Whoop MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 76 installs a week from npm. Last commit 16 Sep 2026.
Full read + write access to your Whoop fitness data via the private iOS API. 48 tools.
What changed 1
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 August 2026. No other catalogue keeps this.
What the code does
We read the source, 3 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
пакет @briangaoo/whoop-mcp ссылается на briangaoo/whoop-mcp
const child = spawn(cmd, args, { stdio: "inherit", ...opts });
ENV WHOOP_TOKEN_STORE=memory
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add whoop-mcp -e 'WHOOP_IOS_BEARER_TOKEN=<WHOOP_IOS_BEARER_TOKEN>' -e 'WHOOP_COGNITO_REFRESH_TOKEN=<WHOOP_COGNITO_REFRESH_TOKEN>' -e 'WHOOP_EMAIL=<WHOOP_EMAIL>' -- npx -y @briangaoo/whoop-mcp{
"mcpServers": {
"whoop-mcp": {
"command": "npx",
"args": [
"-y",
"@briangaoo/whoop-mcp"
],
"env": {
"WHOOP_COGNITO_REFRESH_TOKEN": "<WHOOP_COGNITO_REFRESH_TOKEN>",
"WHOOP_EMAIL": "<WHOOP_EMAIL>",
"WHOOP_IOS_BEARER_TOKEN": "<WHOOP_IOS_BEARER_TOKEN>"
}
}
}
}[mcp_servers.whoop-mcp]
command = "npx"
args = ["-y", "@briangaoo/whoop-mcp"]
env = { WHOOP_IOS_BEARER_TOKEN = "<WHOOP_IOS_BEARER_TOKEN>", WHOOP_COGNITO_REFRESH_TOKEN = "<WHOOP_COGNITO_REFRESH_TOKEN>", WHOOP_EMAIL = "<WHOOP_EMAIL>" }{
"mcpServers": {
"whoop-mcp": {
"command": "npx",
"args": [
"-y",
"@briangaoo/whoop-mcp"
],
"env": {
"WHOOP_COGNITO_REFRESH_TOKEN": "<WHOOP_COGNITO_REFRESH_TOKEN>",
"WHOOP_EMAIL": "<WHOOP_EMAIL>",
"WHOOP_IOS_BEARER_TOKEN": "<WHOOP_IOS_BEARER_TOKEN>"
}
}
}
}{
"servers": {
"whoop-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@briangaoo/whoop-mcp"
],
"env": {
"WHOOP_COGNITO_REFRESH_TOKEN": "<WHOOP_COGNITO_REFRESH_TOKEN>",
"WHOOP_EMAIL": "<WHOOP_EMAIL>",
"WHOOP_IOS_BEARER_TOKEN": "<WHOOP_IOS_BEARER_TOKEN>"
}
}
}
}Put your own values in place of
<WHOOP_IOS_BEARER_TOKEN> (Whoop Cognito access token. Obtain via `whoop-mcp auth` from the repo, which prompts for your Whoop email + password + SMS MFA code, then writes both tokens to a local .env. Auto-refreshes every ~24h), <WHOOP_COGNITO_REFRESH_TOKEN> (Whoop Cognito refresh token (~30 day lifetime). Obtained alongside the bearer token from `whoop-mcp auth`. When this expires, run `whoop-mcp auth` to get a fresh pair), <WHOOP_EMAIL> (Your Whoop account email. Used only by `whoop-mcp auth` — the running server reads tokens, not credentials).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
WHOOP_USER_ID (Your numeric Whoop user ID. Optional — used by whoop_profile and whoop_leaderboard. Avoids one redundant bootstrap call per session if set), WHOOP_TIMEZONE (IANA timezone (e.g., America/Los_Angeles) for response timestamps. Optional — if unset, the server auto-detects from your Whoop profile's timezone_offset field (refreshed hourly)).
Alternatives to Whoop MCP
same job, measured the same wayFigma MCP server with full read/write access via plugin — no API token, no rate limits. 73 tools.
Totem — talk to your wearables with AI. Today: full Whoop access (48 tools).
Totem — talk to your wearables with AI. Today: full Whoop access (48 tools).
AI access to your aNotepad online notes: read, search, write, and organize via 22 tools.
Access your Altitude financial data from the AI tools you already use.
Give AI agents full read & write access to Figma — 50+ tools for design automation
Read-only access to your own Mi Fitness (Xiaomi) data: sleep, heart rate, steps, workouts
Figma MCP server with full read/write access via plugin bridge — no API token or rate limits.
Whoop MCP — questions
Answers built from our own checks of this server.