Back to Browse

Openathlete MCP Server

Developer ToolsModerate7.4MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Endurance training: activities, load, zones, and workouts sent to Garmin, COROS and Suunto watches

About

Endurance training: activities, load, zones, and workouts sent to Garmin, COROS and Suunto watches

Remote endpoints: streamable-http: https://api.openathlete.org/mcp

Security Report

7.4
Moderate7.4Low Risk

The OpenAthlete MCP tooling code shown is a well-structured training calendar integration that enforces per-athlete authorization (CASL ability checks, coach access limited to coached athletes, 'not found' responses for strangers' records) and scope-gated write tools with readOnly annotations. No malicious patterns, data exfiltration, shell execution, or hardcoded secrets were observed in the provided excerpts; the README and package manifests show standard, purpose-matched dependencies, and the MCP server's network and database access matches its stated purpose. Only minor observations remain, mainly that the provided excerpts are truncated, so the full server code was not reviewed. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

11 files analyzed · 4 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

database

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!