GribStream Weather MCP

by gribstream.com · remote · no sign-in to list tools · v1.1.4 · published by com.gribstream

NOAA and ECMWF weather forecast MCP for discovery, validation, and GribStream OAuth queries.

Changes · 5

Compare Registry entry

12 tools: 5 change things and 7 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things5Claude Code: ask: see these tools
Only reads7Claude Code: allow: see these tools

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gribstream https://gribstream.com/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn

Warngribstream_build_runs_request
The server marks "gribstream_build_runs_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_build_runs_request" says "run": a word for a change.
What this check looks for
Warngribstream_build_timeseries_request
The server marks "gribstream_build_timeseries_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_build_timeseries_request" says "request": a word for a change.
What this check looks for
Warngribstream_list_datasets
The server marks "gribstream_list_datasets" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_list_datasets" says "list": a word for reading.
What this check looks for
Warngribstream_query_runs
The server marks "gribstream_query_runs" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_query_runs" says "query": a word for reading.
What this check looks for
Warngribstream_query_timeseries
The server marks "gribstream_query_timeseries" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_query_timeseries" says "query": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

gribstream_build_runs_requestNO AUTH / PUBLIC / READ-ONLY.1 finding
Why it is in this group
- The name "gribstream_build_runs_request" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "gribstream_build_runs_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_build_runs_request" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Build and validate a runnable /runs API request and curl command without sending it. Use gribstream_query_runs to retrieve model-run comparisons directly; a separate build call is optional. Use catalog selectors in request.variables and points in request.coordinates or one request.grid.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_build_timeseries_requestNO AUTH / PUBLIC / READ-ONLY.1 finding
Why it is in this group
- The name "gribstream_build_timeseries_request" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "gribstream_build_timeseries_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_build_timeseries_request" says "request": a word for a change.
  What this check looks for
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Build and validate a runnable /timeseries API request and curl command without sending it. Use gribstream_query_timeseries to retrieve data directly; a separate build call is optional. Use catalog selectors in request.variables and points in request.coordinates or one request.grid. Omit asOf for latest forecasts.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_list_datasetsNO AUTH / PUBLIC / READ-ONLY.1 finding
Why it is in this group
- The name "gribstream_list_datasets" says "list": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "gribstream_list_datasets" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_list_datasets" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Find candidate datasets for a region and weather variable. Filter by provider, region, forecast_time, shared_parameter and is_ensemble; sort_by=resolution ranks nominal resolution in km. With shared_parameter, each result includes a validated request fragment and exact/approximate match. Use it directly in one gribstream_query_timeseries call. Coverage envelopes and forecast horizons are catalog hints, not live availability guarantees. No weather values are fetched.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_query_runsAUTH REQUIRED / DATA QUERY.1 finding
Why it is in this group
- The name "gribstream_query_runs" says "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "gribstream_query_runs" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_query_runs" says "query": a word for reading.
  What this check looks for
Description, as the server wrote it
AUTH REQUIRED / DATA QUERY. Fetch or retrieve weather values across model runs to compare changing forecasts. timesList selects exact model run times, not valid times; minHorizon/maxHorizon constrain lead hours. Use discovered request.variables with coordinates or one grid. CSV is the default; use delivery=url for large results. Response rows are unsorted; sort by location, forecasted_at and forecasted_time before plotting. When a live query returns a resource_link, the exact signed HTTPS URL is the result: download it directly once with an available HTTPS or file-download capability, without an API token. This consumes the selected GribStream MCP result; it is not a direct GribStream API call or a connector bypass. Do not look for an MCP resources/read tool, and do not repeat the query merely to obtain the file bytes.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
gribstream_query_timeseriesAUTH REQUIRED / DATA QUERY.1 finding
Why it is in this group
- The name "gribstream_query_timeseries" says "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "gribstream_query_timeseries" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gribstream_query_timeseries" says "query": a word for reading.
  What this check looks for
Description, as the server wrote it
AUTH REQUIRED / DATA QUERY. Fetch or retrieve weather values for maps, heatmaps and analysis at selected valid times. Use discovered request.variables with coordinates or one grid; no separate build/validate call is needed. CSV is the default; use delivery=url for large results and render the downloaded file locally. Prefer Parquet only with an available reader. Use timesList for one exact UTC valid time; omit asOf for latest forecasts. Requested sampling does not increase native resolution. Response rows are unsorted; sort rows before plotting. When a live query returns a resource_link, the exact signed HTTPS URL is the result: download it directly once with an available HTTPS or file-download capability, without an API token. This consumes the selected GribStream MCP result; it is not a direct GribStream API call or a connector bypass. Do not look for an MCP resources/read tool, and do not repeat the query merely to obtain the file bytes.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false

Only reads 7Looks things up and changes nothing.Claude Code: allow

gribstream_get_datasetNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_get_dataset" says "get": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Inspect archive coverage, cadence, horizon, members, and native_grid geometry for one dataset. The native coordinate URL requires authentication and geographic bounds; geometry does not prove variable availability.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_get_expression_referenceNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_get_expression_reference" says "get": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Get expression syntax, alias rules, examples, and supported func.* math functions for derived weather signals.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_get_parameterNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_get_parameter" says "get": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Gets detailed metadata and exact selector variations for one already-known dataset-native parameter code. Parameter codes are case-sensitive. For a common natural-language concept such as 2 metre temperature, use gribstream_resolve_shared_parameter before guessing a native code.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_list_parametersNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_list_parameters" says "list": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Lists parameter summaries for one dataset. Use this before selecting exact case-sensitive parameter codes.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_list_shared_parametersNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_list_shared_parameters" says "list": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Lists normalized shared parameter presets that can map one logical signal across datasets. Use this only when the shared parameter code is uncertain; when a common code such as temperature_2m is already clear, call gribstream_resolve_shared_parameter directly.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_resolve_shared_parameterNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_resolve_shared_parameter" says "resolve": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Resolves a weather concept to validated native variables/expressions and an exact or approximate match label. Use resolved_request directly in /timeseries or /runs; read resolved_match for height differences and native statistics. Use this first for common natural-language concepts such as 2 metre temperature or 10 metre wind instead of guessing dataset-native codes such as TMP.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
gribstream_validate_requestNO AUTH / PUBLIC / READ-ONLY.No findings
Why it is in this group
- The name "gribstream_validate_request" says "validate": a word for reading.
Description, as the server wrote it
NO AUTH / PUBLIC / READ-ONLY. Validates the basic shape, exact selector tuples, and expression syntax of a proposed GribStream /timeseries or /runs request without sending it. Use this before returning any hand-edited curl or when changing a request from one dataset to another.
Annotations the server declares
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http gribstream https://gribstream.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__gribstream__gribstream_get_dataset",
      "mcp__gribstream__gribstream_get_expression_reference",
      "mcp__gribstream__gribstream_get_parameter",
      "mcp__gribstream__gribstream_list_parameters",
      "mcp__gribstream__gribstream_list_shared_parameters",
      "mcp__gribstream__gribstream_resolve_shared_parameter",
      "mcp__gribstream__gribstream_validate_request"
    ],
    "ask": [
      "mcp__gribstream__gribstream_build_runs_request",
      "mcp__gribstream__gribstream_build_timeseries_request",
      "mcp__gribstream__gribstream_list_datasets",
      "mcp__gribstream__gribstream_query_runs",
      "mcp__gribstream__gribstream_query_timeseries"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gribstream. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.gribstream/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:56 UTC.

For agents: Markdown · JSON · report this listing