{"name":"io.github.davidmosiah/withingsmcp","slug":"davidmosiah-withingsmcp","title":null,"description":"Privacy-first, unofficial Withings MCP server for AI health, sleep, activity and heart-rate agents.","url":"https://mcp.market/server/davidmosiah-withingsmcp","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":25,"stars":5,"forks":1,"downloads_week":null,"last_push_at":"2026-08-29T10:29:14.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/davidmosiah/withings-mcp","website":"https://wellness.delx.ai/connectors/withings","version":"0.4.7","remotes":[],"packages":[{"registryType":"npm","identifier":"withings-mcp-unofficial","version":"0.4.7","transport":{"type":"stdio"},"environmentVariables":[{"description":"Withings OAuth client ID. Optional when configured with withings-mcp-server setup.","format":"string","name":"WITHINGS_CLIENT_ID"},{"description":"Withings OAuth client secret. Prefer withings-mcp-server setup so this secret is stored in ~/.withings-mcp/config.json instead of MCP client config.","format":"string","isSecret":true,"name":"WITHINGS_CLIENT_SECRET"},{"description":"Redirect URI configured in the Withings Developer Dashboard. Optional when configured with withings-mcp-server setup.","format":"string","name":"WITHINGS_REDIRECT_URI"},{"description":"Optional local path for OAuth tokens. Defaults to ~/.withings-mcp/tokens.json.","format":"string","name":"WITHINGS_TOKEN_PATH"},{"description":"Optional payload mode: summary, structured, or raw. Defaults to structured. raw means full Withings API payloads, not continuous 24/7 raw sensor telemetry.","format":"string","name":"WITHINGS_PRIVACY_MODE"},{"description":"Optional SQLite cache toggle. Set to true or sqlite to enable.","format":"string","name":"WITHINGS_CACHE"},{"description":"Optional local SQLite cache path. Defaults to ~/.withings-mcp/cache.sqlite.","format":"string","name":"WITHINGS_CACHE_PATH"},{"description":"Set to true to bypass the in-memory HTTP response cache (60s TTL for GET only). POST/PUT/DELETE and 4xx/5xx responses are never cached regardless. Note: Withings's wbsapi.withings.net is POST-only today, so this is currently a no-op.","format":"string","name":"WITHINGS_NO_CACHE"}]}],"tools":[{"name":"withings_agent_manifest","description":"Machine-readable install, runtime and client guidance for AI agents. Does not call Withings or expose secrets.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_cache_status","description":"Show optional local SQLite cache status. Enable with WITHINGS_CACHE=sqlite or WITHINGS_CACHE=true.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_capabilities","description":"Explain supported Withings data, privacy boundaries, recommended agent workflow and project links.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_connection_status","description":"Check local Withings config, token file, Node version, privacy mode, cache readiness and optional MCP client readiness without calling Withings or exposing secrets.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_daily_summary","description":"Build a practical daily summary from Withings activity, sleep and body/heart data when available. Read-only and non-medical.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_data_inventory","description":"Inventory supported Withings data domains, auth scope requirements, privacy boundary and recommended first calls. Does not call Withings APIs or expose user data.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_demo","description":"Returns realistic example payloads of withings_daily_summary, withings_wellness_context, and withings_list_body_measures so agents see the contract before calling real Withings APIs.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_exchange_code","description":"Exchange a Withings OAuth authorization code for local tokens using Withings signed request flow. Tokens are stored locally and never returned.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_get_auth_url","description":"Generate a Withings OAuth authorization URL. Use this first when no local token exists.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_onboarding","description":"Return the 11-question onboarding flow plus the current profile state and missing fields. Read-only — does NOT persist anything. Pair with withings_profile_update once the user answers. Cross-connector: the same profile is shared by every Delx Wellness MCP (whoop, garmin, oura, fitbit, strava, polar, withings, apple-health, samsung-health, google-health, nourish, cycle-coach, cgm, air).","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_privacy_audit","description":"Return local privacy, cache, token-path and env-presence posture without revealing secret values.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_profile_get","description":"Read the shared Delx Wellness profile from ~/.delx-wellness/profile.json. Returns preferred name, goals, devices, training/nutrition/exercise/agent preferences and safety flags. NEVER contains OAuth tokens or API secrets. Read-only.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_profile_update","description":"Persist a partial patch to ~/.delx-wellness/profile.json. Requires explicit_user_intent=true (otherwise returns USER_ACTION_REQUIRED). Rejects secret-like fields (oauth, token, secret, password, cookie, refresh, api_key, session) at write time. Use to record preferred name, goals, devices, training context, nutrition context, exercise preferences, agent preferences, and safety flags.","write_action":true,"price_micros":0,"input_schema":null},{"name":"withings_quickstart","description":"Personalized 3-step setup walkthrough for the human user. Adapts to current state (env vars set? token present? what's next?). Call this first when the user asks 'how do I connect Withings?'","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_revoke_access","description":"Delete the local Withings token file. Withings token revocation support varies by app/API plan, so this tool only clears local access.","write_action":true,"price_micros":0,"input_schema":null},{"name":"withings_weekly_summary","description":"Build a weekly Withings scorecard with sleep, activity, body measures, bottlenecks and actions. Read-only and non-medical.","write_action":false,"price_micros":0,"input_schema":null},{"name":"withings_wellness_context","description":"Normalize Withings sleep and activity load into the shared wellness_context shape for recommendation engines.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-09-26T11:37:36.593Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T11:37:36.890Z","components":{"code":{"score":25,"max":25,"notes":["58 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 28 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"withings-mcp-unofficial","version":"0.4.7","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":5,"publishedAt":"2026-06-27T13:40:32.078Z","repositoryUrl":"git+https://github.com/davidmosiah/withings-mcp.git"}],"repo":{"found":true,"owner":"davidmosiah","repo":"withings-mcp","archived":false,"pushedAt":"2026-08-29T10:29:14Z","stars":5,"forks":1,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/624359?v=4","ownerCreatedAt":"2011-02-18T00:23:21Z","license":"MIT"},"icon":{"url":"https://wellness.delx.ai/favicon.svg","source":"site"},"presence":{"stars":5,"forks":1,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-08-29T10:29:14.000Z","score":25}}}},"grade_history":[],"reviews":[]}