"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

Enables MCP clients to connect to a privacy-first, self-hostable workout planning and training log, allowing coaching agents to preview and apply program changes while accessing training data through OAuth-protected endpoints.

Gives Claude read-only access to your own ring's health data — sleep, readiness, HRV, heart rate, activity, workouts, stress, resilience, SpO2, VO2 max and cardiovascular age — from claude.ai, desktop, and mobile. Runs as a private remote server on your own Cloudflare Worker, locked to a single account with OAuth-encrypted tokens and no stored health data.

Enables Claude and other MCP apps to query the user's own activity and health data—sleep, HRV, Body Battery, stress, heart rate, steps, and workouts—locally and read-only.

Provides local, Keychain-secured access to all 26 Garmin Connect Personal API GET endpoints plus 8 summary tools. Enables users to query sleep, HRV, Body Battery, activities, profile, weight, and other connected health data through their own Personal API key.

Connects WHOOP fitness data to Poke AI assistant, enabling natural language queries for recovery scores, sleep analysis, strain tracking, and healthspan metrics.

Enables Claude to access and analyze your Strava activities through OAuth authentication. Supports retrieving activity lists and detailed workout data for fitness tracking and analysis.

MCP server for tracking nutrition meals and workouts, integrating with claude.ai to manage food logs, macros, exercise catalogs, and generate daily/weekly summaries.

Enables AI agents like Claude Desktop, Cursor, and VS Code to connect directly to COLMI R02/R03 and compatible smart rings over local Bluetooth LE, exposing tools for ring scanning, battery and firmware status, activity and sleep/recovery insights, real-time heart rate and SpO2 vitals, 3-axis motion sampling, clock sync, and physical LED blinking. Runs fully locally with no vendor cloud, accounts, or subscriptions.

Enables Claude to read a user's Oura Ring data—including sleep, readiness, activity, stress, workouts, heart rate, and personal info—through a self-hosted, read-only connector deployed to the user's own Vercel account.

Enables Claude to act as a personal health coach by connecting to Garmin wearable data and Notion workspace for automated calorie tracking, photo food logging, and coaching insights.

Enables AI apps to query a user's Google Health data—such as sleep, heart rate, HRV, activity, and paired devices—through read-only tools deployed privately in the user's own Firebase project.

Exposes over 90 Garmin Connect tools for tracking activities, health metrics, and training data through the Model Context Protocol. It is optimized for Poke compatibility and supports deployment to Render via HTTP.

Provides a unified MCP interface to a personal health database, enabling AI agents to sync lifting workouts from Hevy, log food intake against a catalog, and run read-only SQL queries to cross-reference training and nutrition data.

Minimalist Strava integration for Claude with 7 focused tools for querying athlete stats, activities, zones, and segment analysis.

This server lets Claude, Cursor, or any MCP client read a user's own health and fitness data through 26 read-only tools for activities, sleep, HRV, Body Battery, stress, steps, heart rate, weight, nutrition, and women's health. It connects via the official Personal API and can be self-hosted for free on Vercel.

Exposes Strava training data to Claude for coaching, planning, and analysis via a read-only MCP server with OAuth and Docker support.

Enables MCP clients to query AimHarder for authenticated account context, discover accessible gyms, and select a gym for queries.

A stateless MCP server that exposes tools for evidence-based strength training, including classical powerlifting programs and fatigue management.

An MCP server for the Polar AccessLink API. Connect your Polar fitness data to Claude AI - access workouts, sleep analysis, recovery metrics, heart rate data, and more.

MCP server for the Hevy fitness tracking app, enabling management of workouts, routines, exercise templates, folders, and webhooks through AI assistants.

Enables Claude Desktop and Claude Code to read locally synced Fitbit Air health data — scores, trends, sleep, activity, running and body age — run read-only SQL against it, and keep a journal and coach notes on the user's Mac. It also offers profile edits, a refresh tool, and guided prompts such as morning check-ins, weekly reviews, race planning and score explanations.

A production-ready MCP server for the Hevy fitness API that exposes 27 tools for reading, writing, and analyzing workout data, enabling LLM-driven personal trainer workflows.

A local, read-only Model Context Protocol server for an athlete's Strava profile and activities, enabling retrieval of profile data, activity lists (with paging and date filters), and detailed activity information via standard input/output for MCP hosts.

Enables MCP clients to query locally computed recovery, strain, sleep, workout, and heart-rate data from a personal SQLite database, with tools for daily and sleep summaries, workout details, heart-rate buckets, schema inspection, reports, sync, and read-only SQL.

Enables Claude to ingest a local Samsung Health export into DuckDB and query monthly trends, period comparisons, trips, sleep timing, activity profiles, workouts, and custom read-only SQL while keeping raw data on the user's machine. It also generates a dashboard artifact with actionable next steps based on the user's aggregates.

Enables AI assistants to read training, sleep, recovery, nutrition, body composition, race and goal data, and with permission write workouts, daily targets, meal plans, logged meals and notes. Also supports checking for updates since the last look.

HYBRD manage your wearables connection, is a system of record for your training plan / completed workouts, and steers LLMs towards giving better fitness coaching

Enables MCP-compatible AI clients to read and write wearable data through Whoop's private iOS API, covering recovery, sleep, strain, journal, strength training, live heart rate, and more via 55 tools. Write operations default to a preview gate requiring explicit confirmation.

MCP server integrating Foodvisor nutrition API for food search, meal logging, daily summaries, and progress tracking via LLM agents like Claude.

Provides comprehensive access to Strava API for marathon training and race analysis, enabling language models to query athlete data, analyze training patterns, track performance metrics, monitor heart rate zones, and detect injury risks.