Mmcp.market

Hevy MCP Server

by chrisdoc·io.github.chrisdoc/hevy-mcp·v3.2.1·483 stars

MCP server for managing workouts, routines, and exercise data through the Hevy API

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Established

483 stars81k downloads/wk

Reviews

Write one

Nobody has reviewed Hevy MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Hevy MCP Server tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Hevy MCP Server in Claude Code, Cursor or VS Code

Runs npx -y hevy-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add hevy-mcp -- npx -y hevy-mcp
Add to Cursor

What the publisher says

From the Hevy MCP Server repository's README, as published. We do not edit it. Read it on GitHub

Hevy MCP Server

Talk to your Hevy workout data from Claude, Cursor, Codex, and other MCP clients.

Connect to the hosted MCP · Use the Hevy CLI · Watch the 18-second demo · Explore all 22 tools

Hevy CLI

Prefer the terminal? The separate @chrisdoc/hevy-cli package reads workouts, routines, exercises, and body measurements directly from the Hevy API, and can create or update those resources with explicit confirmation. Deletion is not supported.

npm install -g @chrisdoc/hevy-cli
export HEVY_API_KEY=your-hevy-api-key

hevy workouts list --page-size 10
hevy summary --weeks 4

Add --json to any command for scripts and pipelines. The CLI is a standalone Hevy API client, not an MCP wrapper. See packages/cli/README.md for the full command reference, pagination behavior, and exit codes.

hevy-mcp is an open-source Model Context Protocol (MCP) server for the Hevy fitness and workout tracking app. It lets AI assistants read, analyze, create, and update your Hevy workouts, routines, exercise templates, and body measurements through authenticated Hevy API requests.

The repository is organized as a private workspace with explicit runtime boundaries: @hevy-mcp/hevy-client owns the web-safe Hevy client, @hevy-mcp/operations owns reusable Hevy domain operations, @hevy-mcp/core owns MCP tools and server construction, hevy-mcp is the published Node.js stdio adapter, @hevy-mcp/worker is the private Cloudflare HTTP/OAuth adapter, and @chrisdoc/hevy-cli is the standalone CLI. Node and CLI are the public packages.

The public HevyClient remains Promise-based, while @hevy-mcp/operations provides Effect-first domain programs for reads, mutations, and composite workflows. Effect is also the control structure for the request runtime: @hevy-mcp/hevy-client owns retry schedules, per-attempt timeouts, and interruption, rather than using Effect only as a delay calculator. MCP tools and CLI commands collapse each invocation once at their Promise adapter boundary. The MCP catalog remains 22 tools.

The runtime has three nested scopes:

transport shutdown.

  1. Process Scope: the Node lifecycle owns telemetry, signal handlers, and

including finalization when the server closes.

  1. Server Scope: core owns the MCP runtime and the exercise-template cache,

MCP request signal, so fiber interruption reaches the Hevy request.

  1. Request Scope: each tool or resource invocation carries its deadline and

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Hevy MCP Server: common questions

Is Hevy MCP Server safe?
Mostly: it is graded B (83/100). Read the Hevy MCP Server safety report
How do I install Hevy MCP Server?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Hevy MCP Server need an API key?
Yes. The registry entry asks for HEVY_API_KEY.
Is Hevy MCP Server maintained?
The last commit was 18 days ago (2026-09-25). The latest release is v3.2.1.

More from chrisdoc →