.vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This sample project demonstrates how to create an MCP server using the Spring AI MCP Server Boot Starter with WebFlux transport. It implements a weather service that exposes tools for retrieving weather information using the National Weather Service API.
For more information, see the MCP Server Boot Starter reference documentation.
The sample showcases:
spring-ai-mcp-server-webflux-spring-boot-starter@Tool annotationThe project requires the Spring AI MCP Server WebFlux Boot Starter:
<dependency>
<groupId>org.springframework.ai</groupId>
<artifactId>spring-ai-mcp-server-webflux-spring-boot-starter</artifactId>
</dependency>This starter provides:
WebFluxSseServerTransport)spring-boot-starter-webflux and mcp-spring-webflux dependenciesBuild the project using Maven:
./mvnw clean install -DskipTestsThe server supports two transport modes:
java -jar target/mcp-weather-starter-webflux-server-0.0.1-SNAPSHOT.jarTo enable STDIO transport, set the appropriate properties:
java -Dspring.ai.mcp.server.stdio=true -Dspring.main.web-application-type=none -jar target/mcp-weather-starter-webflux-server-0.0.1-SNAPSHOT.jarConfigure the server through application.properties:
# Server identification
spring.ai.mcp.server.name=my-weather-server
spring.ai.mcp.server.version=0.0.1
# Server type (SYNC/ASYNC)
spring.ai.mcp.server.type=SYNC
# Transport configuration
spring.ai.mcp.server.stdio=false
spring.ai.mcp.server.sse-message-endpoint=/mcp/message
# Change notifications
spring.ai.mcp.server.resource-change-notification=true
spring.ai.mcp.server.tool-change-notification=true
spring.ai.mcp.server.prompt-change-notification=true
# Logging (required for STDIO transport)
spring.main.banner-mode=off
logging.file.name=./target/starter-webflux-server.loggetWeatherForecastByLocationlatitude: double - Latitude coordinatelongitude: double - Longitude coordinateCallToolResult forecastResult = client.callTool(new CallToolRequest("getWeatherForecastByLocation",
Map.of("latitude", 47.6062, "longitude", -122.3321)));getAlertsstate: String - Two-letter US state code (e.g., CA, NY)CallToolResult alertResult = client.callTool(new CallToolRequest("getAlerts",
Map.of("state", "NY")));The server uses Spring Boot and Spring AI's tool annotations for automatic tool registration:
@SpringBootApplication
public class McpServerApplication {
public static void main(String[] args) {
SpringApplication.run(McpServerApplication.class, args);
}
@Bean
public List<ToolCallback> k3sTools(clusterService clusterService) {
return List.of(ToolCallbacks.from(clusterService));
}
}The clusterService implements the weather tools using the @Tool annotation:
@Service
public class clusterService {
@Tool(description = "Get weather forecast for a specific latitude/longitude")
public String getWeatherForecastByLocation(double latitude, double longitude) {
// Implementation using weather.gov API
}
@Tool(description = "Get weather alerts for a US state. Input is Two-letter US state code (e.g., CA, NY)")
public String getAlerts(String state) {
// Implementation using weather.gov API
}
}You can connect to the weather server using either STDIO or SSE transport:
#### WebFlux SSE Client
For servers using SSE transport:
var transport = new WebFluxSseClientTransport(WebClient.builder().baseUrl("http://localhost:8080"));
var client = McpClient.sync(transport).build();#### STDIO Client
For servers using STDIO transport:
var stdioParams = ServerParameters.builder("java")
.args("-Dspring.ai.mcp.server.stdio=true",
"-Dspring.main.web-application-type=none",
"-Dspring.main.banner-mode=off",
"-Dlogging.pattern.console=",
"-jar",
"target/mcp-weather-starter-webflux-server-0.0.1-SNAPSHOT.jar")
.build();
var transport = new StdioClientTransport(stdioParams);
var client = McpClient.sync(transport).build();The sample project includes example client implementations:
For a better development experience, consider using the MCP Client Boot Starters. These starters enable auto-configuration of multiple STDIO and/or SSE connections to MCP servers. See the starter-default-client and starter-webflux-client projects for examples.
Lets use the starter-webflux-client client to connect to our weather starter-webflux-server.
Follow the starter-webflux-client readme instruction to build a mcp-starter-webflux-client-0.0.1-SNAPSHOT.jar client application.
#### STDIO Transport
mcp-servers-config.json configuration file with this content:{
"mcpServers": {
"weather-starter-webflux-server": {
"command": "java",
"args": [
"-Dspring.ai.mcp.server.stdio=true",
"-Dspring.main.web-application-type=none",
"-Dlogging.pattern.console=",
"-jar",
"/absolute/path/to/mcp-weather-starter-webflux-server-0.0.1-SNAPSHOT.jar"
]
}
}
}java -Dspring.ai.mcp.client.stdio.servers-configuration=file:mcp-servers-config.json \
-Dai.user.input='What is the weather in NY?' \
-Dlogging.pattern.console= \
-jar mcp-starter-webflux-client-0.0.1-SNAPSHOT.jar#### SSE (WebFlux) Transport
mcp-weather-starter-webflux-server:java -jar mcp-weather-starter-webflux-server-0.0.1-SNAPSHOT.jarstarts the MCP server on port 8080.
java -Dspring.ai.mcp.client.sse.connections.weather-server.url=http://localhost:8080 \
-Dlogging.pattern.console= \
-Dai.user.input='What is the weather in NY?' \
-jar mcp-starter-webflux-client-0.0.1-SNAPSHOT.jar{
"servers": {
"weather-starter-webflux-server": {
"type": "http",
"url": "http://localhost:8080/mcp"
}
}
}amanhogan@Amans-MacBook-Air k3s-mcp % npx @modelcontextprotocol/inspector
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.