Server data from the Official MCP Registry
MCP server for InBody body-composition data — scans, body fat, muscle mass, body water
MCP server for InBody body-composition data — scans, body fat, muscle mass, body water
This MCP server for InBody body-composition data is well-structured with proper authentication, appropriate permissions, and read-only operations. Credentials are correctly sourced from environment variables, and the server implements automatic re-authentication with sensible error handling. Minor code quality issues around broad exception handling and some redundant validation do not materially impact security given the server's limited scope. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
5 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: INBODY_LOGIN_ID
Environment variable: INBODY_LOGIN_PW
Environment variable: INBODY_COUNTRY_CODE
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-rwestergren-inbody-api-mcp": {
"env": {
"INBODY_LOGIN_ID": "your-inbody-login-id-here",
"INBODY_LOGIN_PW": "your-inbody-login-pw-here",
"INBODY_COUNTRY_CODE": "your-inbody-country-code-here"
},
"args": [
"inbody-api-mcp"
],
"command": "uvx"
}
}
}From the project's GitHub README.
Hosted version for Claude.ai, ChatGPT, and Grok coming soon. Join the waitlist →
An MCP (Model Context Protocol) server for InBody body-composition data, built on the reverse-engineered mobile REST API used by the InBody Android app.
InBody has no public API and no web UI for personal scan data. This server talks to the same JSON REST endpoints the mobile app uses, exposing your body composition history (body fat, muscle mass, body water, segmental impedance) to any MCP client.
curl -LsSf https://astral.sh/uv/install.sh | sh
export INBODY_LOGIN_ID="3026323617" # registration phone number, digits only
export INBODY_LOGIN_PW="your-password"
export INBODY_COUNTRY_CODE="US" # ISO country code (default US)
INBODY_LOGIN_IDis the phone number used at registration, not your email -- digits only, no country code or+(e.g.3026323617). InBody keys login on the phone number; the email is only returned as profile data. An email value will fail login withEmptyData.
uvx downloads and runs the server on demand -- no separate install step.
opencode.json){
"$schema": "https://opencode.ai/config.json",
"mcp": {
"inbody": {
"type": "local",
"command": ["uvx", "inbody-api-mcp"],
"environment": {
"INBODY_LOGIN_ID": "{env:INBODY_LOGIN_ID}",
"INBODY_LOGIN_PW": "{env:INBODY_LOGIN_PW}",
"INBODY_COUNTRY_CODE": "US"
},
"enabled": true
}
}
}
claude_desktop_config.json){
"mcpServers": {
"inbody": {
"command": "uvx",
"args": ["inbody-api-mcp"],
"env": {
"INBODY_LOGIN_ID": "3026323617",
"INBODY_LOGIN_PW": "your-password",
"INBODY_COUNTRY_CODE": "US"
}
}
}
}
| Tool | Description |
|---|---|
get_profile | User identity and baseline metrics (height, weight, age, gender) |
get_scan_count | Total number of scans on the account |
list_scans | Chronological scan summaries (weight, BMI, % body fat, muscle mass) |
get_scan | Full metric set for one scan (BCA / MFA / IMP blocks) |
This server is read-only: no write or delete endpoints are exposed.
This server communicates with the regional *.lookinbody.com REST API -- the
same backend used by the InBody Android app (v2.8.31). The API was
reverse-engineered by capturing app traffic with mitmproxy and confirming
payload shapes against the live API.
The auth flow:
POST /CommonAPI/GetCountryInfoV2 (on appapicommon.lookinbody.com) returns
a per-country host table. The Type == "API" row for your ISO country code
gives the regional API base (US -> appapiusav2.lookinbody.com) and the
numeric phone code used in request bodies.POST /V2/Main/GetLoginWithSyncDataPartV2 exchanges the login ID + password
for a 24-hour JWT, a refresh token, and the account UID.Authorization: Bearer <JWT>. The client
re-authenticates automatically when the token expires.Each scan record nests three blocks: BCA (body composition analysis -- body water, protein, mineral, fat, segmental water), MFA (BMI, % body fat, skeletal muscle mass, WHR with normal ranges), and IMP (raw impedance per frequency and body segment).
You can use the client directly:
from inbody_api_mcp.client import InBodyClient
client = InBodyClient()
# Total number of scans
count = client.get_scan_count()
# Recent scans (newest first), paginated
scans = client.get_scans(number=20, index=0)
# User profile
profile = client.get_user_info()
stdio only. MCP clients (OpenCode, Claude Desktop) spawn the stdio process
directly via uvx/uv.
MIT
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.