mcp-server-hevy
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HEVY_AUDIT_LOG | No | Path to audit log file, empty to disable | |
| MCP_HTTP_TOKEN | No | Bearer token for the MCP HTTP transport | |
| HEVY_STORE_PATH | No | Path to the store file | /data/store.json |
| HEVY_TIMEOUT_MS | No | Timeout for HTTP requests in milliseconds | 30000 |
| HEVY_ENABLE_WRITES | No | Set to 'true' to enable write tools | false |
| HEVY_ENCRYPTION_KEY | Yes | AES-256-GCM key for the credential store (openssl rand -hex 32) | |
| HEVY_PUBLIC_BASE_URL | No | Public origin, used to build the enrollment link | |
| HEVY_TRUST_FORWARDED_USER | No | Set to 'true' to trust forwarded user headers |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| hevy_search_capabilitiesC | Find the right Hevy tool. Use first. |
| hevy_connectA | Start linking YOUR Hevy account. Returns a one-time link to a form where you paste your Hevy API key — the key is never sent through this conversation. Get the key from hevy.com/settings?developer in a BROWSER (it is not in the mobile app) — it requires an active Hevy Pro subscription. |
| hevy_statusA | Whether your Hevy account is linked. |
| hevy_disconnectA | Remove your stored Hevy API key from this server. |
| hevy_get_workoutsA | Your logged workouts, newest first, with full exercise and set detail. Max 10 per page. |
| hevy_get_workoutC | One workout by id. |
| hevy_get_workout_countA | Total number of workouts you have logged. |
| hevy_get_workout_eventsA | Workouts updated or deleted since a timestamp — use for incremental sync rather than re-reading everything. |
| hevy_get_exercise_historyA | Every recorded set for one exercise template over time — the right tool for judging progression on a specific lift. |
| hevy_get_routinesB | Your saved routines (training templates). Max 10 per page. |
| hevy_get_routineA | One routine by id. Always fetch this before hevy_update_routine — updates replace the entire routine. |
| hevy_get_routine_foldersD | Your routine folders. |
| hevy_search_exercise_templatesA | Find exercise templates by name to get the exercise_template_id needed for creating workouts/routines. Hevy has no server-side search, so this pages through templates and filters locally. |
| hevy_get_exercise_templateC | One exercise template by id. |
| hevy_get_user_infoA | Your Hevy profile (id, name, profile URL). |
| hevy_get_body_measurementsA | Body measurements stored in Hevy. READ-ONLY here by design: Withings is the source of truth for body weight and composition, so this server deliberately does not write measurements and create a second competing record. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/borgels/mcp-server-hevy'
If you have feedback or need assistance with the MCP directory API, please join our Discord server