io.github.davidmosiah/fitbitmcp

io.github.davidmosiah/fitbitmcp·v0.4.5·Other

Privacy-first, unofficial Fitbit MCP server for AI health, sleep, activity and heart-rate agents.

Trust verdict · v1 advisory · method

NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables

FITBIT_CLIENT_ID

Fitbit OAuth client ID. Optional when configured with fitbit-mcp-server setup.

FITBIT_CLIENT_SECRET

secret

Fitbit OAuth client secret. Prefer fitbit-mcp-server setup so this secret is stored in ~/.fitbit-mcp/config.json instead of MCP client config.

FITBIT_REDIRECT_URI

Redirect URI configured in the Fitbit Developer Dashboard. Optional when configured with fitbit-mcp-server setup.

FITBIT_TOKEN_PATH

Optional local path for OAuth tokens. Defaults to ~/.fitbit-mcp/tokens.json.

FITBIT_PRIVACY_MODE

Optional payload mode: summary, structured, or raw. Defaults to structured. raw means full Fitbit API payloads, not continuous 24/7 raw sensor telemetry.

FITBIT_CACHE

Optional SQLite cache toggle. Set to true or sqlite to enable.

FITBIT_CACHE_PATH

Optional local SQLite cache path. Defaults to ~/.fitbit-mcp/cache.sqlite.

FITBIT_NO_CACHE

Set to true to bypass the in-memory HTTP response cache (60s TTL for GET only). POST/PUT/DELETE and 4xx/5xx responses are never cached regardless.

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Other

agency.lona/trading

AI-powered trading strategy development: backtesting, market data, and portfolio analysis

ABMeter

ai.abmeter/abmeter

Feature flagging and A/B testing platform with AI-first experimentation workflows.

AdAdvisor MCP Server

ai.adadvisor/mcp-server

Query Meta Ads performance data — accounts, campaigns, ad sets, ads, metrics & settings.

Install

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "fitbitmcp": {
      "command": "npx",
      "args": [
        "-y",
        "fitbit-mcp-unofficial"
      ],
      "env": {
        "FITBIT_CLIENT_ID": "<fitbit_client_id>",
        "FITBIT_CLIENT_SECRET": "<your-fitbit_client_secret>",
        "FITBIT_REDIRECT_URI": "<fitbit_redirect_uri>",
        "FITBIT_TOKEN_PATH": "<fitbit_token_path>",
        "FITBIT_PRIVACY_MODE": "<fitbit_privacy_mode>",
        "FITBIT_CACHE": "<fitbit_cache>",
        "FITBIT_CACHE_PATH": "<fitbit_cache_path>",
        "FITBIT_NO_CACHE": "<fitbit_no_cache>"
      }
    }
  }
}

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "fitbitmcp": {
      "command": "npx",
      "args": [
        "-y",
        "fitbit-mcp-unofficial"
      ],
      "env": {
        "FITBIT_CLIENT_ID": "<fitbit_client_id>",
        "FITBIT_CLIENT_SECRET": "<your-fitbit_client_secret>",
        "FITBIT_REDIRECT_URI": "<fitbit_redirect_uri>",
        "FITBIT_TOKEN_PATH": "<fitbit_token_path>",
        "FITBIT_PRIVACY_MODE": "<fitbit_privacy_mode>",
        "FITBIT_CACHE": "<fitbit_cache>",
        "FITBIT_CACHE_PATH": "<fitbit_cache_path>",
        "FITBIT_NO_CACHE": "<fitbit_no_cache>"
      }
    }
  }
}

Cline (cline_mcp_settings.json)

npx -y fitbit-mcp-unofficial

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-github-davidmosiah-fitbitmcp

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v0.4.5
category: Other
quality: 85 / 100
operator: davidmosiah

Provenance

Verdict history is anchored to Bitcoin via OpenTimestamps. The free tier returns the current verdict only; the anchored record is served on the authenticated tier.

Links

Repository →Website →