Is io.github.rajdeepmondaldotcom/whoop-mcp safe to use?

io.github.rajdeepmondaldotcom/whoop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.rajdeepmondaldotcom/whoop-mcp?

io.github.rajdeepmondaldotcom/whoop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.rajdeepmondaldotcom/whoop-mcp?

io.github.rajdeepmondaldotcom/whoop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.rajdeepmondaldotcom/whoop-mcp actively maintained?

io.github.rajdeepmondaldotcom/whoop-mcp is actively maintained — last commit was 20 days ago.

io.github.rajdeepmondaldotcom/whoop-mcp

WHOOP recovery, sleep, strain, and workouts for any AI. Analysis tools, demo mode, fast setup.

GitHub

No known CVEs

No license

Actively maintained

Last commit 20d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Health

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-rajdeepmondaldotcom-whoop-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-rajdeepmondaldotcom-whoop-mcp)](https://mcppedia.org/s/io-github-rajdeepmondaldotcom-whoop-mcp)

Read me

What io.github.rajdeepmondaldotcom/whoop-mcp does

Your WHOOP shows you charts. It can't answer "should I train hard today" or "what actually hurts my recovery". This server can.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

27/100across 5 weighted dimensions

How we score →

0255075100

−73

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.rajdeepmondaldotcom/whoop-mcp safe to use?: io.github.rajdeepmondaldotcom/whoop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.rajdeepmondaldotcom/whoop-mcp?: io.github.rajdeepmondaldotcom/whoop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.rajdeepmondaldotcom/whoop-mcp?: io.github.rajdeepmondaldotcom/whoop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.rajdeepmondaldotcom/whoop-mcp actively maintained?: io.github.rajdeepmondaldotcom/whoop-mcp is actively maintained — last commit was 20 days ago.

Similar servers

Others in health

View all →

Clinicaltrialsgov Mcp Server92

MCP server for the ClinicalTrials.gov v2 API. Search trials, retrieve study details and results, and match patients to eligible trials.

81 7

io.github.domdomegg/openfoodfacts-mcp89

Search and contribute to the Open Food Facts database.

3 9

Withings MCP Server88

MCP server for Withings health data — sleep, activity, heart, and body metrics.

28 11

io.github.YasuakiOmokawa/oura-mcp87

MCP server for Oura Ring API v2 (sleep, activity, readiness, heart rate, workouts).

1 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.rajdeepmondaldotcom/whoop-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Health

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-rajdeepmondaldotcom-whoop-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-rajdeepmondaldotcom-whoop-mcp)](https://mcppedia.org/s/io-github-rajdeepmondaldotcom-whoop-mcp)

Read me

What io.github.rajdeepmondaldotcom/whoop-mcp does

Your WHOOP shows you charts. It can't answer "should I train hard today" or "what actually hurts my recovery". This server can.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

whoop-mcp-server

Your WHOOP shows you charts. It can't answer "should I train hard today" or "what actually hurts my recovery". This server can.

It connects your WHOOP data to Claude, ChatGPT, and any MCP client. You ask in plain English. It computes the answer from your own records and lets the AI explain it.

You: should I train hard today?

AI:  Recovery 81% (green). HRV trending up. Sleep debt cleared.
     Your 7-day load is 0.94x your 28-day base.
     You are conditioned for more.

Runs on your machine. Read-only. The only network peer is api.prod.whoop.com. No telemetry. MIT.

What you need

A WHOOP account. Any membership works.
uv or pipx, to install one command line tool.
An MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, or ChatGPT.

One constraint to know before you start. WHOOP has no shared developer app, so during setup you create your own free one. It takes about two minutes of clicking, and it is the reason this is private by design: your tokens belong to your app, on your machine, and your health data never routes through anyone else's server. Including mine.

Set it up

Install the tool:

uv tool install whoop-mcp-server

(pipx install whoop-mcp-server works the same.)

Then run the one command that does everything:

whoop-mcp-server setup

Here is what happens, in order, so nothing surprises you:

Your WHOOP app. The wizard opens WHOOP's developer dashboard and tells you exactly what to click: create a team, create an app, enable every scope including offline, set the redirect URL to exactly http://localhost:8765/callback. The form requires a privacy policy URL. Use this repo's: https://github.com/rajdeepmondaldotcom/whoop-mcp-server/blob/main/PRIVACY.md. Copy the Client ID and Secret, paste them into the terminal. They're stored locally with 0600 permissions.
Authorize. Your browser opens WHOOP's consent screen. Approve it. Tokens land in ~/.whoop-mcp and refresh themselves from then on. You never do this again.
Proof. The wizard makes a live API call and prints your actual latest recovery. If anything is misconfigured, you find out here, in the terminal, not later in a chat window.
Your clients. It detects Claude Desktop, Cursor, Windsurf, VS Code, and Claude Code, and writes their configs for you. Existing config is backed up before any edit. If Claude Desktop is running, the wizard asks to quit it first, because Desktop silently overwrites config edits made while it's open. Then it launches the configured command once and confirms the server answers. "Done" means verified, not hopeful.

Restart your client. Ask it: "How did I sleep last night?" Then ask the better question: "Give me the full picture of my health this quarter."

Two useful asides. If you want to see the tools work before connecting anything, whoop-mcp-server serve --demo serves 150 days of realistic generated data through the same pipeline. And if anything misbehaves later, whoop-mcp-server doctor names what's wrong and the fix.

What you can ask

24 tools cover every public user-readable endpoint in WHOOP's API, plus the analysis layer that turns records into answers.

| Ask | Tool behind it | | --

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

27/100across 5 weighted dimensions

How we score →

0255075100

−73

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.rajdeepmondaldotcom/whoop-mcp safe to use?: io.github.rajdeepmondaldotcom/whoop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.rajdeepmondaldotcom/whoop-mcp?: io.github.rajdeepmondaldotcom/whoop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.rajdeepmondaldotcom/whoop-mcp?: io.github.rajdeepmondaldotcom/whoop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.rajdeepmondaldotcom/whoop-mcp actively maintained?: io.github.rajdeepmondaldotcom/whoop-mcp is actively maintained — last commit was 20 days ago.