Back to Home
Async-IO icon

pierre_mcp_server

Verified Safe

by Async-IO

Overview

A multi-tenant web dashboard and API server for managing and monitoring fitness data (activities, sleep, recovery, nutrition) and AI-powered fitness intelligence.

Installation

Run Command
docker compose up -d

Environment Variables

  • PIERRE_MASTER_ENCRYPTION_KEY
  • DATABASE_URL
  • HTTP_PORT
  • CORS_ALLOWED_ORIGINS
  • LOG_LEVEL
  • ENVIRONMENT
  • PIERRE_JWT_SECRET
  • GEMINI_API_KEY
  • OPENWEATHER_API_KEY
  • STRAVA_CLIENT_ID
  • STRAVA_CLIENT_SECRET
  • STRAVA_REDIRECT_URI
  • FITBIT_CLIENT_ID
  • FITBIT_CLIENT_SECRET
  • FITBIT_REDIRECT_URI
  • GARMIN_CLIENT_ID
  • GARMIN_CLIENT_SECRET
  • GARMIN_REDIRECT_URI
  • WHOOP_CLIENT_ID
  • WHOOP_CLIENT_SECRET
  • WHOOP_REDIRECT_URI
  • TERRA_CLIENT_ID
  • TERRA_CLIENT_SECRET
  • TERRA_REDIRECT_URI
  • OAUTH_DEFAULT_EMAIL
  • OAUTH_DEFAULT_PASSWORD
  • MCP_PROTOCOL_VERSION
  • MCP_SERVER_NAME
  • MCP_SERVER_VERSION

Security Notes

The project demonstrates strong security practices including two-tier cryptographic key management (MEK from environment, DEK in DB), AES-256-GCM encryption with AAD and nonces for sensitive data (OAuth tokens), Argon2 for password/secret hashing, PKCE enforcement with constant-time comparisons for OAuth2, robust CSRF protection, and comprehensive PII redaction for logging. JWKS management with RSA 4096-bit key rotation ensures secure JWT signing. Rate limiting is implemented for API keys and JWTs. The overall security architecture is well-considered and robust.

Similar Servers

Stats

Interest Score39
Security Score9
Cost ClassMedium
Avg Tokens350
Stars13
Forks2
Last Update2025-12-06

Tags

Web DashboardFitness TrackingAPI ManagementMulti-TenancyOAuth2AI/MLAgent-to-Agent CommunicationReal-time Updates