Observed MCP server

WHOOP MCP Server

A multi-user MCP server that exposes WHOOP fitness data (recovery, sleep, workouts, cycles, profile, body measurements) to AI clients. Each user connects their own WHOOP account via OAuth and only sees their own data, which is fetched live on every tool call.

Security score

—/100

Awaiting a completed comparable scan.

Seven-category assessment pending: authentication, tool poisoning, prompt injection, dangerous capabilities, dependency risk, data exfiltration, and transport security.

Score history

Pending

Immutable methodology-versioned snapshots

Schema drift

Pending

No normalized tool schema observed

Fingerprint

Pending

Repository/package-backed identity

Public findings

No public findings recorded

This is not a safety claim. Check the coverage and revision status before relying on absence of findings.