Server data from the Official MCP Registry
MCP server for WHOOP health data — recovery, sleep, workouts, cycles, and trends.
MCP server for WHOOP health data — recovery, sleep, workouts, cycles, and trends.
whoop-ai-mcp is a well-structured MCP server with proper OAuth2 authentication, secure token storage, and comprehensive error handling. The codebase demonstrates good security practices including auto-token refresh, rate limit handling, and appropriate input validation. Minor code quality observations exist around broad error catching and logging patterns, but these do not pose security risks. Permissions align well with the server's stated purpose of accessing WHOOP health data via their official REST API. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: WHOOP_CLIENT_ID
Environment variable: WHOOP_CLIENT_SECRET
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-shashankswe2020-ux-whoop": {
"env": {
"WHOOP_CLIENT_ID": "your-whoop-client-id-here",
"WHOOP_CLIENT_SECRET": "your-whoop-client-secret-here"
},
"args": [
"-y",
"whoop-ai-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
An MCP (Model Context Protocol) server that connects AI assistants like Claude to your WHOOP health and fitness data. Ask questions about your recovery, sleep, workouts, and more — all through natural conversation.
📦 Published on the MCP Registry as
io.github.shashankswe2020-ux/whoop— discoverable by any MCP-compatible client.
~/.whoop-mcp/tokens.json with 0600 permissions@modelcontextprotocol/sdk + zod)Based on npm search results for whoop mcp on 2026-05-30.
| Package | Latest version | Last publish (UTC) | MCP Registry | Runtime deps | npm |
|---|---|---|---|---|---|
| whoop-ai-mcp (this repo) | 0.3.1 | 2026-05-30 | ✅ io.github.shashankswe2020-ux/whoop | 2 | https://www.npmjs.com/package/whoop-ai-mcp |
| whoop-mcp-unofficial | 0.4.5 | 2026-05-29 | — | 5 | https://www.npmjs.com/package/whoop-mcp-unofficial |
| @nchemb/whoop-mcp | 0.2.0 | 2026-04-27 | — | 4 | https://www.npmjs.com/package/@nchemb/whoop-mcp |
| @scom82/whoop-mcp | 0.1.0 | 2026-05-17 | — | 1 | https://www.npmjs.com/package/@scom82/whoop-mcp |
| whoop-mcp-server | 0.0.5 | 2026-03-13 | — | 2 | https://www.npmjs.com/package/whoop-mcp-server |
| whoop-mcp | 0.1.2 | 2026-03-11 | — | 2 | https://www.npmjs.com/package/whoop-mcp |
| @roebot0/whoop-mcp | 1.0.0 | 2026-04-06 | — | 3 | https://www.npmjs.com/package/@roebot0/whoop-mcp |
| @alacore/whoop-mcp-server | 1.0.1 | 2025-10-09 | — | 2 | https://www.npmjs.com/package/@alacore/whoop-mcp-server |
Why this package stands out
mcpName metadata)Evidence basis: npm registry metadata + npm-hosted README signals + package manifest fields (dependencies, repository, mcpName) collected on 2026-05-30.
Scoring dimensions (0–5):
0600), no shared relaymcpName), repository metadata present, lean runtime dependency count, no external infra requiredRatings are documentation/metadata-driven and are not a source-code security audit.
| Package | Security & resilience | Freshness | Docs & verification | Discoverability | Overall | Key differentiator / gap vs whoop-ai-mcp |
|---|---|---|---|---|---|---|
| whoop-ai-mcp (this repo) | 5.0/5 | 5.0/5 | 5.0/5 | 5.0/5 | 5.0/5 | Baseline — MCP Registry, 2 deps, analytics, no external infra |
| whoop-mcp-unofficial | 4.5/5 | 5.0/5 | 4.0/5 | 3.5/5 | 4.3/5 | Strong feature set (20+ tools, SQLite cache, privacy modes); heavier deps (5: express, better-sqlite3, cors); no mcpName; part of "Delx Wellness" ecosystem |
| @nchemb/whoop-mcp | 3.0/5 | 4.0/5 | 3.5/5 | 2.5/5 | 3.2/5 | Unique shared OAuth relay (no dev app needed); local SQL queries; capped at 10 test users; 4 deps; no mcpName |
| whoop-mcp-server | 3.8/5 | 3.0/5 | 2.5/5 | 3.3/5 | 3.1/5 | No mcpName; no Inspector/changelog signal; older publish cadence |
| @scom82/whoop-mcp | 2.0/5 | 4.5/5 | 2.0/5 | 2.0/5 | 2.5/5 | Requires self-hosted FastAPI backend (whoop-web); not standalone; 1 dep but external infra needed |
| @roebot0/whoop-mcp | 2.5/5 | 4.0/5 | 1.3/5 | 1.7/5 | 2.4/5 | No 0600 docs; no mcpName; no explicit testing/changelog signal |
| @alacore/whoop-mcp-server | 2.5/5 | 2.0/5 | 2.5/5 | 3.3/5 | 2.5/5 | Older publish cadence; no mcpName; retry/backoff not documented |
| whoop-mcp | 0.0/5 | 3.0/5 | 0.0/5 | 3.3/5 | 1.3/5 | OAuth/refresh/retry not documented; no mcpName |
Watch a detailed walkthrough of setting up and using whoop-ai-mcp with Claude Desktop:
Covers: creating a WHOOP Developer App, configuring Claude Desktop, OAuth authentication, and querying your health data through natural conversation.
http://localhost:3000/callbackDon't have a WHOOP yet? Here's how to get started:
This server is published on the official MCP Registry. MCP clients that support the registry can discover and install it automatically:
Server name: io.github.shashankswe2020-ux/whoop
You can also browse it via the registry API:
curl "https://registry.modelcontextprotocol.io/v0.1/servers?search=io.github.shashankswe2020-ux/whoop"
Add this to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"whoop": {
"command": "npx",
"args": ["whoop-ai-mcp"],
"env": {
"WHOOP_CLIENT_ID": "your_client_id",
"WHOOP_CLIENT_SECRET": "your_client_secret"
}
}
}
}
Replace your_client_id and your_client_secret with the credentials from your WHOOP Developer App.
On first launch, a browser window will open for you to authorize access to your WHOOP data. After authorizing, tokens are cached locally and refresh automatically.
Then ask Claude something like:
"How was my recovery this week?"
"Show me my sleep data from the last 3 days"
"What workouts did I do this month?"
"Is my HRV trending up or down?"
"Give me a weekly health summary"
whoop-mcp connected in Claude Desktop:

Chatting with WHOOP data through Claude:

Weekly Health Report demo (Claude Desktop):



No installation needed — Claude Desktop runs it automatically with the config above.
npm install -g whoop-ai-mcp
git clone https://github.com/shashankswe2020-ux/whoop-mcp.git
cd whoop-mcp
npm install
npm run build
| Variable | Required | Description |
|---|---|---|
WHOOP_CLIENT_ID | Yes | Your WHOOP Developer App client ID |
WHOOP_CLIENT_SECRET | Yes | Your WHOOP Developer App client secret |
Set these in your Claude Desktop config (see Quickstart) or as shell environment variables:
export WHOOP_CLIENT_ID=your_client_id
export WHOOP_CLIENT_SECRET=your_client_secret
http://localhost:3000/callbackhttps://github.com/shashankswe2020-ux/whoop-mcp or your own URLread:profileread:recoveryread:sleepread:workoutread:cyclesread:body_measurementget_profileGet the authenticated user's basic profile — name and email.
Parameters: None
get_body_measurementGet the user's body measurements — height, weight, and max heart rate.
Parameters: None
get_recovery_collectionGet recovery scores for a date range. Returns HRV, resting heart rate, SpO2, and skin temp for each day.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
start | string | No | ISO 8601 or relative expression ("today", "last 7 days", "this week"). |
end | string | No | ISO 8601 or relative expression. Defaults to now. |
limit | number | No | Max records to return (1–25). Defaults to 10. |
nextToken | string | No | Pagination token from a previous response. |
get_sleep_collectionGet sleep records for a date range. Returns sleep stages, duration, respiratory rate, and performance scores.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
start | string | No | ISO 8601 or relative expression ("today", "last 7 days", "this week"). |
end | string | No | ISO 8601 or relative expression. Defaults to now. |
limit | number | No | Max records to return (1–25). Defaults to 10. |
nextToken | string | No | Pagination token from a previous response. |
get_workout_collectionGet workout records for a date range. Returns strain, heart rate zones, calories, and sport type.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
start | string | No | ISO 8601 or relative expression ("today", "last 7 days", "this week"). |
end | string | No | ISO 8601 or relative expression. Defaults to now. |
limit | number | No | Max records to return (1–25). Defaults to 10. |
nextToken | string | No | Pagination token from a previous response. |
get_cycle_collectionGet physiological cycles for a date range. Returns strain, calories, and heart rate data per cycle.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
start | string | No | ISO 8601 or relative expression ("today", "last 7 days", "this week"). |
end | string | No | ISO 8601 or relative expression. Defaults to now. |
limit | number | No | Max records to return (1–25). Defaults to 10. |
nextToken | string | No | Pagination token from a previous response. |
get_sleep_by_idGet a single sleep record by ID. Returns sleep stages, duration, respiratory rate, and performance scores.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
id | string | Yes | The sleep record ID. |
get_workout_by_idGet a single workout record by ID. Returns strain, heart rate zones, calories, and sport type.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
id | string | Yes | The workout record ID. |
get_cycle_by_idGet a single physiological cycle by ID. Returns strain, calories, and heart rate data.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
id | number | Yes | The cycle record ID. |
get_weekly_summaryGet a summarized health report for a given week — average recovery, HRV, RHR, sleep duration and quality, workout count and strain, plus recovery trend direction.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
week_start | string | No | ISO 8601 or relative expression ("last week", "this week"). Defaults to most recent Monday. |
compare_periodsCompare health metrics between two time periods — shows improvement or regression in recovery, sleep, and strain.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
period_a_start | string | Yes | ISO 8601 start of the first period. |
period_a_end | string | Yes | ISO 8601 end of the first period. |
period_b_start | string | Yes | ISO 8601 start of the second period. |
period_b_end | string | Yes | ISO 8601 end of the second period. |
get_trendAnalyze a health metric trend over time — detects direction (improving/declining/stable), variability, and anomalies using linear regression.
Parameters:
| Parameter | Type | Required | Description |
|---|---|---|---|
metric | string | Yes | One of: recovery, hrv, rhr, sleep_duration, sleep_performance, strain. |
days | number | No | Number of days to analyze (7–90). Default: 30. |
MCP Resources provide ambient health context — AI assistants can read your current health state without explicit tool calls.
| Resource URI | Description | Cache TTL |
|---|---|---|
whoop://v2/user/recovery/latest | Most recent recovery score, HRV, RHR | 5 min |
whoop://v2/user/sleep/latest | Most recent sleep record | 5 min |
whoop://v2/user/cycle/latest | Current physiological cycle (strain) | 5 min |
whoop://v2/user/profile | User profile (name, email) | 1 hr |
Privacy: Resources expose the same data available through tools — they simply make it accessible as ambient context. No additional WHOOP scopes are required. Data is cached in-memory with short TTLs and invalidated on token refresh.
To disable resources: set WHOOP_MCP_DISABLE_RESOURCES=1.
Pre-built conversation starters that guide you into useful health queries:
| Prompt | Description |
|---|---|
weekly_health_review | Comprehensive review of recovery, sleep, and workouts (accepts optional days arg) |
sleep_analysis | Analyze recent sleep patterns and quality |
recovery_trend | How is recovery trending? HRV, RHR, recovery score analysis |
workout_recap | Summarize recent workouts, strain, and training load |
health_check | Quick health status using cached resource data |
whoop-ai-mcp uses OAuth2 Authorization Code flow with PKCE:
~/.whoop-mcp/tokens.jsonToken files are stored with 0600 permissions (user-only read/write).
Your WHOOP credentials aren't set. Add them to your Claude Desktop config or set them as environment variables. See Configuration.
Check your internet connection. The WHOOP API must be reachable at https://api.prod.whoop.com.
You've hit the rate limit. The server retries automatically with exponential backoff (up to 3 attempts). If this persists, reduce the frequency of your requests.
Your access token has expired. The server attempts an automatic refresh. If that fails, delete ~/.whoop-mcp/tokens.json and restart to re-authenticate:
rm ~/.whoop-mcp/tokens.json
If the browser doesn't open automatically, check the terminal output for the authorization URL and open it manually.
You can interactively test the server using the MCP Inspector — a browser-based tool for exploring and invoking MCP tools.
WHOOP_CLIENT_ID=your_client_id \
WHOOP_CLIENT_SECRET=your_client_secret \
WHOOP_REDIRECT_URI=http://localhost:3000/callback \
npx @modelcontextprotocol/inspector node dist/index.js
Then open http://localhost:6274 in your browser. The Inspector connects to the server, lists all available tools, and lets you invoke them with custom parameters.
OAuth grant access screen (first-run authorization):

Testing get_profile tool in MCP Inspector:

git clone https://github.com/shashankswe2020-ux/whoop-mcp.git
cd whoop-mcp
npm install
| Command | Description |
|---|---|
npm run build | Build TypeScript |
npm test | Run tests (Vitest) |
npm run typecheck | Type check (tsc --noEmit) |
npm run lint | Lint (ESLint) |
npm run lint:fix | Lint + auto-fix |
npm run format | Format (Prettier) |
npm run dev | Run in dev mode (tsx) |
src/
├── index.ts # Entry point — auth, client, server, stdio
├── server.ts # MCP server + tool/resource/prompt registration
├── auth/
│ ├── oauth.ts # OAuth2 Authorization Code flow
│ ├── token-store.ts # Secure token persistence
│ └── callback-server.ts # Local OAuth callback server
├── api/
│ ├── client.ts # HTTP client with retry + refresh
│ ├── pagination.ts # Auto-pagination utility (fetchAllPages)
│ ├── types.ts # WHOOP API response types
│ └── endpoints.ts # API URL constants
├── resources/
│ └── index.ts # MCP Resource handlers (4 resources)
├── tools/
│ ├── get-profile.ts
│ ├── get-recovery.ts
│ ├── get-sleep.ts
│ ├── get-workout.ts
│ ├── get-cycle.ts
│ ├── get-body-measurement.ts
│ ├── get-sleep-by-id.ts
│ ├── get-workout-by-id.ts
│ ├── get-cycle-by-id.ts
│ ├── get-weekly-summary.ts # Analytical: weekly health report
│ ├── compare-periods.ts # Analytical: period comparison
│ ├── get-trend.ts # Analytical: trend detection
│ ├── date-utils.ts # Relative date expression parser
│ ├── stats-utils.ts # Statistics (mean, median, regression)
│ └── collection-utils.ts
└── (prompts registered in server.ts)
This project is published on npm as whoop-ai-mcp.
npm install -g whoop-ai-mcp
Or run directly with npx:
npx whoop-ai-mcp
package.json and add a new entry in CHANGELOG.mdgit commit -am "Release vX.Y.Z"git tag vX.Y.Zgit push origin main vX.Y.ZSee CHANGELOG.md for a full list of changes in each release.
See CONTRIBUTING.md for development workflow, coding conventions, and the project's Copilot agent/skill configuration.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.