Strava MCP Bridge MCP server
io.github.millerchou/strava-mcp-bridge·v0.1.1Use Strava's official MCP from Codex and other local stdio clients without a developer app.
0 stars30 downloads/wk
Reviews
Write oneNobody has reviewed Strava MCP Bridge yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Strava MCP Bridge tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 76 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: …": "npm run build:keychain-helper", "postinstall": "node scripts/postinstall.js", "tes…
How Strava MCP Bridge compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 72/100
- higher than 38% of 48,255 servers
- Downloads a week
- 30
- more than 18% of 12,191 servers with a package
Install Strava MCP Bridge in Claude Code, Cursor or VS Code
Runs npx -y strava-mcp-bridge on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add strava-mcp-bridge -- npx -y strava-mcp-bridge
What the publisher says
From the Strava MCP Bridge repository's README, as published. We do not edit it. Read it on GitHub
strava-mcp-bridge
Use Strava's official MCP from Codex, OpenCode, and other local stdio MCP clients without creating your own Strava developer app.
The bridge runs locally on Apple Silicon macOS. Its OAuth credential is kept in macOS Keychain, large activity streams stay in local files, and GPS/location data is blocked before it can enter the AI context.
What It Enables
Once connected, a local coding agent can use Strava data as part of a real project workflow instead of working from copied summaries or synthetic data.
You: Pull my new rides since the local watermark and rebuild my training dashboard.
Codex:
3 new rides found through the official Strava MCP
full activity streams saved locally, omitted from model context
training summary and fitness chart rebuilt
no GPS, location, or polyline fields returned to the conversationOther example tasks:
- "Compare heart-rate load across my rides this week."
- "Fetch the non-location streams for this activity and update my analysis."
- "Use my latest cycling data to refresh the PMC/TRIMP dashboard in this repo."
The bridge supplies the safe Strava connection. Your agent can then combine the result with local scripts, notebooks, dashboards, or training-analysis code.
Why This Exists
Strava publishes an official MCP connector, but its documented first-time authorization flow currently targets Claude clients. Codex supports MCP, yet it cannot currently complete this Strava OAuth bootstrap directly.
strava-mcp-bridge fills that gap:
requests to https://mcp.strava.com/mcp.
- You authorize the official Strava MCP once through Claude Code.
- You explicitly run strava-mcp-bridge bootstrap.
- The bridge migrates the authorized credential into its own Keychain item.
- It maintains the rotating refresh-token chain and forwards approved MCP
- Normal Codex/OpenCode use no longer reads or invokes Claude Code.
This is not a Strava REST API wrapper and does not provide shared credentials or bypass user authorization.
Choose The Right Path
Managed connector behavior varies by provider. Review its data path and terms before connecting fitness data.
Good Fit / Not A Fit
Use this bridge when all of these are true:
servers.
- You use Codex, OpenCode, or another client that can run local stdio MCP
subscription.
- You have access to Strava's official MCP through an eligible Strava
- You do not want to create and maintain a Strava developer app.
- You prefer local credential custody and conservative data controls.
- You are on an Apple Silicon Mac.
Use another path when any of these are true:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Strava MCP Bridge: common questions
- Is Strava MCP Bridge MCP server safe?
- Mostly: it is graded B (72/100). Read the Strava MCP Bridge safety report
- How do I install Strava MCP Bridge?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Strava MCP Bridge need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Strava MCP Bridge maintained?
- The last commit was 116 days ago (2026-07-11). The latest release is v0.1.1.
- How does Strava MCP Bridge compare with other MCP servers?
- safety score 72/100 (higher than 38% of 48,255 servers); downloads a week 30 (more than 18% of 12,191 servers with a package). Full comparison.