Back to Home
pokidyshev icon

oura-mcp

Verified Safe

by pokidyshev

Overview

The server connects Oura Ring health data to AI assistants via the Model Context Protocol (MCP) for natural language querying and analysis.

Installation

Run Command
oura-mcp

Environment Variables

  • OURA_ACCESS_TOKEN
  • OURA_CLIENT_ID
  • OURA_CLIENT_SECRET
  • DEPLOYED_URL
  • JWT_SIGNING_KEY
  • OURA_REFRESH_TOKEN
  • OURA_TOKEN_FILE

Security Notes

Secrets (API keys, tokens, JWT signing key) are appropriately loaded from environment variables, which is good practice. A local '.oura_tokens.json' file is used for PAT persistence but explicitly marked for 'LOCAL/DEV/TESTING ONLY'. The primary OAuth2 token management is handled by FastMCP's OAuthProxy, which should abstract away most security concerns for production. However, a warning '⚠️ WARNING: OAuth2 token refresh is NOT TESTED YET!' within the OuraClient class suggests potential fragility or an incomplete client-side token refresh implementation in that specific path, though the broader FastMCP OAuth flow is expected to be robust. The JWT_SIGNING_KEY is critical for OAuth2 and must remain stable.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens5000
Stars0
Forks0
Last Update2025-11-23

Tags

Oura RingHealth DataMCPAI AssistantFastMCP