Oura MCP server

by proscar87·io.github.proscar87/oura-mcp·v0.3.5

The Oura v2 API as an MCP server. Paginates, fixes the date range, warns when data is missing.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Oura yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

oura_check
Self-check: is there a credential, and does Oura respond? Exposing nothing.
oura_collections
The 19 Oura collections, what each one carries and which parameters it takes.
oura_query
Fetches a COMPLETE Oura collection over the requested range.
oura_today
Last night's sleep and today's readiness, with the days before them.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan28 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 8 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add oura-mcp -- uvx mcp-oura

Is Oura MCP server safe?: Mostly: it is graded B (83/100). Read the Oura safety report
How do I install Oura?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Oura need an API key?: Yes. The registry entry asks for OURA_CLIENT_SECRET, OURA_PAT.
Is Oura maintained?: The last commit was 9 days ago (2026-09-12). The latest release is v0.3.5.

Local package. It runs on your machine, not through the gateway.

OURA_SANDBOXSet to 1 to use Oura's official synthetic data with no credentials. The recommended way to try the server before authenticating.
OURA_CLIENT_IDclient_id of your Oura application, for OAuth2. Register one at https://cloud.ouraring.com/oauth/applications with the redirect http://localhost:9876/callback/ (the trailing slash is required).
OURA_CLIENT_SECRETsecretclient_secret of your Oura application. Only needed when running `oura-mcp --authorize` and when refreshing the token.
OURA_CREDENTIALSWhere the OAuth2 credentials file lives. Defaults to ~/.config/oura-mcp/credentials.json, mode 600.
OURA_PATsecretOura Personal Access Token. Only if you already had one: Oura stopped issuing them in December 2025.
OURA_PAT_FILEPath to a file holding the personal token. Preferable to OURA_PAT: an MCP server is registered in a JSON that gets backed up and shared when asking for help; a separate file rotates without touching the config.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/proscar87-oura-mcp.svg)](https://mcp.market/server/proscar87-oura-mcp)