Is SeaWeb MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
2 low
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 3491ms17/20
- Tool poisoning43 tool descriptions checked13/15
- Auth qualityAPI key sent as a header8/15
- Maintenanceno repository listed3/15
- Maintainer identityverified namespace with website, no repo4/10
Findings (2)
- lowUnusually long tool description (over 2,000 characters)
poison.long-descriptiontool get_disruptions: …Disruption Watch: active disruption alerts (weather, safety, travel advisories) for a region. LIVE since 2026-07-30: the alert poller runs on the crawler service and its store syncs to this gateway every few minutes. Coverage is partial and worth stating plainly: the weather feed is api.weather.gov, which is UNITED STATES ONLY, and the advisory feed is travel.state.gov, which is global but country-level with no sub-national geometry. Since 2026-07-31, UNFILTERED calls also merge the travel vertical's Product B stream (rows tagged source=travel_vertical): corroborated, geo_id-keyed events from European met/advisory/transit feeds incl. strikes — see list_disruption_events for the richer filtered surface. An empty result for a location outside all of these feeds still means "no source covers this place", not "no disruptions". Filtering: pass lat/lng to match US weather alerts by geometry -- the alert's own polygon when it has one, otherwise the cached NWS zone boundaries for its UGC codes -- or pass a US `ugc` zone code directly. When lat/lng are set, the reply may also include rows with: - `source=nws_observation` Surface Visibility (nearest NWS station meters/miles, NOT landmark webcam) - `source=buoy_observation` Wave/wind from nearest NDBC buoy (height ft/m, period, wind kts) NEW v2 - `source=forecast_observation` Hourly forecast next 6h with freeze/heat guidance NEW v2 - `source=road_closure` Caltrans SR-1/Big Sur closures NEW v2 - `source=aqi_observation` EPA AirNow AQI + outdoor seating advice NEW v2 - `source=transit_disruption` BART/511 strike/delay NEW v2 - `source=camera_vision` fresh ingest-side VLM row, else explicit `camera_observation` forecast fallback - `source=quake_observation` USGS earthquake M/dist NEW v2 - `source=insurance_observation` NatCat risk synthesis NEW v2 - `source=legal_observation` Federal Register recent rules NEW v2 - `source=threat_observation` NVD CVE CVSS NEW v2 - `source=vendor_observation` Supply chain / vendor risk NEW v2 Country-level advisories carry no geometry, so a lat/lng filter excludes them; omit all filters to get every active alert including advisories. Each CAP row carries severity/urgency/event/headline plus honest `freshness` (alert_fresh|alert_stale) and `join_eligible` labels -- alerts inform, they are never silently dropped. An empty CAP list is not all-clear.…
- lowNo source repository listed
maint.no-repo
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what SeaWeb does
- Anyway Possible Paid Agent UtilitiesPaid x402 tools for merchant intelligence, Base payment readiness, and verifiable web evidence.not reviewedGrowingA
- BlockrunWeb search, deep research, prediction markets & crypto data for AI agents. Pay per call via x402.not reviewedEstablishedB
- X402 ListFind and vet x402 payment APIs before your agent pays one: uptime, price, on-chain volume.not reviewedEstablishedA