Privacy-first, unofficial Withings MCP server for AI health, sleep, activity and heart-rate agents.
Withingsmcp MCP server is a locally run integration for AI assistants that speak the Model Context Protocol. Privacy-first, unofficial Withings MCP server for AI health, sleep, activity and heart-rate agents.
Once Withingsmcp is connected, these are the calls the assistant has available:
withings_connection_status — verify local setup before calling Withingswithings_data_inventory — inventory supported data domains, scopes, privacy modes and recommended first calls without calling Withings APIswithings_daily_summary — body, sleep, activity and heart brief for todaywithings_weekly_summary — scorecard, comparison vs prior week, next-week planwithings_list_body_measures — punctual weight/composition records. Use after / before as YYYY-MM-DD or ISO 8601 for large histories; the server sends Withings startdate / enddatewithings_list_heart — heart records when device/plan permitwithings_list_activity — daily activity summarieswithings_list_workouts — logged workoutswithings_list_sleep_summary — daily sleep summaries with HR/stage fieldswithings_list_sleep — detailed sleep recordsdelx-wellness-hermes on npm is all you need. Most clients run it directly, so configuration is a few lines and a restart.
You will need 4 environment variables: WITHINGS_CLIENT_ID, WITHINGS_CLIENT_SECRET, WITHINGS_TOKEN_PATH, WITHINGS_CACHE_PATH. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
http://127.0.0.1:3000/callbackAmong the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Withingsmcp's toolset — withings_connection_status, withings_data_inventory, withings_daily_summary and 7 more — is a fair guide to whether it matches your workflow. It is maintained by davidmosiah; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| withings_connection_status | verify local setup before calling Withings |
| withings_data_inventory | inventory supported data domains, scopes, privacy modes and recommended first calls without calling Withings APIs. |
| withings_daily_summary | body, sleep, activity and heart brief for today |
| withings_weekly_summary | scorecard, comparison vs prior week, next-week plan |
| withings_list_body_measures | punctual weight/composition records. Use after / before as YYYY-MM-DD or ISO 8601 for large histories; the server sends Withings startdate / enddate (Unix seconds) upstream and caps returned records with limit. |
| withings_list_heart | heart records when device/plan permit |
| withings_list_activity | daily activity summaries |
| withings_list_workouts | logged workouts |
| withings_list_sleep_summary | daily sleep summaries with HR/stage fields |
| withings_list_sleep | detailed sleep records |
{
"mcpServers": {
"withings": {
"command": "npx",
"args": ["-y", "withings-mcp-unofficial"]
}
}
}Configuration as documented by the project. Restart the client after saving.
http://127.0.0.1:3000/callback| Variable | Description | Required |
|---|---|---|
| WITHINGS_CLIENT_ID | Configuration value read at startup. | Optional |
| WITHINGS_CLIENT_SECRET | Credential the server authenticates with. | Yes |
| WITHINGS_TOKEN_PATH | Credential the server authenticates with. | Yes |
| WITHINGS_CACHE_PATH | Filesystem location the server is allowed to use. | Optional |
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.