MCP.Market

Health Data (your own Supabase) MCP server

by almostjacked·io.github.almostjacked/health-mcp·v0.1.3
No reviews yet

Your health data (weight, macros, weigh-ins) as MCP tools — in your own Supabase, zero custody.

D51/100grade D
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
D51/100

full report

Adoption
New

0 stars31 downloads/wk

Reviews

Write one

Nobody has reviewed Health Data (your own Supabase) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Health Data (your own Supabase) tools (7)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_daily_summary

    All metrics for one day (default: the most recent day with any data): totals plus every weigh-in/measurement.

  • get_energy_inputs

    Daily (date, weight, kcal) entries for days having BOTH a calorie total and at least one weigh-in \u2014 shaped exactly for the fitness-tools `adaptive-tdee` tool. Pass the returned `entries` array straight through to compute measured TDEE. Weight is the day's average in lb.

  • get_recent

    Rows for the last N days (default 30), optionally one metric. Daily totals and individual measurements in one date-sorted list.

  • get_schema

    The Postgres schema (two tables) and the metric registry (names, units, classes). Call before writing SQL for the query tool.

  • get_stats

    Min/max/avg plus a rolling-average series for one metric over a date range. rollup: daily (7-day rolling), weekly, monthly (rolling window = 7 periods). Measurements average multiple samples per day first.

  • get_sync_status

    Latest date, row count, and days-since-last-entry per metric. Use to detect a stalled daily sync before trusting an analysis. days_since is measured against the UTC calendar date, so a healthy daily sync typically reads 1\u20132 (never 0 in the evening US time); treat 3+ as a stalled sync.

  • query

    Escape hatch: run one read-only SQL statement (SELECT or WITH\u2026SELECT) against the schema from get_schema. Writes/DDL/PRAGMA are rejected; LIMIT 500 enforced when absent. Use for anything the other tools can't answer.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan7 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 47 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/functions/health-mcp.ts: …t(metric)}` : ""; const t = await exec(`SELECT date::text AS date, metric, value, unit, NULL::text AS timestamp FROM daily_totals WHERE date >= ${lit(cutoff)}${filt}`); const m = await exec(`SEL…
  • mediumeval / new Function usedexec.eval
    dist/functions/health-mcp.ts: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
Overall 51/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Health Data (your own Supabase) compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
51/100
higher than 7% of 802 Databases servers
Tools
7
the typical Databases server has 8
Tools that change things
0%
typical: 10%. Fewer write tools means less an agent can break
Downloads a week
31
more than 16% of 328 Databases servers with a package

What its tools let an agent do: 7 read

Install Health Data (your own Supabase) in Claude Code, Cursor or VS Code

Runs npx -y @almostjacked/health-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add health-mcp -- npx -y @almostjacked/health-mcp
Add to Cursor

Health Data (your own Supabase): common questions

Is Health Data (your own Supabase) MCP server safe?
Not recommended: it is graded D (51/100). Read the Health Data (your own Supabase) safety report
How do I install Health Data (your own Supabase)?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Health Data (your own Supabase) need an API key?
Yes. The registry entry asks for SUPABASE_SECRET_KEY.
Is Health Data (your own Supabase) maintained?
The last commit was 89 days ago (2026-08-07). The latest release is v0.1.3.
What can I use instead of Health Data (your own Supabase)?
Servers from other publishers that do the same job: Supabase MCP server, Ekwo OS — open source accounting: ledger, invoices and VAT on your own Supabase or Postgres MCP server and PostgreSQL MCP server.
How does Health Data (your own Supabase) compare with other Databases MCP servers?
safety score 51/100 (higher than 7% of 802 Databases servers); tools 7 (the typical Databases server has 8); tools that change things 0% (typical: 10%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Health Data (your own Supabase)

Same job from other publishers: the closest match first, then the best rated.

More from almostjacked →