Is io.github.yuridivonis/whoop-mcp-server safe to use?

io.github.yuridivonis/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.yuridivonis/whoop-mcp-server?

io.github.yuridivonis/whoop-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.yuridivonis/whoop-mcp-server?

io.github.yuridivonis/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.yuridivonis/whoop-mcp-server actively maintained?

io.github.yuridivonis/whoop-mcp-server is actively maintained - last commit was 10 days ago. It has 18 GitHub stars.

io.github.yuridivonis/whoop-mcp-server

tsc

Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.

18 870.0k/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 10d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.yuridivonis/whoop-mcp-server is an MCP server that your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted. Its tool list has not been published yet over http, requires no API key, and scores 67/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML Health

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-yuridivonis-whoop-mcp-server": {
      "args": [
        "-y",
        "tsc"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-yuridivonis-whoop-mcp-server)](https://mcppedia.org/s/io-github-yuridivonis-whoop-mcp-server)

Read me

What io.github.yuridivonis/whoop-mcp-server does

Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

67/100across 5 weighted dimensions

How we score →

0255075100

−33

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked tsc against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.yuridivonis/whoop-mcp-server safe to use?: io.github.yuridivonis/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.yuridivonis/whoop-mcp-server?: io.github.yuridivonis/whoop-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.yuridivonis/whoop-mcp-server?: io.github.yuridivonis/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.yuridivonis/whoop-mcp-server actively maintained?: io.github.yuridivonis/whoop-mcp-server is actively maintained - last commit was 10 days ago. It has 18 GitHub stars.

Similar servers

Others in ai-ml / health

View all →

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.5k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.yuridivonis/whoop-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Health

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-yuridivonis-whoop-mcp-server": {
      "args": [
        "-y",
        "tsc"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-yuridivonis-whoop-mcp-server)](https://mcppedia.org/s/io-github-yuridivonis-whoop-mcp-server)

Read me

What io.github.yuridivonis/whoop-mcp-server does

Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Whoop MCP Server

Your WHOOP data in whichever AI you use, or, soon, in your own code. Self-hosted, private, and open source.

Ask Claude, ChatGPT or another MCP app "How did I sleep this week?" and get the answer from your own recovery, sleep, strain and workouts. You run the server yourself: it fetches your data from WHOOP when you ask and keeps no copy, and only the apps you've allowed can reach it.

This is an independent open-source project. It uses the WHOOP API to access data from WHOOP products, and is not affiliated with, endorsed by, or sponsored by WHOOP.

Two ways in

Talk to your data. Deploy the server, connect it to your AI, and ask. Start with Setup, then Add to your AI, which also lists the apps tested so far.
Build with it. The WHOOP client inside this server (typed, tested, and careful with WHOOP's single-use refresh tokens) is being split out as a library for your own code. It isn't published yet: watch this repository's releases to hear when it is.

Built on the Whoop Developer API v2, and the Model Context Protocol (MCP), the open standard AI apps use to call tools like these.

Features

Everything Whoop sends, nothing hidden: every physiological field of Whoop's API, with a date on every record, zeros shown as zeros and unscored days marked as such
Recovery: daily recovery score, HRV, resting heart rate, SpO2, skin temperature, and whether Whoop is still calibrating
Sleep: bed and wake times, time asleep and in bed, awake and no-data time, light/deep/REM stages, sleep cycles, disturbances, performance, efficiency, consistency, respiratory rate, the sleep needed before each night (baseline, debt, strain, nap credit), and naps
Strain: daily strain score, calories, average and max heart rate, and steps
Workouts: activity, local start time, duration, strain, heart rate, calories, time in every heart-rate zone, distance, elevation gain and altitude change, and the share of heart-rate data recorded
Live data: every answer is fetched from Whoop when you ask, so it's always current. The server stores only its sign-ins and your encrypted Whoop tokens, never your health data
Private by default: each app signs in with a password you choose (OAuth 2.1), and only after you tick a box allowing it, so nobody else can read your data
Your choice of AI: tested live with Claude and ChatGPT; other apps that sign in with OAuth should work the same way (see compatibility)

MCP Tools

Tool	Description
`get_today`	Morning briefing: the latest recovery, last night's sleep with its need and naps, and today's strain, every field, each dated
`get_recovery_trends`	Daily recovery, HRV, resting heart rate, SpO2, skin temperature and calibrating flag, with averages over the scored days
`get_sleep_analysis`	Nightly sleep: times, stages, performance, efficiency, consistency, disturbances, respiratory rate and sleep need; naps; averages
`get_strain_history`

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

67/100across 5 weighted dimensions

How we score →

0255075100

−33

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked tsc against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.yuridivonis/whoop-mcp-server safe to use?: io.github.yuridivonis/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.yuridivonis/whoop-mcp-server?: io.github.yuridivonis/whoop-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.yuridivonis/whoop-mcp-server?: io.github.yuridivonis/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.yuridivonis/whoop-mcp-server actively maintained?: io.github.yuridivonis/whoop-mcp-server is actively maintained - last commit was 10 days ago. It has 18 GitHub stars.