How do I install Strava?

Strava is a local plugin. Install it using npm package: strava-mcp-unofficial and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Strava safe to use?

Yes. Strava passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Strava need?

Strava requires the following credentials or environment variables: STRAVA_CLIENT_ID, STRAVA_CLIENT_SECRET, STRAVA_REDIRECT_URI, STRAVA_TOKEN_PATH, STRAVA_PRIVACY_MODE, STRAVA_CACHE, STRAVA_CACHE_PATH, STRAVA_NO_CACHE. You can find setup instructions on the server detail page.

What AI apps work with Strava?

Strava uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Strava MCP Server

by davidmosiah

Developer ToolsLow Risk10.0Local

Free

Privacy-first MCP server for Strava activities, streams, routes and training.

About

Privacy-first MCP server for Strava activities, streams, routes and training.

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

3 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Strava OAuth client ID. Optional when configured with strava-mcp-server setup.Optional

Environment variable: STRAVA_CLIENT_ID

Strava OAuth client secret. Prefer strava-mcp-server setup so this secret is stored in ~/.strava-mcp/config.json instead of MCP client config.Required

Environment variable: STRAVA_CLIENT_SECRET

Redirect URI configured in the Strava Developer Dashboard. Optional when configured with strava-mcp-server setup.Optional

Environment variable: STRAVA_REDIRECT_URI

Optional local path for OAuth tokens. Defaults to ~/.strava-mcp/tokens.json.Optional

Environment variable: STRAVA_TOKEN_PATH

Optional payload mode: summary, structured, or raw. Defaults to structured. raw means full Strava API payloads, not continuous 24/7 raw sensor telemetry.Optional

Environment variable: STRAVA_PRIVACY_MODE

Optional SQLite cache toggle. Set to true or sqlite to enable.Optional

Environment variable: STRAVA_CACHE

Optional local SQLite cache path. Defaults to ~/.strava-mcp/cache.sqlite.Optional

Environment variable: STRAVA_CACHE_PATH

Set to true to bypass the in-memory HTTP response cache (60s TTL for GET only). POST/PUT/DELETE and 4xx/5xx responses are never cached regardless.Optional

Environment variable: STRAVA_NO_CACHE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-davidmosiah-strava-mcp": {
      "env": {
        "STRAVA_CACHE": "your-strava-cache-here",
        "STRAVA_CLIENT_ID": "your-strava-client-id-here",
        "STRAVA_CACHE_PATH": "your-strava-cache-path-here",
        "STRAVA_TOKEN_PATH": "your-strava-token-path-here",
        "STRAVA_PRIVACY_MODE": "your-strava-privacy-mode-here",
        "STRAVA_REDIRECT_URI": "your-strava-redirect-uri-here",
        "STRAVA_CLIENT_SECRET": "your-strava-client-secret-here"
      },
      "args": [
        "-y",
        "strava-mcp-unofficial"
      ],
      "command": "npx"
    }
  }
}