Mmcp.market

Whoop MCP server

by davidmosiah·io.github.davidmosiah/whoop-mcp·v0.5.3

Privacy-first, unofficial WHOOP MCP server for AI health, sleep, recovery, and performance agents.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

13 stars294 downloads/wk

Reviews

Write one

Nobody has reviewed Whoop yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Whoop tools (21, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • whoop_agent_manifest

    Machine-readable install, runtime and client guidance for AI agents operating the WHOOP MCP. Does not read WHOOP or expose secrets.

  • whoop_cache_status

    Show optional local SQLite cache status. Enable with WHOOP_CACHE=sqlite or WHOOP_CACHE=true.

  • whoop_capabilities

    Explain supported WHOOP data, unavailable raw sensor streams, privacy modes, recommended agent workflow, and project links. Does not read WHOOP or expose secrets.

  • whoop_connection_status

    Check whether local WHOOP env vars, token file, Node version, privacy mode and cache are ready. Does not call WHOOP or expose secrets.

  • whoop_daily_summary

    Build a privacy-conscious daily performance summary from WHOOP recovery, sleep, cycle and workout data. This workflow tool fetches recent WHOOP v2 records, computes a defensive baseline, and returns readiness, sleep, load, diagnostic signals and concrete action candidates. It does not provide medical advice and does not store data locally.

  • whoop_data_inventory

    Inventory supported WHOOP data domains, auth scope requirements, privacy boundary and recommended first calls. Does not call WHOOP APIs or expose user data.

  • whoop_demo

    Returns realistic example payloads of whoop_daily_summary, whoop_wellness_context, and whoop_list_recoveries so agents see the contract before calling real WHOOP APIs.

  • whoop_exchange_code

    Exchange a WHOOP OAuth authorization code for local tokens. Tokens are stored locally with 0600 permissions and are never returned by this tool. Gated: requires explicit user intent — agents must not call this autonomously.

  • whoop_get_auth_url

    Generate a WHOOP OAuth authorization URL. This does not read or modify WHOOP data. Use this first when no local token exists.

  • whoop_get_body_measurements

    Get the authenticated user's WHOOP body measurements (height, weight, max heart rate). Requires read:body_measurement scope. Not medical advice.

  • whoop_get_profile

    Get the authenticated user's basic WHOOP profile. Requires read:profile scope.

  • whoop_onboarding

    Return the 11-question Delx wellness onboarding flow (in English or pt-BR) plus the current shared profile state and missing critical fields. Read-only. The agent should ask these questions one-by-one, then call whoop_profile_update with explicit_user_intent=true to save. The same profile is reused by every Delx Wellness connector (Oura, Garmin, Nourish, etc.) — agents can call the equivalent {con

  • whoop_privacy_audit

    Return the local privacy, cache, token-path, env-presence and redaction posture without revealing secret values.

  • whoop_profile_get

    Read the shared Delx wellness profile (~/.delx-wellness/profile.json). Returns the user's preferred name, body basics, goals, devices, training context, nutrition context, agent preferences, and missing critical fields. Cross-connector — the same profile is also available from other Delx Wellness MCPs (Oura, Garmin, Nourish, Fitbit, etc). Read-only.

  • whoop_profile_updatewrite action

    Persist a partial patch to the shared Delx wellness profile (~/.delx-wellness/profile.json). REQUIRES explicit_user_intent=true. Top-level fields stored: profile (preferred_name, language, timezone, units, age_or_birth_year, height, weight, sex_or_gender_context), goals, devices, training, nutrition, preferences, safety, notes. NEVER stores OAuth tokens, API keys, refresh tokens, cookies, or any s

  • whoop_quickstart

    Personalized 3-step setup walkthrough for the human user. Adapts to current state (env vars set? token present? what's next?). Call this first when the user asks 'how do I connect WHOOP?'

  • whoop_recovery_trend

    Aggregate WHOOP recovery over the last N days (default 30) into a per-metric trend for recovery score, HRV (hrv_rmssd_milli) and resting heart rate. Each metric returns { avg, min, max, slope, direction, n_valid } where slope is a least-squares fit over the chronologically ordered scored records (oldest to newest) and direction is rising, falling, stable or insufficient_data. Use this to answer "i

  • whoop_revoke_access

    Revoke the current WHOOP OAuth access grant and delete the local token file. Use only when the user explicitly wants to disconnect WHOOP. Gated: requires explicit user intent — agents must not call this autonomously.

  • whoop_sleep_trend

    Aggregate WHOOP sleep over the last N days (default 30) into a per-metric trend for sleep performance percentage, sleep duration (hours) and sleep efficiency percentage. Each metric returns { avg, min, max, slope, direction, n_valid } where slope is a least-squares fit over the chronologically ordered scored sleeps (oldest to newest) and direction is rising, falling, stable or insufficient_data. U

  • whoop_weekly_summary

    Build a weekly WHOOP operating review with recovery, sleep, strain, workouts, bottlenecks, action candidates and next-week success metrics. This workflow tool compares a recent window against a prior window when available. It is intended for coaching and agent workflows, not medical diagnosis.

  • whoop_wellness_context

    Normalize WHOOP recovery, sleep, strain and recent workout load into the shared wellness_context shape for exercise recommendation engines and Telegram agents.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan60 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 28 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Whoop repository's README, as published. We do not edit it. Read it on GitHub

<!-- delx-wellness header v2 --> WHOOP MCP

Give your AI agent your WHOOP recovery, sleep, strain and HRV &mdash; without copy-pasting from the app. Local-first MCP server &mdash; tokens never leave your machine.

⚡ One-command install with Delx Wellness for Hermes:

npx -y delx-wellness-hermes setup &mdash; preconfigures this connector and the full Delx Wellness stack in a dedicated Hermes profile.

Or wire it standalone into Claude Desktop / Cursor / ChatGPT Desktop &mdash; see the install section below. Runnable examples live in the Delx Wellness hub.

Public proof: WHOOP MCP is tracked in the Delx Open Source Growth Snapshot alongside downloads, stars and next-action priorities. If it saves you OAuth and MCP setup time, star this repo so other recovery-focused agent builders can find it faster.

First useful prompt: Use whoopconnectionstatus, then whoopdailysummary, then give me a 5-line operating brief for today.

<!-- /delx-wellness header v2 -->

Local-first MCP server that connects AI agents to your WHOOP recovery, sleep, strain and HRV data.

Unofficial project. Not affiliated with, endorsed by or supported by WHOOP, Inc. WHOOP is a trademark of its respective owner. Use this only with your own WHOOP account and in line with WHOOP's Developer Terms.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y whoop-mcp-unofficial on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add whoop-mcp -- npx -y whoop-mcp-unofficial
Add to Cursor

Whoop: common questions

Is Whoop MCP server safe?
Mostly: it is graded B (83/100). Read the Whoop safety report
How do I install Whoop?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Whoop need an API key?
Yes. The registry entry asks for WHOOP_CLIENT_SECRET.
Is Whoop maintained?
The last commit was 28 days ago (2026-08-29). The latest release is v0.5.3.
What can I use instead of Whoop?
Servers from other publishers that do the same job: Apple Health MCP server.

Alternatives to Whoop

Same job from other publishers: the closest match first, then the best rated.

  • Apple Health
    Local-first Apple Health MCP server for questions about your sleep, workouts and heart data.
    A

More from davidmosiah →