// SCAN REPORT

Health MCP Server

24 tools. 2 can modify or destroy data without limits.

2 write tools that can modify data. Rate limits recommended.

Last updated:

2 can modify or destroy data
22 read-only
24 tools total

Community server · catalogue entry verified 03/07/2026

How to control Health MCP Server ↓

TOOL MAP

What Health MCP Server exposes to your agents

Read (22) Write / Execute (2) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous Health MCP Server tools

Execute · Medium strava_authenticate This tool triggers an external browser action (opening a browser window) and initiates an OAuth authentication flow, which is an external operation with side effects beyond mere data retrieval. Execute · Medium whoop_authenticate This tool triggers an external browser action and OAuth flow, which constitutes executing an external operation (opening a browser window and initiating an authorization sequence).

2 of Health MCP Server's 24 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Health MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Health MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations
{
  "analyze_recovery_factors": {
    "limits": [
      {
        "counter": "analyze_recovery_factors_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Health MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON HEALTH →

Instant setup, no code required.

FULL CATALOGUE

All 24 Health MCP Server tools

EXECUTE 2 tools
Execute strava_authenticate Authenticate with Strava. Opens a browser window for OAuth login to authorize access to your activity data. Execute whoop_authenticate Authenticate with Whoop. Opens a browser window for OAuth login to authorize access to your health data.
READ 22 tools
Read analyze_recovery_factors Analyze factors affecting recovery including correlations with sleep and strain from Whoop data. Read analyze_sleep_patterns Analyze sleep patterns including optimal bedtime, consistency, and personalized recommendations from Whoop dat Read get_health_overview Comprehensive health overview combining sleep, recovery, and strain metrics from Whoop. Read get_recovery_history Get recovery history over a date range with trends and statistics from Whoop. Read get_recovery_score Get latest recovery score with HRV, resting heart rate, and status (green/yellow/red) from Whoop. Read get_sleep_history Get sleep history over a date range with trends and statistics from Whoop. Read get_sleep_summary Get recent sleep summary including performance, stages, efficiency, and sleep needs from Whoop. Read get_strain_history Get daily strain history showing cardiovascular load over time from Whoop. Read get_strain_today Get today Read get_strava_activities Get recent Strava activities with distance, duration, pace/speed, elevation, and heart rate data. Read get_strava_activity_detail Get detailed information about a specific Strava activity including laps, segments, and full stats. Read get_strava_activity_zones Get heart rate and power zone distribution for a specific Strava activity. Read get_strava_profile Get Strava athlete profile including all-time stats, year-to-date totals, and gear (bikes, shoes). Read get_strava_weekly_summary Get a weekly training summary from Strava with totals by activity type and daily breakdown. Read get_strava_zones Get your configured heart rate and power training zones from Strava. Read get_training_readiness Assess current training readiness with workout intensity recommendations based on Whoop recovery. Read get_user_profile Get user profile including name, email, and body measurements (height, weight, max heart rate) from Whoop. Read get_weekly_report Generate weekly report comparing this week to previous weeks with trends from Whoop. Read get_workout_history Get workout history with strain, heart rate zones, duration, and calories from Whoop. Read list_adapters List all available health data adapters and their authentication status. Read strava_check_auth Check if currently authenticated with Strava and display authentication status. Read whoop_check_auth Check if currently authenticated with Whoop and display authentication status.
FAQ

Questions about Health MCP Server

Is the Health MCP Server MCP server safe to use without restrictions? +

The Health MCP Server server is primarily read-only with 22 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Health MCP Server MCP server expose? +

24 tools across 1 categories: Read. 22 are read-only. 2 can modify, create, or delete data.

How do I enforce a policy on Health MCP Server? +

Register the Health MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Health MCP Server tool call.

Deterministic rules across all 24 Health MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HEALTH →

Instant setup, no code required.

24 Health MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.