Skip to main content
Glama

Upgrading to 0.8.0: read the migration guide for local-only HTTP, disabled authenticated-response caching, and stricter input/profile limits.

⚡ One-command install with Delx Wellness for Hermes: npx -y delx-wellness-hermes setup — preconfigures this connector and the other 8 in a dedicated Hermes profile.

Or wire it standalone into Claude Desktop / Cursor / ChatGPT Desktop — see the install section below.


HTTP (v2 stateless)

Default is stdio. Optional Streamable HTTP — no session id, JSON responses, loopback only:

npx -y oura-mcp-unofficial --http
# GET  http://127.0.0.1:3000/health
# POST http://127.0.0.1:3000/mcp   (sessionless)

Env: OURA_MCP_HOST, OURA_MCP_PORT, OURA_MCP_TRANSPORT=http.

Local-first MCP server that connects AI agents to your Oura Ring readiness, sleep, activity and HRV data.

Unofficial project. Not affiliated with, endorsed by or supported by Ōura Health Oy. Oura is a trademark of its respective owner. Use this only with your own Oura account and in line with the Oura Cloud API terms.

Built by David Mosiah for people who use Claude, Cursor, Hermes, OpenClaw or other MCP-compatible agents to think about readiness, sleep and recovery — without copy-pasting numbers from the Oura app.

Part of Delx Wellness, a registry of local-first wellness MCP connectors.

If this connector helps your agent workflow, please star the repo. Stars make the project easier for other AI builders to discover and help Delx keep shipping local-first wellness infrastructure.

Related MCP server: Withings MCP

Why this exists

Oura Ring produces some of the most refined personal health signals — readiness scores, sleep stages, HRV, daily activity, SpO2, body temperature trends. But it lives behind an OAuth API with per-scope authorization, and the data is split across multiple endpoints (daily readiness vs. detailed sleep periods vs. heart-rate streams).

This package handles the OAuth dance locally, normalizes responses across endpoints, and exposes Oura through the Model Context Protocol. Tokens never leave your machine. Privacy-mode defaults keep raw payloads opt-in.

Setup in 60 seconds

You'll need an Oura app (create one here) with redirect URI http://127.0.0.1:3000/callback.

npx -y oura-mcp-unofficial setup    # interactive: paste client id + secret
npx -y oura-mcp-unofficial auth     # opens browser, captures the OAuth code
npx -y oura-mcp-unofficial doctor   # verifies you're ready

Recommended scopes:

daily heartrate personal workout spo2

Then add this to your MCP client config:

{
  "mcpServers": {
    "oura": {
      "command": "npx",
      "args": ["-y", "oura-mcp-unofficial"]
    }
  }
}

For Claude Desktop, run setup --client claude and the snippet is written for you.

Quickstart: see the data before you connect

No Oura account yet? Call oura_demo to get realistic example payloads for the readiness, sleep and daily-summary tools, so your agent learns the data contract before any OAuth setup. All values are synthetic and tagged is_demo: true.

Call oura_demo and show me what the readiness and sleep data looks like.

Real output from oura_demo (response_format=json, dates are relative to today):

{
  "ok": true,
  "is_demo": true,
  "sample": {
    "oura_daily_summary": {
      "date": "2026-05-29",
      "readiness": { "score": 78, "temperature_deviation": -0.1, "hrv_balance": 84 },
      "sleep": { "score": 82, "efficiency": 89, "duration_min": 451, "deep_min": 92, "rem_min": 108 },
      "activity": { "score": 86, "steps": 9420, "active_calories": 412, "target_calories": 500 },
      "spo2": { "average": 96.8 }
    },
    "oura_wellness_context": {
      "window": "last_24h",
      "readiness_score": 78,
      "readiness_band": "good",
      "sleep_score": 82,
      "sleep_efficiency": 89,
      "hrv_balance": 84,
      "recommendation": "Solid readiness and efficient sleep — green light for moderate-to-high intensity. A protein-forward breakfast keeps HRV trending up."
    },
    "oura_list_daily_readiness": {
      "count": 3,
      "records": [
        { "day": "2026-05-29", "score": 78, "contributors": { "hrv_balance": 84, "resting_heart_rate": 71, "sleep_balance": 76 } },
        { "day": "2026-05-28", "score": 74, "contributors": { "hrv_balance": 79, "resting_heart_rate": 73, "sleep_balance": 72 } },
        { "day": "2026-05-27", "score": 69, "contributors": { "hrv_balance": 68, "resting_heart_rate": 80, "sleep_balance": 65 } }
      ]
    }
  },
  "notes": [
    "All sample data is synthetic; tagged with is_demo=true.",
    "Real calls return live data from the Oura Cloud v2 API after OAuth setup."
  ]
}

When you're ready to connect your own ring, call oura_quickstart for a personalized 3-step setup walkthrough, then follow Setup in 60 seconds.

Try it with your agent

Three things to ask first:

Use oura_connection_status to check setup, then run oura_daily_summary.
Give me a 5-line operating brief for today.
Call oura_weekly_summary with response_format=json. Identify my biggest
readiness/sleep bottleneck and give me a next-week plan.
Use the oura_daily_checkin prompt, focus=sleep.
Don't claim Oura can prove anything it can't.

Data availability

This package uses the official Oura Cloud API v2. When this README says raw, it means the upstream Oura JSON for a supported endpoint — not raw device sensor streams.

Data

Available

Notes

Daily readiness score + contributors

✓

Requires daily scope

Daily sleep score + sleep periods

✓

Requires daily and/or sleep scope

Sleep stages + timing

✓

When Oura returns scored sleep

Daily activity (steps, calories, MET)

✓

Requires daily scope

Heart-rate time series

✓

When ring/membership/scope expose it

HRV (overnight, via daily summaries)

✓

Surfaced through readiness contributors

SpO2 (daily averages during sleep)

✓

Requires spo2 scope; supported devices

Workouts + sessions + tags

✓

Requires workout/session/tag scopes

Personal info (DOB, sex, height, weight)

✓

Requires personal scope

Continuous sensor telemetry

—

Not exposed by Oura Cloud API

Tools

Start with these:

  • oura_demo — realistic synthetic readiness/sleep/activity payloads (no account needed; see Quickstart)

  • oura_quickstart — personalized 3-step setup walkthrough that adapts to your current state

  • oura_connection_status — verify local setup before calling Oura

  • oura_data_inventory — inventory supported data domains, scopes, privacy modes and recommended first calls without calling Oura APIs.

  • oura_daily_summary — readiness, sleep, activity and SpO2 brief for today

  • oura_weekly_summary — scorecard, comparison vs prior week, next-week plan

Auth & diagnostics

  • oura_capabilities, oura_agent_manifest, oura_privacy_audit, oura_cache_status

  • oura_get_auth_url, oura_exchange_code, oura_revoke_access

Profile

  • oura_get_personal_info

Daily collections (cursor-paginated with next_token, after/before filters and privacy-mode override)

  • oura_list_daily_readiness, oura_list_daily_sleep, oura_list_daily_activity, oura_list_daily_spo2

  • Offset ISO inputs keep their written calendar date when mapped to Oura's date-only start_date and end_date parameters; invalid dates fail before a network request.

  • Oura v2 has no integer page index. Resume with next_token from the previous response; if truncated is true, raise limit or set all_pages. See docs/pagination.md.

Detailed collections

  • oura_list_sleep, oura_list_workouts, oura_list_heartrate, oura_list_sessions, oura_list_tags

Prompts

  • oura_daily_checkin — practical daily health and readiness check-in

  • oura_weekly_review — review trends across activity, sleep and heart context

  • oura_heart_context_investigation — investigate heart-rate records (privacy-aware)

Resources

  • oura://capabilities, oura://agent-manifest

  • oura://personal-info

  • oura://latest/readiness — the single newest readiness record. Use this for "my latest readiness": Oura serves collections oldest-first with no sort parameter, so oura_list_daily_readiness with limit: 1 returns the oldest record in the window, not the newest.

  • oura://summary/daily, oura://summary/weekly

Privacy & security

  • OAuth tokens are stored in ~/.oura-mcp/tokens.json with 0600 permissions and are never returned by tools.

  • The server never prints access or refresh tokens.

  • OURA_PRIVACY_MODE defaults to structured. Raw Oura JSON is opt-in via raw mode or per-call override.

  • Structured mode preserves upstream physiological fields, including fields added by Oura later, while removing GPS and secret-bearing values.

  • Personal info (DOB, sex, height, weight) is only accessible when the user grants the personal scope.

  • The MCP client never sees access or refresh tokens.

  • This is not medical advice. The server exposes user-authorized data for personal AI workflows, not diagnosis or treatment.

Configuration

setup writes most of these into ~/.oura-mcp/config.json (0600). Manual env override is supported:

OURA_CLIENT_ID=…
OURA_CLIENT_SECRET=…
OURA_REDIRECT_URI=http://127.0.0.1:3000/callback

# Optional
OURA_SCOPES="daily heartrate personal workout spo2"
OURA_PRIVACY_MODE=structured        # summary | structured | raw
OURA_CACHE=sqlite                   # no effect: authenticated responses are never cached
OURA_TOKEN_PATH=~/.oura-mcp/tokens.json
OURA_CACHE_PATH=~/.oura-mcp/cache.sqlite

Hermes / remote setup

npx -y oura-mcp-unofficial setup --client hermes --no-auth
npx -y oura-mcp-unofficial auth                      # run locally if browser auth is needed
npx -y oura-mcp-unofficial doctor --client hermes
hermes mcp test oura

After Hermes config changes, use /reload-mcp or hermes mcp test oura. Don't restart the gateway for normal data access.

If browser OAuth has to happen on a different machine than Hermes, run auth locally and copy ~/.oura-mcp/tokens.json to the server with chmod 600.

Requirements

Development

git clone https://github.com/davidmosiah/oura-mcp.git
cd oura-mcp
npm install
npm test
npm run build

Test with MCP Inspector:

npx @modelcontextprotocol/inspector node dist/index.js

See also

The full Delx Wellness connector library:

One-command setup for Hermes — preconfigures every connector above plus wellness skills + onboarding: delx-wellness-hermes.

📧 Contact & Support

License

MIT — see LICENSE.

Disclaimer

This software is provided as-is. It is not a medical device, does not provide medical advice, and should not be used for diagnosis or treatment. Always consult qualified professionals for medical concerns.

Skill or MCP

Same package, two doors. MCP registers tools on stdio/HTTP. The skill can drive the same tools through the CLI when the client has no MCP:

npx -y oura-mcp-unofficial call oura_connection_status --json '{}'

Copy skill/SKILL.md into your agent skills dir.

Available Tools

27 tools
oura_agent_manifestOura Agent ManifestA
Read-onlyIdempotent

Machine-readable install, runtime and client guidance for AI agents. Does not call Oura or expose secrets.

Inputs: client, response_format. Returns: links, oauth, client, hermes, +9 more

oura_cache_statusOura Cache StatusB
Read-onlyIdempotent

Show optional local SQLite cache status. Enable with OURA_CACHE=sqlite or OURA_CACHE=true.

Inputs: response_format. Returns: path, enabled, entries, http_cache, +1 more

oura_capabilitiesOura MCP CapabilitiesA
Read-onlyIdempotent

Explain supported Oura data, privacy boundaries, recommended agent workflow and project links.

Inputs: response_format. Returns: links, creator, project, mcp_name, +8 more

oura_connection_statusOura Connection StatusA
Read-onlyIdempotent

Check local Oura config, token file, Node version, privacy mode, cache readiness and optional MCP client readiness without calling Oura or exposing secrets.

Inputs: client, response_format. Returns: ok, node, cache, oauth, +11 more

oura_daily_summaryOura Daily Recovery SummaryA
Read-onlyIdempotent

Build a practical daily summary from Oura readiness, sleep, activity, heart-rate and SpO2 data when available. Read-only and non-medical.

Inputs: days, timezone, response_format. Returns: kind, generated_at

oura_data_inventoryOura Data InventoryA
Read-onlyIdempotent

Inventory supported Oura data domains, auth scope requirements, privacy boundary and recommended first calls. Does not call Oura APIs or expose user data.

Inputs: response_format. Returns: auth, kind, links, notes, +12 more

oura_demoOura DemoA
Read-onlyIdempotent

Returns realistic example payloads of oura_daily_summary, oura_wellness_context, and oura_list_daily_readiness so agents see the contract before calling real Oura APIs.

Inputs: response_format.

oura_exchange_codeExchange Oura OAuth CodeA

Exchange an Oura OAuth authorization code for local tokens. Tokens are stored locally with 0600 permissions and are never returned. Requires explicit user action: the user must complete browser OAuth and supply the authorization code (agents must not invent codes).

Inputs: code (required), response_format. Returns: ok, note, scope, expires_at, +1 more

oura_get_auth_urlGet Oura OAuth URLA
Read-onlyIdempotent

Generate an Oura OAuth authorization URL. Use this first when no local token exists.

Inputs: state, scopes, response_format. Returns: scopes, auth_url, next_step, redirect_uri

oura_get_personal_infoGet Oura Personal InfoB
Read-onlyIdempotent

Get Oura personal profile fields available to the authorized app. Requires the personal scope.

Inputs: privacy_mode, response_format, explicit_user_intent. Returns: data, endpoint, privacy_mode

oura_list_daily_activityOura Daily ActivityA
Read-onlyIdempotent

List daily Oura activity summaries. Supports start/end date filters through after/before and Oura cursor pagination.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_daily_readinessOura Daily ReadinessB
Read-onlyIdempotent

List Oura readiness summaries and contributors. Requires daily scope. Not medical advice.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_daily_sleepOura Daily SleepB
Read-onlyIdempotent

List daily Oura sleep score summaries. Requires daily or sleep data access granted by the user. Not medical advice.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_daily_spo2Oura Daily SpO2A
Read-onlyIdempotent

List daily Oura SpO2 averages recorded during sleep when available. Requires spo2 scope. Not medical advice.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_heartrateOura Heart RateA
Read-onlyIdempotent

List Oura heart-rate time-series records where the user's ring and membership expose them. Requires heartrate scope. Not medical advice.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_sessionsOura SessionsA
Read-onlyIdempotent

List guided and unguided Oura app sessions when the user granted session scope.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_sleepOura Sleep PeriodsB
Read-onlyIdempotent

List detailed Oura sleep period records, including sleep stages and timing where available. Requires the daily scope (Oura has no separate sleep OAuth scope). Not medical advice.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_tagsOura TagsA
Read-onlyIdempotent

List user-entered Oura tags when the user granted tag scope.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_list_workoutsOura WorkoutsA
Read-onlyIdempotent

List Oura workout summaries. Requires workout scope.

Inputs: after, limit, before, all_pages, +5 more. Returns: count, records, endpoint, has_more, +4 more

oura_onboardingOura Onboarding (shared wellness profile)A
Read-onlyIdempotent

Return the 11-question Delx wellness onboarding flow (in English or pt-BR) plus the current shared profile state and missing critical fields. Read-only. The agent should ask these questions one-by-one, then call oura_profile_update with explicit_user_intent=true to save. The same profile is reused by every Delx Wellness connector (WHOOP, Garmin, Nourish, etc.) — agents can call the equivalent {connector}_onboarding tools to cover their respective domains, or rely on this one since all connectors share the same questions.

Inputs: locale, response_format.

oura_privacy_auditOura Privacy AuditB
Read-onlyIdempotent

Return local privacy, cache, token-path and env-presence posture without revealing secret values.

Inputs: response_format. Returns: notes, project, cache_path, token_path, +13 more

oura_profile_getOura Profile Get (shared wellness profile)B
Read-onlyIdempotent

Read the shared Delx wellness profile (~/.delx-wellness/profile.json). Returns the user's preferred name, body basics, goals, devices, training context, nutrition context, agent preferences, and missing critical fields. Cross-connector — the same profile is also available from other Delx Wellness MCPs (WHOOP, Garmin, Nourish, Fitbit, etc). Read-only.

Inputs: response_format.

oura_profile_updateOura Profile Update (shared wellness profile)A

Persist a partial patch to the shared Delx wellness profile (~/.delx-wellness/profile.json). REQUIRES explicit_user_intent=true. Top-level fields stored: profile (preferred_name, language, timezone, units, age_or_birth_year, height, weight, sex_or_gender_context), goals, devices, training, nutrition, preferences, safety, notes. NEVER stores OAuth tokens, API keys, refresh tokens, cookies, or any secret-shaped field — writes will be rejected at validation time. Cross-connector — the same profile is read by other Delx Wellness MCPs.

Inputs: patch (required), response_format, explicit_user_intent.

oura_quickstartOura QuickstartA
Read-onlyIdempotent

Personalized 3-step setup walkthrough for the human user. Adapts to current state (env vars set? token present? what's next?). Call this first when the user asks 'how do I connect Oura?'

Inputs: response_format.

oura_revoke_accessRevoke Oura OAuth AccessA
Destructive

Revoke the current Oura OAuth grant and delete the local token file. Use only when the user explicitly wants to disconnect Oura. Gated by explicit_user_intent: true (requires explicit user intent).

Inputs: response_format, explicit_user_intent. Returns: ok, note, token_path, local_tokens_cleared

oura_weekly_summaryOura Weekly Recovery ReviewA
Read-onlyIdempotent

Build a weekly Oura scorecard with readiness, sleep, activity, HRV availability, bottlenecks and actions. Read-only and non-medical.

Inputs: days, timezone, compare_days, response_format. Returns: kind, generated_at

oura_wellness_contextOura Wellness ContextA
Read-onlyIdempotent

Normalize Oura readiness, sleep and activity load into the shared wellness_context shape for recommendation engines.

Inputs: days, notes, soreness, timezone, +2 more. Returns: notes, source, soreness, generated_at, +2 more

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    B3.3/5.0

    Scored across 27 tools

    Disambiguation2/5

    Multiple tools have unclear boundaries: oura_capabilities, oura_data_inventory, oura_agent_manifest, and oura_quickstart all describe server capability/setup information, while oura_connection_status and oura_privacy_audit both report local config/privacy posture. The near-twin names oura_list_daily_sleep vs oura_list_sleep and oura_get_personal_info vs oura_profile_get are easily confused despite different underlying data.

    Naming Consistency3/5

    The consistent oura_ snake_case prefix and the repeated list_ verb for data retrieval tools provide some pattern, but the verb usage is mixed: two get_ tools, one update_/exchange_/revoke_, and a dozen noun-only names (oura_capabilities, oura_demo, oura_onboarding, oura_quickstart). Resource naming is also inconsistent — daily_activity, daily_sleep, daily_readiness, daily_spo2 use the daily_ prefix while sleep, heartrate, workouts, sessions, tags do not, even though they share the same collection semantics.

    Tool Count2/5

    At 27 tools, the count is too high for the apparent scope. Eight of them (quickstart, connection_status, data_inventory, agent_manifest, capabilities, demo, privacy_audit, cache_status) are meta/setup tools with substantial functional overlap and could be consolidated into two or three. The ten data-domain tools are justified by Oura's API breadth, but the inflated meta cluster pushes the total past reasonable bounds.

    Completeness3/5

    The auth lifecycle (get_auth_url, exchange_code, revoke_access), shared profile read/write, and read access to most major Oura domains are well covered, and the daily/weekly summary tools add helpful derived value. However, standard Oura endpoints for daily resilience, daily stress, daily HRV, and tag creation (POST) are missing, so agents answering questions in those domains will hit dead ends with no workaround.

    Maintenance

    ActivityActive
    ResponsivenessOutdated data

    Related MCP Connectors

    Related MCP Servers