# Add to your Claude Code skills
git clone https://github.com/shashankswe2020-ux/whoop-mcpLast scanned: 6/3/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@vitest/coverage-v8: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "vitest: When Vitest UI server is listening, arbitrary file can be read and executed",
"severity": "critical"
}
],
"status": "FAILED",
"scannedAt": "2026-06-03T08:55:39.979Z",
"npmAuditRan": true,
"pipAuditRan": true
}whoop-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by shashankswe2020-ux. MCP server to connect to whoop API. It has 148 GitHub stars.
whoop-mcp failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/shashankswe2020-ux/whoop-mcp" and add it to your Claude Code skills directory (see the Installation section above).
whoop-mcp is primarily written in TypeScript. It is open-source under shashankswe2020-ux on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh whoop-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
An MCP (Model Context Protocol) server that connects AI assistants like Claude to your WHOOP health and fitness data. Ask questions about your recovery, sleep, workouts, and more — all through natural conversation.
📦 Published on the MCP Registry as
io.github.shashankswe2020-ux/whoop— discoverable by any MCP-compatible client.
~/.whoop-mcp/tokens.json with 0600 permissions@modelcontextprotocol/sdk + zod)Registry snapshot collected 2026-08-30. Versions and publish dates can change; this is an ecosystem comparison, not a source-code security audit.
| Package | Latest | Published (UTC) | MCP Registry identity | Runtime deps | Notable signals |
|---|---|---|---|---|---|
| whoop-ai-mcp (this repo) | 0.6.1 | 2026-08-07 | ✅ io.github.shashankswe2020-ux/whoop |
2 | 14 tools, 4 resources, 5 prompts, analytics, HTTP + stdio, OAuth 2.1 connector |
| whoop-mcp-unofficial | 0.6.5 | 2026-08-29 | ✅ io.github.davidmosiah/whoop-mcp |
6 | 20+ tools, SQLite cache, privacy modes |
| mcp-server-whoop | 0.2.2 | 2026-07-17 | ✅ io.github.Yadheedhya06/mcp-server-whoop |
2 | Read-only/local-first, npm provenance, SBOM and security checks |
| @souravpn/whoop-mcp | 1.0.2 | 2026-05-27 | ✅ io.github.souravpn/whoop-mcp |
1 | Simple standalone server with OAuth setup |
| @nchemb/whoop-mcp | 0.2.0 | 2026-04-27 | — | 4 | Shared OAuth relay and local SQLite cache |
| whoop-mcp-server | 0.0.5 | 2026-03-13 | — | 2 | WHOOP Developer Platform API server |
| whoop-mcp | 0.1.2 | 2026-03-11 | — | 1 | Server built with the xmcp framework |
| @roebot0/whoop-mcp | 1.0.0 | 2026-04-06 | — | 3 | Axios-based server and separate auth command |
| @alacore/whoop-mcp-server | 1.0.1 | 2025-10-09 | — | 2 | API v2 integration; requires pnpm |
Findings
mcpName identities.Why this package stands out
Evidence and reproducibility: package names, versions, publish dates,
dependency counts, descriptions, and mcpName values come from the npm Registry
search and package manifests. Feature notes were checked against each package's
published metadata/README where available. Re-run the scan with:
curl -s 'https://registry.npmjs.org/-/v1/search?text=whoop%20mcp&size=20'
Watch a detailed walkthrough of setting up and using whoop-ai-mcp with Claude Desktop:
Covers: creating a WHOOP Developer App, configuring Claude Desktop, OAuth authentication, and querying your health data through natural conversation.
http://localhost:3000/callbackDon't have a WHOOP yet? Here's how to get started:
This server is published on the official MCP Registry. MCP clients that support the registry can discover and install it automatically:
Server name: io.github.shashankswe2020-ux/whoop
You can also browse it via the registry API:
curl "https://registry.modelcontextprotocol.io/v0.1/servers?search=io.github.shashankswe2020-ux/whoop"
Add this to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"whoop": {
"command": "npx",
"args": ["whoop-ai-mcp"],
"env": {
"WHOOP_CLIENT_ID": "your_client_id",
"WHOOP_CLIENT_SECRET": "your_client_secret"
}
}
}
}
Replace your_client_id and your_client_secret with the credentials from your WHOOP Developer App.
On first launch, a browser window will open for you to authorize access to your WHOOP data. After authorizing, tokens are cached locally and refresh automatically.
Then ask Claude something like:
"How am I doing today?"
"Show me my sleep data from the last 3 days"
"What workouts did I do this month?"
"Is my HRV trending up or down?"
"Give me a weekly health summary"
"Show me my recovery calendar for last 2 weeks"
whoop-mcp connected in Claude Desktop:

Chatting with WHOOP data through Claude:

Weekly Health Report demo (Claude Desktop):



No installation needed — Claude Desktop runs it automatically with the config above.
npm install -g whoop-ai-mcp
git clone https://github.com/shashankswe2020-ux/whoop-mcp.git
cd whoop-mcp
npm install
npm run build
whoop-ai-mcp setup)For a guided installation that writes the Claude Desktop config (or prints the registration command for Claude Code, Codex, or GitHub Copilot) and verifies your WHOOP credentials in one go:
npx whoop-ai-mcp setup
Flags:
--client=claude-desktop (default) writes/merges claude_desktop_config.json
with an automatic .bak backup.--client=claude-code prints the equivalent claude mcp add command.--client=codex prints the equivalent codex mcp add command (registers the
server in ~/.codex/config.toml).--client=copilot prints the equivalent code --add-mcp command for GitHub
Copilot in VS Code.--verify runs the OAuth flow end-to-end and fetches your profile to confirm
everything is wired correctly before exiting.--client-id / --client-secret skip the interactive prompts (useful for
scripts; secrets entered interactively are masked).If WHOOP_CLIENT_ID and WHOOP_CLIENT_SECRET are already exported in your
shell, the wizard uses them automatically — no prompts. Combine with
--verify to do a one-shot config-correctness check:
WHOOP_CLIENT_ID=... WHOOP_CLIENT_SECRET=... npx whoop-ai-mcp setup --verify
If the Claude Desktop config file already contains a whoop MCP entry from
a previous setup, the wizard short-cir