MCP.Market

WHOOP (read-only) MCP server

by oryanomer1·io.github.oryanomer1/whoop-mcp·v1.0.3·1 stars

Read-only access to your WHOOP recovery, HRV, sleep, strain, workouts and trends.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars95 downloads/wk

Reviews

Write one

Nobody has reviewed WHOOP (read-only) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

WHOOP (read-only) tools (10)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_cycle

    One physiological cycle by id, together with its recovery and main sleep.

  • get_daily_overview

    Everything for one WHOOP day: recovery (score, HRV, resting HR, SpO2, skin temp), last night's sleep, naps, day strain and calories, and workouts. Omit date for the current/latest day.

  • get_profile

    The user's WHOOP profile (name, email) and body measurements (height, weight, max heart rate).

  • get_sleep

    One sleep or nap by id.

  • get_trends

    Day-by-day table and averages (avg/min/max) over the last N days for recovery, HRV, resting HR, strain, calories, sleep hours and sleep performance, plus recovery zone counts and workouts per day.

  • get_workout

    One workout by id.

  • list_cycles

    Physiological cycles (WHOOP days) with day strain, calories, average/max heart rate and steps, most recent first.

  • list_recoveries

    Daily recovery scores with HRV (RMSSD), resting heart rate, SpO2 and skin temperature, most recent first.

  • list_sleeps

    Sleeps and naps with performance, efficiency, consistency, stage breakdown (light/deep/REM/awake), disturbances, respiratory rate and sleep need, most recent first.

  • list_workouts

    Workouts with sport, duration, strain, heart rate, calories, distance, altitude gain and time in each heart-rate zone, most recent first.

Public scan report

scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it

no findings
  • Code scan12 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How WHOOP (read-only) compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 95% of 48,255 servers
Tools
10
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
95
more than 62% of 12,191 servers with a package

What its tools let an agent do: 10 read

Install WHOOP (read-only) in Claude Code, Cursor or VS Code

Runs npx -y @oryanomer/whoop-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add whoop-mcp -- npx -y @oryanomer/whoop-mcp
Add to Cursor

What the publisher says

From the WHOOP (read-only) repository's README, as published. We do not edit it. Read it on GitHub

WHOOP MCP Server (read-only)

Ask Claude, Cursor, VS Code or any MCP client about your WHOOP recovery, HRV, sleep, strain and workouts, without giving it any way to change your data.

A real answer from real WHOOP data, recorded with npm run demo.

"How did I sleep last night, and why is my recovery only 41% today?"

"Compare my HRV and resting heart rate over the last 30 days."

"How many runs did I do this month, and what was my average strain?"

"Do I recover worse after days with strain above 15?"

(Run the one-time auth step before or after installing.)

Why this server

  • Read-only, enforced. It requests only WHOOP's read:* scopes. The HTTP client can only send GET, a test fails the build otherwise, and every tool carries readOnlyHint: true.
  • Answers whole questions in one call. getdailyoverview returns a day's recovery, sleep, naps, strain and workouts together. get_trends returns averages, ranges and recovery zones over up to 90 days.
  • Model-friendly output. It returns compact JSON with hours, km, kcal and local times instead of milliseconds and kilojoules, which saves tokens and avoids conversion mistakes. Pass raw: true for WHOOP's original objects.
  • Your tokens stay on your machine. Your own WHOOP developer app, a 0600 token file, and safe handling of WHOOP's rotating refresh tokens. No third-party servers.
  • Current API. It's built on the WHOOP Developer API v2.
  • Tested. Unit, MCP integration, end-to-end and packaging tests run on Linux, macOS and Windows with Node 20, 22 and 24.

Quick start

You need Node.js 20.11+ and a WHOOP membership.

1. Create a WHOOP developer app (2 minutes)

  1. Open the WHOOP Developer Dashboard and create a team if prompted.
  2. Create an app:
  • Scopes: select all the read:* scopes (recovery, cycles, workout, sleep, profile, body measurement).
  • Redirect URI: http://localhost:8787/callback
  1. Copy the Client ID and Client Secret.

2. Connect your WHOOP account

npx -y @oryanomer/whoop-mcp auth

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

WHOOP (read-only): common questions

Is WHOOP (read-only) MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the WHOOP (read-only) safety report
How do I install WHOOP (read-only)?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does WHOOP (read-only) need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is WHOOP (read-only) maintained?
The last commit was 11 days ago (2026-10-24). The latest release is v1.0.3.
How does WHOOP (read-only) compare with other MCP servers?
safety score 92/100 (higher than 95% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.