v5tech/mcp-server-location

critical

A location server based on MCP (Model Context Protocol) that provides IP address location and latitude/longitude query functionality.

This MCP server provides location-based services by querying IP addresses for geographic location and converting latitude/longitude coordinates into d...

purpose: This MCP server provides location-based services bthreat: network exposed

JavaScript★ 0◷ May 20, 2026⚙ May 20, 2026GITHUB

mcpmcp-servermodelcontextprotocol

◆Vulnerability Analysis[ 4 findings in 2 blocks ]

◷ 5/20/2026

high2 findings

src/index.ts

148async function handleIpLocation(params: { ip: string }) {
149  const data = await fetchLocationApi(
150    `https://apimobile.meituan.com/locate/v2/ip/loc?rgeo=true&ip=${params.ip}`
151  ) as IpLocationResponse;

high2 findings

src/index.ts

154async function handleLatLngLocation(params: { lat: number; lng: number }) {
155  const data = await fetchLocationApi(
156    `https://apimobile.meituan.com/group/v1/city/latlng/${params.lat},${params.lng}?tag=0`
157  ) as LatLngLocationResponse;

◆Heuristic Signals

network.httpshell.execauth.none

◆Risk Score

LLM-based

high findings+75

medium findings+15