Mmcp.market

Withingsmcp MCP server

by davidmosiah·io.github.davidmosiah/withingsmcp·v0.4.7
No reviews yet

Privacy-first, unofficial Withings MCP server for AI health, sleep, activity and heart-rate agents.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

5 stars

Reviews

Write one

Nobody has reviewed Withingsmcp yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Withingsmcp tools (17, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • withings_agent_manifest

    Machine-readable install, runtime and client guidance for AI agents. Does not call Withings or expose secrets.

  • withings_cache_status

    Show optional local SQLite cache status. Enable with WITHINGS_CACHE=sqlite or WITHINGS_CACHE=true.

  • withings_capabilities

    Explain supported Withings data, privacy boundaries, recommended agent workflow and project links.

  • withings_connection_status

    Check local Withings config, token file, Node version, privacy mode, cache readiness and optional MCP client readiness without calling Withings or exposing secrets.

  • withings_daily_summary

    Build a practical daily summary from Withings activity, sleep and body/heart data when available. Read-only and non-medical.

  • withings_data_inventory

    Inventory supported Withings data domains, auth scope requirements, privacy boundary and recommended first calls. Does not call Withings APIs or expose user data.

  • withings_demo

    Returns realistic example payloads of withings_daily_summary, withings_wellness_context, and withings_list_body_measures so agents see the contract before calling real Withings APIs.

  • withings_exchange_code

    Exchange a Withings OAuth authorization code for local tokens using Withings signed request flow. Tokens are stored locally and never returned.

  • withings_get_auth_url

    Generate a Withings OAuth authorization URL. Use this first when no local token exists.

  • withings_onboarding

    Return the 11-question onboarding flow plus the current profile state and missing fields. Read-only — does NOT persist anything. Pair with withings_profile_update once the user answers. Cross-connector: the same profile is shared by every Delx Wellness MCP (whoop, garmin, oura, fitbit, strava, polar, withings, apple-health, samsung-health, google-health, nourish, cycle-coach, cgm, air).

  • withings_privacy_audit

    Return local privacy, cache, token-path and env-presence posture without revealing secret values.

  • withings_profile_get

    Read the shared Delx Wellness profile from ~/.delx-wellness/profile.json. Returns preferred name, goals, devices, training/nutrition/exercise/agent preferences and safety flags. NEVER contains OAuth tokens or API secrets. Read-only.

  • withings_profile_updatewrite action

    Persist a partial patch to ~/.delx-wellness/profile.json. Requires explicit_user_intent=true (otherwise returns USER_ACTION_REQUIRED). Rejects secret-like fields (oauth, token, secret, password, cookie, refresh, api_key, session) at write time. Use to record preferred name, goals, devices, training context, nutrition context, exercise preferences, agent preferences, and safety flags.

  • withings_quickstart

    Personalized 3-step setup walkthrough for the human user. Adapts to current state (env vars set? token present? what's next?). Call this first when the user asks 'how do I connect Withings?'

  • withings_revoke_accesswrite action

    Delete the local Withings token file. Withings token revocation support varies by app/API plan, so this tool only clears local access.

  • withings_weekly_summary

    Build a weekly Withings scorecard with sleep, activity, body measures, bottlenecks and actions. Read-only and non-medical.

  • withings_wellness_context

    Normalize Withings sleep and activity load into the shared wellness_context shape for recommendation engines.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan58 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 28 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Withingsmcp repository's README, as published. We do not edit it. Read it on GitHub

<!-- delx-wellness header v2 --> Withings MCP

Give your AI agent your Withings body measures, sleep, activity and heart data &mdash; locally. Local-first MCP server &mdash; tokens never leave your machine.

⚡ One-command install with Delx Wellness for Hermes:

npx -y delx-wellness-hermes setup &mdash; preconfigures this connector and the other 8 in a dedicated Hermes profile.

Or wire it standalone into Claude Desktop / Cursor / ChatGPT Desktop &mdash; see the install section below.

HTTP (v2 stateless)

Default is stdio. Optional Streamable HTTP — no session id, JSON responses, loopback only:

npx -y withings-mcp-unofficial --http
# GET  http://127.0.0.1:3000/health
# POST http://127.0.0.1:3000/mcp   (sessionless)

Env: WITHINGSMCPHOST, WITHINGSMCPPORT, WITHINGSMCPTRANSPORT=http.

<!-- /delx-wellness header v2 -->

Local-first MCP server that connects AI agents to your Withings body, sleep, activity and heart data.

Unofficial project. Not affiliated with, endorsed by or supported by Withings. Withings is a trademark of its respective owner. Use this only with your own Withings account and in line with the Withings Public API terms.

Built by David Mosiah for people who use Claude, Cursor, Hermes, OpenClaw or other MCP-compatible agents to think about body composition, sleep and long-term health trends — without copy-pasting numbers from the Withings app.

Part of Delx Wellness, a registry of local-first wellness MCP connectors.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y withings-mcp-unofficial on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add withingsmcp -- npx -y withings-mcp-unofficial
Add to Cursor

Withingsmcp: common questions

Is Withingsmcp MCP server safe?
Mostly: it is graded B (83/100). Read the Withingsmcp safety report
How do I install Withingsmcp?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Withingsmcp need an API key?
Yes. The registry entry asks for WITHINGS_CLIENT_SECRET.
Is Withingsmcp maintained?
The last commit was 28 days ago (2026-08-29). The latest release is v0.4.7.
What can I use instead of Withingsmcp?
Servers from other publishers that do the same job: Apple Health MCP server.

Alternatives to Withingsmcp

Same job from other publishers: the closest match first, then the best rated.

  • Apple Health
    Local-first Apple Health MCP server for questions about your sleep, workouts and heart data.
    A

More from davidmosiah →