD…Doesn't say
  • get_travel_briefComplete destination intelligence in one call. Geocodes any city then fetches 7-day weather forecast, air quality index, upcoming public holidays, and local currency FX rates — all in parallel. [PAID…Doesn't say
  • register_watchRegister a watch condition for real-time monitoring of prices, gas, weather, wallet balances/txs, or custom API endpoints. Returns watchId and checkEndpoint URL. [PAID: $0.01 USDC per call via x402 o…Doesn't say
  • check_watchCheck a watch condition by ID. Evaluates if the condition has been met relative to the caller's previous baseline, updates baseline to current, and sends notifications if triggered. [PAID: $0.008 USD…Doesn't say
  • check_watches_batchBatch check up to 5 watch conditions concurrently. If individual watches fail or are missing, error objects are returned inline to prevent batch interruption. [PAID: $0.02 USDC per call via x402 on B…Doesn't say
  • get_bazaar_category_trendsFetches historical metrics, active listings share, price distribution, and call volume momentum for a specific Bazaar service tag over a snapshot series. [PAID: $0.25 USDC per call via x402 on Base.…Doesn't say
  • get_bazaar_competitorsFinds the closest competitor listings by tag overlap and semantic token similarity. Returns pricing, calls, and payers for each competitor along with the query resource's market rank. [PAID: $0.5 USD…Doesn't say
  • audit_agent_visibilityAEO/GEO Agent Visibility Auditor. Audit any third-party API endpoint for x402 compatibility, schema compliance, robots.txt indexing accessibility, and LLM tool calling clarity. [PAID: $0.75 USDC per…Doesn't say
  • get_listing_intelAudit your own x402 listings against the live Bazaar catalogue. Authenticity scoring separates genuine demand from self-traffic (the catalogue's highest-volume listings are frequently a merchant call…Doesn't say
  • get_market_historyThe x402 Bazaar as a time series, reconstructed from our own daily snapshots. Coinbase's discovery API returns only the catalogue as it is right now - it has no archive. This returns per-day ecosyste…Doesn't say
  • check_listing_healthFREE x402 merchant listing health report (3/day/IP). Pass your merchant domain or payTo address and get: per-listing serviceName/tags/icon checks, 30-day call and payer counts, revenue proxy, market…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200171 ms
initializedHTTP 20234 ms
tools/listHTTP 20094 ms
unknown-methodHTTP 20031 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.