MCP.Market

Strava MCP Bridge MCP server

by millerchou·io.github.millerchou/strava-mcp-bridge·v0.1.1

Use Strava's official MCP from Codex and other local stdio clients without a developer app.

B72/100grade B
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

0 stars30 downloads/wk

Reviews

Write one

Nobody has reviewed Strava MCP Bridge yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Strava MCP Bridge tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

2 medium
  • Code scan16 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 76 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: …": "npm run build:keychain-helper", "postinstall": "node scripts/postinstall.js", "tes…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Strava MCP Bridge compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 38% of 48,255 servers
Downloads a week
30
more than 18% of 12,191 servers with a package

Install Strava MCP Bridge in Claude Code, Cursor or VS Code

Runs npx -y strava-mcp-bridge on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add strava-mcp-bridge -- npx -y strava-mcp-bridge
Add to Cursor

What the publisher says

From the Strava MCP Bridge repository's README, as published. We do not edit it. Read it on GitHub

strava-mcp-bridge

Use Strava's official MCP from Codex, OpenCode, and other local stdio MCP clients without creating your own Strava developer app.

The bridge runs locally on Apple Silicon macOS. Its OAuth credential is kept in macOS Keychain, large activity streams stay in local files, and GPS/location data is blocked before it can enter the AI context.

What It Enables

Once connected, a local coding agent can use Strava data as part of a real project workflow instead of working from copied summaries or synthetic data.

You: Pull my new rides since the local watermark and rebuild my training dashboard.

Codex:
  3 new rides found through the official Strava MCP
  full activity streams saved locally, omitted from model context
  training summary and fitness chart rebuilt
  no GPS, location, or polyline fields returned to the conversation

Other example tasks:

  • "Compare heart-rate load across my rides this week."
  • "Fetch the non-location streams for this activity and update my analysis."
  • "Use my latest cycling data to refresh the PMC/TRIMP dashboard in this repo."

The bridge supplies the safe Strava connection. Your agent can then combine the result with local scripts, notebooks, dashboards, or training-analysis code.

Why This Exists

Strava publishes an official MCP connector, but its documented first-time authorization flow currently targets Claude clients. Codex supports MCP, yet it cannot currently complete this Strava OAuth bootstrap directly.

strava-mcp-bridge fills that gap:

requests to https://mcp.strava.com/mcp.

  1. You authorize the official Strava MCP once through Claude Code.
  2. You explicitly run strava-mcp-bridge bootstrap.
  3. The bridge migrates the authorized credential into its own Keychain item.
  4. It maintains the rotating refresh-token chain and forwards approved MCP
  1. Normal Codex/OpenCode use no longer reads or invokes Claude Code.

This is not a Strava REST API wrapper and does not provide shared credentials or bypass user authorization.

Choose The Right Path

Managed connector behavior varies by provider. Review its data path and terms before connecting fitness data.

Good Fit / Not A Fit

Use this bridge when all of these are true:

servers.

  • You use Codex, OpenCode, or another client that can run local stdio MCP

subscription.

  • You have access to Strava's official MCP through an eligible Strava
  • You do not want to create and maintain a Strava developer app.
  • You prefer local credential custody and conservative data controls.
  • You are on an Apple Silicon Mac.

Use another path when any of these are true:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Strava MCP Bridge: common questions

Is Strava MCP Bridge MCP server safe?
Mostly: it is graded B (72/100). Read the Strava MCP Bridge safety report
How do I install Strava MCP Bridge?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Strava MCP Bridge need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Strava MCP Bridge maintained?
The last commit was 116 days ago (2026-07-11). The latest release is v0.1.1.
How does Strava MCP Bridge compare with other MCP servers?
safety score 72/100 (higher than 38% of 48,255 servers); downloads a week 30 (more than 18% of 12,191 servers with a package). Full comparison.