Apple Health MCP server
io.github.neiltron/apple-health-mcp·v1.4.5·574 starsLocal-first Apple Health MCP server for questions about your sleep, workouts and heart data.
574 stars85 downloads/wk
Reviews
Write oneNobody has reviewed Apple Health yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Apple Health tools (3, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
health_querywrite actionRun one analytical query on Apple Health data.
health_reportGenerate structured health reports for a specific period
health_schemaGet information about available health data tables, their structure, and sample data to help write SQL queries
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 14 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/server.js: …eCode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
How Apple Health compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 48,243 servers
- Tools
- 3
- the typical server has 7
- Tools that change things
- 33%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 574
- more than 95% of 28,706 servers
- Downloads a week
- 85
- more than 58% of 12,306 servers with a package
What its tools let an agent do: 2 read · 1 change
Release history: 2 versions in the registry since 2026-08-24, latest 2026-09-20, typically one every 27 days.
Install Apple Health in Claude Code, Cursor or VS Code
Runs npx -y @neiltron/apple-health-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add apple-health-mcp -- npx -y @neiltron/apple-health-mcp
What the publisher says
From the Apple Health repository's README, as published. We do not edit it. Read it on GitHub
Apple Health MCP Server
Query Apple Health data from an MCP client using SQL and DuckDB. The server runs locally, reads CSV exports on demand, and provides tools for schema discovery, analytical queries, and health summaries.
Requirements
Simple Health Export CSV
- Node.js 22 or newer
- An Apple Health CSV export created with
The native Apple Health export.xml format is not currently supported.
Configure an MCP client
For Claude Desktop, add the following to ~/Library/Application Support/Claude/claudedesktopconfig.json:
{
"mcpServers": {
"apple-health": {
"command": "npx",
"args": ["-y", "@neiltron/apple-health-mcp"],
"env": {
"HEALTH_DATA_DIR": "/path/to/your/unzipped/health-export"
}
}
}
}Restart the client after changing its configuration. Other MCP clients can use the same command, arguments, environment, and stdio transport.
Environment variables
Export health data
- Install and open Simple Health Export CSV on your iPhone.
- Select All and choose the time range to export.
- Transfer the archive to the computer running your MCP client.
- Unzip it and set HEALTHDATADIR to the resulting directory.
The server reads the files in place. It does not upload the export or make network requests, although query results returned to your MCP client may be sent to that client's configured model provider.
Tools
Start with health_schema; table names depend on the files in your export. See Querying Apple Health data for the data model and working examples.
health_query accepts one DuckDB analytical statement. See Query safeguards for supported statements and restricted operations.
Query safeguards
The server limits DuckDB file access to HEALTHDATADIR. It also disables network access and temporary disk storage, and it locks the database settings. The data directory stays readable and writable so the importer can read CSV files.
These controls reduce accidental side effects from generated SQL. They do not isolate the process. Run the server through a local stdio MCP client. Do not expose it to an untrusted network client. Use process or OS isolation if the server must accept untrusted SQL.
History and memory
The first request that needs a table loads that table's full CSV history. There is no date window, so a query can reach as far back as the export goes.
Because every tool can reach the whole configured history, only start this server from an MCP client you trust with that data.
Loaded tables are held in memory, and DuckDB is given the MAXMEMORYMB limit described above. Roughly 1 GiB covers a two-year multi-table export, so the 2048MB default leaves headroom; raise MAXMEMORYMB for a larger export. The server never spills health rows to a temporary directory on disk, so an export that does not fit in the limit fails with an explicit error instead.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Apple Health: common questions
- Is Apple Health MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Apple Health safety report
- How do I install Apple Health?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Apple Health need an API key?
- No secret keys are declared. It reads 3 settings from the environment.
- Is Apple Health maintained?
- The last commit was 35 days ago (2026-10-02). The latest release is v1.4.5.
- How does Apple Health compare with other MCP servers?
- safety score 85/100 (higher than 70% of 48,243 servers); tools 3 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.