io.github.davidmosiah/withingsmcp
Privacy-first, unofficial Withings MCP server for AI health, sleep, activity and heart-rate agents.
Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.
Own this server? Screen its description →
WITHINGS_CLIENT_IDWithings OAuth client ID. Optional when configured with withings-mcp-server setup.
WITHINGS_CLIENT_SECRETWithings OAuth client secret. Prefer withings-mcp-server setup so this secret is stored in ~/.withings-mcp/config.json instead of MCP client config.
WITHINGS_REDIRECT_URIRedirect URI configured in the Withings Developer Dashboard. Optional when configured with withings-mcp-server setup.
WITHINGS_TOKEN_PATHOptional local path for OAuth tokens. Defaults to ~/.withings-mcp/tokens.json.
WITHINGS_PRIVACY_MODEOptional payload mode: summary, structured, or raw. Defaults to structured. raw means full Withings API payloads, not continuous 24/7 raw sensor telemetry.
WITHINGS_CACHEOptional SQLite cache toggle. Set to true or sqlite to enable.
WITHINGS_CACHE_PATHOptional local SQLite cache path. Defaults to ~/.withings-mcp/cache.sqlite.
WITHINGS_NO_CACHESet to true to bypass the in-memory HTTP response cache (60s TTL for GET only). POST/PUT/DELETE and 4xx/5xx responses are never cached regardless. Note: Withings's wbsapi.withings.net is POST-only today, so this is currently a no-op.
AI-powered trading strategy development: backtesting, market data, and portfolio analysis
Feature flagging and A/B testing platform with AI-first experimentation workflows.
Query Meta Ads performance data — accounts, campaigns, ad sets, ads, metrics & settings.