MCP.Market

Whoop MCP server

by Zayden16·io.github.Zayden16/whoop-mcp-server·v1.1.0
No reviews yet

MCP server for the official Whoop API v2: cycles, recovery, sleep, workouts, and profile data

C63/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Whoop yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Whoop tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualityno auth information5/15
  • Maintenancelast push 79 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Whoop compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
63/100
higher than 18% of 48,255 servers

Install Whoop in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the Whoop repository's README, as published. We do not edit it. Read it on GitHub

whoop-mcp-server

MCP server for the official Whoop API v2, written in Go. Exposes cycles, recovery, sleep, workouts, and profile data as MCP tools.

Tools

All tools return JSON. Record shapes are the unmodified Whoop API v2 objects, so every field the API exposes is available to the model.

Notes:

  • Dates are YYYY-MM-DD; end_date is inclusive (internally mapped to the start of the next day, per the API's exclusive end semantics).
  • Collections are date-descending (most recent first) and paginated transparently — the server follows next_token until limit records (default 25, max 100) are collected.
  • Scores are point-in-time per record, not time-series: one strain value per cycle, one recovery per sleep. For trends, fetch a range and let the model aggregate (or use getaveragestrain for the built-in strain average).
  • A record's scorestate can be SCORED, PENDINGSCORE, or UNSCORABLE — score is only present when SCORED.

Setup

1. Create a Whoop developer app

At developer.whoop.com, create an app with:

  • Redirect URI: http://localhost:8719/callback
  • Scopes: read:cycles, read:recovery, read:sleep, read:workout, read:profile, read:body_measurement, offline

Note the client ID and client secret.

2. Install

Homebrew:

brew install zayden16/tap/whoop-mcp-server

Or download a prebuilt binary from Releases, or:

go install github.com/Zayden16/whoop-mcp-server@latest

Or build from source:

go build -o whoop-mcp-server .

3. Authorize (one time)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Whoop: common questions

Is Whoop MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the Whoop safety report
Does Whoop need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Whoop maintained?
The last commit was 118 days ago (2026-07-09). The latest release is v1.1.0.