C-

npm:@virga-mcp/server

https://www.npmjs.com/package/@virga-mcp/server
70/100 · MCP Trust Grade · checked 4h ago · MCP 0.1.2

What it offers — 14 tools · Finance & Crypto

get_current_weather

Get current weather conditions for a location. Returns temperature, humidity, wind, precipitation, and conditions.

get_hourly_forecast

Get hourly weather forecast for a location. Returns up to 120 hours of forecast data.

get_daily_forecast

Get daily weather forecast for a location. Returns up to 16 days of forecast data.

get_historical_weather

Get historical weather data for a location on a specific date. Returns temperature, humidity, wind, and conditions for that date.

search_location

Geocode a place name to latitude/longitude coordinates. Use this to convert city names, addresses, or landmarks into coordinates for weather queries.

create_account

Create a new Virga Weather API account. Returns a stage API key for testing. No authentication required.

accept_terms

Accept the Virga Weather API terms of service. Required before creating production keys.

activate_billing

Set up a payment method via Stripe. Returns a checkout URL that must be opened in a browser to complete setup. Required before purchasing credits.

purchase_credits

Purchase a credit bundle. Returns a Stripe checkout URL to complete the purchase. Bundles: 500 credits ($5), 2000 ($18), 10000 ($75).

get_billing_status

Get current billing status including credit balance, spend caps, and auto-topup configuration.

list_api_keys

List all API keys for the account. Shows key prefix, environment, status, and last used timestamp.

create_api_key

Create a new API key. Production keys require accepted terms, activated billing, and positive credit balance.

revoke_api_key

Revoke an API key. WARNING: This is a destructive operation — the key will immediately stop working and cannot be restored.

get_usage

Get API usage history for the account. Shows endpoint calls, credit costs, and timestamps.

Spec / packaging20%100
Security (OWASP MCP)30%25
Maintenance / popularity20%75
Tool hygiene15%95
Transparency / provenance15%90

Findings

WARNMCP08 References sensitive file paths / environment secrets.
INFO Static analysis of npm package @virga-mcp/server@0.1.2 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:@virga-mcp/server on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:@virga-mcp/server grade C-
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade C- · wmcp.sh
[![MCP Trust Grade C-](https://wmcp.sh/mcp/grade/npm%3A%40virga-mcp%2Fserver/badge.svg)](https://wmcp.sh/mcp/grade/npm%3A%40virga-mcp%2Fserver)
<a href="https://wmcp.sh/mcp/grade/npm%3A%40virga-mcp%2Fserver"><img src="https://wmcp.sh/mcp/grade/npm%3A%40virga-mcp%2Fserver/badge.svg" alt="MCP Trust Grade C- · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.