Ask Claude about your WHOOP recovery, sleep, strain and workouts. Self-hosted, with sign-in.
WHOOP_CLIENT_SECRETOAuth apprequiredClient secret of your WHOOP developer app.
MCP_AUTH_PASSWORDAPI keyrequiredPassword for the sign-in page that protects /mcp, at least 16 characters.
ENCRYPTION_SECRETAPI keyoptionalKey for encrypting the stored WHOOP tokens. Defaults to WHOOP_CLIENT_SECRET.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
get_todayReturns the user's latest WHOOP status as Markdown: the most recent recovery (score %, Green/Yellow/Red zone, HRV inReturns the user's latest WHOOP status as Markdown: the most recent recovery (score %, Green/Yellow/Red zone, HRV in
No input schema was published for this tool.
get_recovery_trendsReturns daily recovery for the last `days` days (default 14), newest first, as a Markdown table: recovery score (%),Returns daily recovery for the last `days` days (default 14), newest first, as a Markdown table: recovery score (%),
No input schema was published for this tool.
get_sleep_analysisReturns nightly sleep for the last `days` days (default 14), newest first, as a Markdown table: time asleep inReturns nightly sleep for the last `days` days (default 14), newest first, as a Markdown table: time asleep in
No input schema was published for this tool.
get_strain_historyReturns daily strain for the last `days` days (default 14), including today so far, newest first, as a MarkdownReturns daily strain for the last `days` days (default 14), including today so far, newest first, as a Markdown
No input schema was published for this tool.
get_workoutsReturns individual workouts from the last `days` days (default 14), newest first, as a Markdown table: local dateReturns individual workouts from the last `days` days (default 14), newest first, as a Markdown table: local date
No input schema was published for this tool.
get_auth_urlReturns a one-time link that connects the user's WHOOP account to this server through WHOOP's own login. Use itReturns a one-time link that connects the user's WHOOP account to this server through WHOOP's own login. Use it
No input schema was published for this tool.
6 of 6 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Ask Claude about your WHOOP recovery, sleep, strain and workouts. Self-hosted, with sign-in.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.