WHOOP (read-only) MCP server
io.github.oryanomer1/whoop-mcp·v1.0.3·1 starsRead-only access to your WHOOP recovery, HRV, sleep, strain, workouts and trends.
1 stars95 downloads/wk
Reviews
Write oneNobody has reviewed WHOOP (read-only) yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
WHOOP (read-only) tools (10)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
get_cycleOne physiological cycle by id, together with its recovery and main sleep.
get_daily_overviewEverything for one WHOOP day: recovery (score, HRV, resting HR, SpO2, skin temp), last night's sleep, naps, day strain and calories, and workouts. Omit date for the current/latest day.
get_profileThe user's WHOOP profile (name, email) and body measurements (height, weight, max heart rate).
get_sleepOne sleep or nap by id.
get_trendsDay-by-day table and averages (avg/min/max) over the last N days for recovery, HRV, resting HR, strain, calories, sleep hours and sleep performance, plus recovery zone counts and workouts per day.
get_workoutOne workout by id.
list_cyclesPhysiological cycles (WHOOP days) with day strain, calories, average/max heart rate and steps, most recent first.
list_recoveriesDaily recovery scores with HRV (RMSSD), resting heart rate, SpO2 and skin temperature, most recent first.
list_sleepsSleeps and naps with performance, efficiency, consistency, stage breakdown (light/deep/REM/awake), disturbances, respiratory rate and sleep need, most recent first.
list_workoutsWorkouts with sport, duration, strain, heart rate, calories, distance, altitude gain and time in each heart-rate zone, most recent first.
Public scan report
scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it
- Code scan12 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 5 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How WHOOP (read-only) compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Tools
- 10
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 95
- more than 62% of 12,191 servers with a package
What its tools let an agent do: 10 read
Install WHOOP (read-only) in Claude Code, Cursor or VS Code
Runs npx -y @oryanomer/whoop-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add whoop-mcp -- npx -y @oryanomer/whoop-mcp
What the publisher says
From the WHOOP (read-only) repository's README, as published. We do not edit it. Read it on GitHub
WHOOP MCP Server (read-only)
Ask Claude, Cursor, VS Code or any MCP client about your WHOOP recovery, HRV, sleep, strain and workouts, without giving it any way to change your data.
A real answer from real WHOOP data, recorded with npm run demo.
"How did I sleep last night, and why is my recovery only 41% today?"
"Compare my HRV and resting heart rate over the last 30 days."
"How many runs did I do this month, and what was my average strain?"
"Do I recover worse after days with strain above 15?"
(Run the one-time auth step before or after installing.)
Why this server
- Read-only, enforced. It requests only WHOOP's read:* scopes. The HTTP client can only send GET, a test fails the build otherwise, and every tool carries readOnlyHint: true.
- Answers whole questions in one call. getdailyoverview returns a day's recovery, sleep, naps, strain and workouts together. get_trends returns averages, ranges and recovery zones over up to 90 days.
- Model-friendly output. It returns compact JSON with hours, km, kcal and local times instead of milliseconds and kilojoules, which saves tokens and avoids conversion mistakes. Pass raw: true for WHOOP's original objects.
- Your tokens stay on your machine. Your own WHOOP developer app, a 0600 token file, and safe handling of WHOOP's rotating refresh tokens. No third-party servers.
- Current API. It's built on the WHOOP Developer API v2.
- Tested. Unit, MCP integration, end-to-end and packaging tests run on Linux, macOS and Windows with Node 20, 22 and 24.
Quick start
You need Node.js 20.11+ and a WHOOP membership.
1. Create a WHOOP developer app (2 minutes)
- Open the WHOOP Developer Dashboard and create a team if prompted.
- Create an app:
- Scopes: select all the read:* scopes (recovery, cycles, workout, sleep, profile, body measurement).
- Redirect URI: http://localhost:8787/callback
- Copy the Client ID and Client Secret.
2. Connect your WHOOP account
npx -y @oryanomer/whoop-mcp authShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
WHOOP (read-only): common questions
- Is WHOOP (read-only) MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the WHOOP (read-only) safety report
- How do I install WHOOP (read-only)?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does WHOOP (read-only) need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is WHOOP (read-only) maintained?
- The last commit was 11 days ago (2026-10-24). The latest release is v1.0.3.
- How does WHOOP (read-only) compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.