"Security vulnerabilities in MCP Server related to subprocess execution" matching MCP servers:

MyChart MCP Server

An AI recipe recommendation server based on the MCP protocol, providing functions such as recipe query, classification filtering, intelligent dietary planning, and daily menu recommendation.

Enables AI agents to search foods, get nutritional breakdowns, and estimate exercise calories using the Nutritionix API through natural language input.

Enables Claude to access and analyze Whoop health data including recovery, sleep, strain, and workouts through a custom MCP connector.

Enables AI assistants to answer food safety and shelf-life questions using USDA-grade data, with tools for shelf life, safety checks, storage tips, and waste cost calculations.

Provides read-only access to Oura ring biometrics via the Oura API, enabling Claude to query daily summaries, sleep, readiness, stress, workouts, baselines, and heart rate data. Designed to complement a Strava connector for joint analysis of training and recovery.

Brings Enneagram, MBTI, Big Five and 18 more frameworks into Claude, ChatGPT and any MCP client. Includes whole-team reads, meeting prep, 'who should lead this?', an assessment you can take inside the chat, pair compatibility scores, private notes and invite links. Work-safe by default: details are withheld in business contexts. OAuth sign-in keeps every call safely scoped to your EQIQs account.

A read-only MCP server that gives Claude Desktop access to your Garmin Connect data — daily health metrics, sleep, activities, training status, and body composition.

Enables AI agents to analyze synthetic biomarker panels via Phi Longevity's PRISM clinical recommendation engine, providing tiered, guideline-cited recommendations. Also offers tools to list supported biomarkers and retrieve methodology.

Real-time human state awareness for AI agents. Fuses cardiovascular, vocal, visual, and textual signals into a unified stress score (0-100). Streamable HTTP transport with 4 tools: ingest_signal, get_human_state, get_history, delete_subject.

MCP server that enables AI assistants to access Whoop health data including recovery, sleep, workouts, and daily strain for personalized health recommendations.

MCP server to read daily activity, sleep, heart rate, and body metrics from Google Health API, allowing AI assistants like Claude to access your health data. Optionally syncs health metrics to an Obsidian vault.

MCP server for the Oura Ring API v2, enabling natural language queries about sleep, readiness, activity, heart rate, and more.

Enables Claude to access your personal Strava data read-only, including activities, splits, heart-rate and pace streams, zones, and lifetime totals, so it can coach from real training without manual exports.

A local-first, read-only MCP server that provides compact recovery, sleep, strain, HRV, heart-rate, workout, and body-measurement data from WHOOP without sending credentials to a third party.

MCP server for managing food diary, nutrition tracking, meal planning, and weight logging via the FatSecret Platform API.

Enables Claude to access Abbott Freestyle Libre CGM data from multiple providers (LibreView, Terra, Thryve) to retrieve current glucose, history, and summaries via natural language.

Provides skincare product recommendations, ingredient conflict checks, and product lookups based on skin type and concerns.

Provides access to Danish food and nutrition data from Open Food Facts and DTU Frida, enabling keyword search, barcode lookup, and detailed food information with per-100g macros and source attribution.

Enables lookup, search, browsing, and explanation of WHO's International Classification of Functioning, Disability and Health (ICF) codes and qualifiers via the WHO ICD-API.