Is io.github.Zayden16/whoop-mcp-server safe to use?

io.github.Zayden16/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.Zayden16/whoop-mcp-server?

io.github.Zayden16/whoop-mcp-server can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.Zayden16/whoop-mcp-server?

io.github.Zayden16/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

io.github.Zayden16/whoop-mcp-server

MCP server for the official Whoop API v2: cycles, recovery, sleep, workouts, and profile data

GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Health

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-zayden16-whoop-mcp-server": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-zayden16-whoop-mcp-server)](https://mcppedia.org/s/io-github-zayden16-whoop-mcp-server)

Read me

What io.github.Zayden16/whoop-mcp-server does

MCP server for the official Whoop API v2: cycles, recovery, sleep, workouts, and profile data

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

15/100across 5 weighted dimensions

How we score →

0255075100

−85

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Zayden16/whoop-mcp-server safe to use?: io.github.Zayden16/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.Zayden16/whoop-mcp-server?: io.github.Zayden16/whoop-mcp-server can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.Zayden16/whoop-mcp-server?: io.github.Zayden16/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Similar servers

Others in health

View all →

Clinicaltrialsgov Mcp Server90

MCP server for the ClinicalTrials.gov v2 API. Search trials, retrieve study details and results, and match patients to eligible trials.

81 7

Withings MCP Server88

MCP server for Withings health data — sleep, activity, heart, and body metrics.

28 11

io.github.SidneyBissoli/cid10-br-mcp87

MCP Server for Brazilian ICD-10 (DATASUS) - International Classification of Diseases

1 6

io.github.domdomegg/openfoodfacts-mcp87

Search and contribute to the Open Food Facts database.

3 9

MCP Security Weekly

Get CVE alerts and security updates for io.github.Zayden16/whoop-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Health

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-zayden16-whoop-mcp-server": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-zayden16-whoop-mcp-server)](https://mcppedia.org/s/io-github-zayden16-whoop-mcp-server)

Read me

What io.github.Zayden16/whoop-mcp-server does

MCP server for the official Whoop API v2: cycles, recovery, sleep, workouts, and profile data

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

whoop-mcp-server

MCP server for the official Whoop API v2, written in Go. Exposes cycles, recovery, sleep, workouts, and profile data as MCP tools.

Tools

All tools return JSON. Record shapes are the unmodified Whoop API v2 objects, so every field the API exposes is available to the model.

Tool	Inputs	Returns
`get_profile`	—	Single object: `user_id`, `email`, `first_name`, `last_name`
`get_body_measurement`	—	Single object: `height_meter`, `weight_kilogram`, `max_heart_rate`
`get_cycles`	`start_date`, `end_date`, `limit` (all optional)	Array of cycle records — one per physiological day: `start`/`end`, `score_state`, and `score` with day `strain`, `kilojoule`, `average_heart_rate`, `max_heart_rate`
`get_latest_cycle`	—	Single cycle record (the current/most recent day)
`get_recoveries`	`start_date`, `end_date`, `limit` (all optional)	Array of recovery records — one per sleep: `cycle_id`, `sleep_id`, and `score` with `recovery_score` (0–100), `resting_heart_rate`, `hrv_rmssd_milli`, `spo2_percentage`, `skin_temp_celsius`
`get_recovery_for_cycle`	`cycle_id` (required)	Single recovery record for that cycle
`get_sleep`	`start_date`, `end_date`, `limit` (all optional)	Array of sleep records: `start`/`end`, `nap` flag, and `score` with per-stage durations (light/SWS/REM/awake, in ms), `respiratory_rate`, `sleep_performance_percentage`, `sleep_efficiency_percentage`, sleep-need breakdown
`get_workouts`	`start_date`, `end_date`, `limit` (all optional)	Array of workout records: `sport_name`, `start`/`end`, and `score` with workout `strain`, heart rates, `kilojoule`, `distance_meter`, `altitude_gain_meter`, time-in-zone durations (`zone_durations`, ms per HR zone)
`get_average_strain`	`days` (optional, default 7)	Computed aggregate: `{days, cycles_counted, average_strain}`
`check_auth_status`	—	`{authenticated: bool}` plus the profile on success or an `error` string on failure

Notes:

Dates are YYYY-MM-DD; end_date is inclusive (internally mapped to the start of the next day, per the API's exclusive end semantics).
Collections are date-descending (most recent first) and paginated transparently — the server follows next_token until limit records (default 25, max 100) are collected.
Scores are point-in-time per record, not time-series: one strain value per cycle, one recovery per sleep. For trends, fetch a range and let the model aggregate (or use get_average_strain for the built-in strain average).
A record's score_state can be SCORED, PENDING_SCORE, or UNSCORABLE — score is only present when SCORED.

Setup

1. Create a Whoop developer app

At developer.whoop.com, create an app with:

Redirect URI: http://localhost:8719/callback
Scopes: read:cycles, read:recovery, read:sleep, read:workout, read:profile, read:body_measurement, offline

Note the client ID and client secret.

2. Install

Homebrew:

brew install zayden16/tap/whoop-mcp-server

Or download a prebuilt binary from Releases, or:

go install github.com/Zayden16/whoop-mcp-server@latest

Or build from source:

go build -o whoop-mcp-server .

3. Authorize (one time)

export WHOOP_CLIENT_ID=...
export WHOOP_CLIENT_SECRET=...
./whoop-mcp-se

... [View full README on GitHub](https://github.com/zayden16/whoop-mcp-server#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

15/100across 5 weighted dimensions

How we score →

0255075100

−85

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Zayden16/whoop-mcp-server safe to use?: io.github.Zayden16/whoop-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.Zayden16/whoop-mcp-server?: io.github.Zayden16/whoop-mcp-server can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.Zayden16/whoop-mcp-server?: io.github.Zayden16/whoop-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.