How do I install Whoop?

Whoop is a local plugin. Install it using npm package: whoop-mcp-unofficial and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Whoop safe to use?

Yes. Whoop passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Whoop need?

Whoop requires the following credentials or environment variables: WHOOP_CLIENT_ID, WHOOP_CLIENT_SECRET, WHOOP_REDIRECT_URI, WHOOP_TOKEN_PATH, WHOOP_PRIVACY_MODE, WHOOP_CACHE, WHOOP_CACHE_PATH, WHOOP_NO_CACHE. You can find setup instructions on the server detail page.

What AI apps work with Whoop?

Whoop uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Whoop MCP Server

by davidmosiah

Developer ToolsLow Risk10.0Local

Free

Privacy-first, unofficial WHOOP MCP server for AI health, sleep, recovery, and performance agents.

About

Privacy-first, unofficial WHOOP MCP server for AI health, sleep, recovery, and performance agents.

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

3 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

WHOOP OAuth client ID. Optional when configured with whoop-mcp-server setup.Optional

Environment variable: WHOOP_CLIENT_ID

WHOOP OAuth client secret. Prefer whoop-mcp-server setup so this secret is stored in ~/.whoop-mcp/config.json instead of MCP client config.Required

Environment variable: WHOOP_CLIENT_SECRET

Redirect URI configured in the WHOOP Developer Dashboard. Optional when configured with whoop-mcp-server setup.Optional

Environment variable: WHOOP_REDIRECT_URI

Optional local path for OAuth tokens. Defaults to ~/.whoop-mcp/tokens.json.Optional

Environment variable: WHOOP_TOKEN_PATH

Optional payload mode: summary, structured, or raw. Defaults to structured. raw means full WHOOP API payloads, not raw device sensor streams.Optional

Environment variable: WHOOP_PRIVACY_MODE

Optional SQLite cache toggle. Set to true or sqlite to enable.Optional

Environment variable: WHOOP_CACHE

Optional local SQLite cache path. Defaults to ~/.whoop-mcp/cache.sqlite.Optional

Environment variable: WHOOP_CACHE_PATH

Set to true to bypass the in-memory HTTP response cache (60s TTL for GET only). POST/PUT/DELETE and 4xx/5xx responses are never cached regardless.Optional

Environment variable: WHOOP_NO_CACHE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-davidmosiah-whoop-mcp": {
      "env": {
        "WHOOP_CACHE": "your-whoop-cache-here",
        "WHOOP_CLIENT_ID": "your-whoop-client-id-here",
        "WHOOP_CACHE_PATH": "your-whoop-cache-path-here",
        "WHOOP_TOKEN_PATH": "your-whoop-token-path-here",
        "WHOOP_PRIVACY_MODE": "your-whoop-privacy-mode-here",
        "WHOOP_REDIRECT_URI": "your-whoop-redirect-uri-here",
        "WHOOP_CLIENT_SECRET": "your-whoop-client-secret-here"
      },
      "args": [
        "-y",
        "whoop-mcp-unofficial"
      ],
      "command": "npx"
    }
  }
}