Atlas / MCP servers / ctvidic / Whoop

WhoopSAFE

mcp/ctvidic/whoop
Verdict
SAFE
Grade
B
Trust score
88 /100
Exposed tools
16 16r · 0w · 0d
Transport
stdio
License
—
Stars
26
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Python Package License: MIT Python 3.12

A Model Context Protocol (MCP) server that provides access to the Whoop API. It allows language models to query cycles, recovery, strain, and workout data from the Whoop API.

Available Tools

The server exposes the following tools:

Cycle Queries

  • get_cycle_collection(start_date: str, end_date: str): Get cycle data for a specific date range
  • get_latest_cycle(): Get the most recent cycle data

Recovery and Strain

  • get_recovery_data(start_date: str, end_date: str): Get recovery data for a specific date range
  • get_strain_data(start_date: str, end_date: str): Get strain data for a specific date range
  • get_average_strain(days: int = 7): Calculate average strain over specified number of days

Profile and Authentication

  • get_profile(): Get user profile information
  • check_auth_status(): Check authentication status with Whoop API

Dates should be provided in ISO format (YYYY-MM-DD).

Usage

You'll need Whoop credentials to use this server. The server uses email/password authentication with the Whoop API.

Claude for Desktop

Update your claude_desktop_config.json (located in ~/Library/Application\ Support/Claude/claude_desktop_config.json on macOS and %APPDATA%/Claude/claude_desktop_config.json on Windows) to include the following:

{
"mcpServers": {
"Whoop": {
"command": "python",
"args": ["/path/to/whoop/src/whoop_server.py"],
"cwd": "/path/to/whoop",
"env": {
"WHOOP_EMAIL": "[email protected]",
"WHOOP_PASSWORD": "your_password"
}
}
}
}

HTTP API Server

The project also includes an HTTP API server that exposes the same functionality over HTTP endpoints. To run it:

./run_whoop_server.sh

Example Queries

Once connected, you can ask Claude questions like:

  • "What's my recovery score for today?"
  • "Show me my strain
Read from source at commit 57c0629501aeOBSERVED · 2026-10-09
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add whoop-mcp-server --env WHOOP_PASSWORD=${WHOOP_PASSWORD} -- uvx whoop-mcp-server
claude-desktop
{
  "mcpServers": {
    "whoop-mcp-server": {
      "command": "uvx",
      "args": [
        "whoop-mcp-server"
      ],
      "env": {
        "WHOOP_PASSWORD": "${WHOOP_PASSWORD}"
      }
    }
  }
}
03

Exposed tools (16)

16 read · 0 write · 0 destructive.

ToolRiskDescription
check_auth_statusread
get_average_strainread
get_cycle_by_idread
get_cyclesread
get_latest_cycleread
get_latest_recoveryread
get_recoveriesread
get_recovery_by_idread
get_sleep_by_idread
get_sleepsread
get_strain_by_idread
get_strainsread
get_team_membersread
get_user_body_measurementsread
get_workout_by_idread
get_workoutsread
04

Trust audit

SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (4)

LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWSupply chain · supply.git_dep · CWE-829, CWE-1357
requirements.txt:1
git+https://github.com/modelcontextprotocol/python-sdk.git
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
requirements.txt
git+https://github.com/modelcontextprotocol/python-sdk.git, fastapi, uvicorn, requests, python-dotenv, pydantic
Why it matters. 6 requirement(s) not pinned with ==
Fix. pin exact versions
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README.md:27
You'll need Whoop credentials to use this server. The server uses email/password authentication with the Whoop API.
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-09 · audit v0.4.1 · source sha 57c0629501aefull audit observations/trust-audit/mcp-server/ctvidic__whoop.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-0957c0629501aeSAFEB88first audit
06

Questions

What tools does Whoop expose?

16 in total: 16 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Whoop safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Whoop need?

It reads WHOOP_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Whoop run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as whoop-mcp-server.

How current is this page?

The grade is for one exact copy of the source (57c0629501ae), read on 2026-10-09. The repository is watched and re-audited when it changes.

Advertisement