← Back to search
oura-ring-mcp
MCP server for Oura Ring data with smart analysis tools
npm
D
40 / 100
Versions
0.1.4latestJan 25, 2026
0.1.3Jan 25, 2026
0.1.2Jan 25, 2026
0.1.1Jan 25, 2026
0.1.0Jan 25, 2026
0.1.4latestfirst seen Jul 21, 2026
0.1.2first seen Jun 5, 2026
Tools 0
No tools indexed yet.
Permissions 0
No permissions indexed yet.
Scan Findings 74
low
Tool 'get_sleep' has no annotations
low
Tool 'get_readiness' has no annotations
low
Tool 'get_activity' has no annotations
low
Tool 'get_stress' has no annotations
low
Tool 'get_daily_sleep' has no annotations
low
Tool 'get_heart_rate' has no annotations
low
Tool 'get_workouts' has no annotations
low
Tool 'get_spo2' has no annotations
low
Tool 'get_vo2_max' has no annotations
low
Tool 'get_resilience' has no annotations
low
Tool 'get_cardiovascular_age' has no annotations
low
Tool 'get_tags' has no annotations
low
Tool 'get_enhanced_tags' has no annotations
low
Tool 'get_sessions' has no annotations
low
Tool 'detect_anomalies' has no annotations
low
Tool 'analyze_sleep_quality' has no annotations
low
Tool 'correlate_metrics' has no annotations
low
Tool 'compare_periods' has no annotations
low
Tool 'compare_conditions' has no annotations
low
Tool 'best_sleep_conditions' has no annotations
low
Tool 'analyze_hrv_trend' has no annotations
low
Tool 'analyze_adherence' has no annotations
low
Tool 'get_sleep_time' has no annotations
low
Tool 'get_rest_mode' has no annotations
low
Tool 'get_ring_info' has no annotations
low
Tool 'get_personal_info' has no annotations
low
Tool 'analyze_temperature' has no annotations
high
Hardcoded OAuth client secret in mitchhankins01-oura-ring-mcp-347624e/src/index.test.ts
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.3 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68)
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp)
info
package.json metadata
info
Tool: get_sleep
info
Tool: get_readiness
info
Tool: get_activity
info
Tool: get_stress
info
Tool: get_daily_sleep
info
Tool: get_heart_rate
info
Tool: get_workouts
info
Tool: get_spo2
info
Tool: get_vo2_max
info
Tool: get_resilience
info
Tool: get_cardiovascular_age
info
Tool: get_tags
info
Tool: get_enhanced_tags
info
Tool: get_sessions
info
Tool: detect_anomalies
info
Tool: analyze_sleep_quality
info
Tool: correlate_metrics
info
Tool: compare_periods
info
Tool: compare_conditions
info
Tool: best_sleep_conditions
info
Tool: analyze_hrv_trend
info
Tool: analyze_adherence
info
Tool: get_sleep_time
info
Tool: get_rest_mode
info
Tool: get_ring_info
info
Tool: get_personal_info
info
Tool: analyze_temperature
info
Transport: stdio
info
Required env vars (9)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 15 components
high
Authorization Bearer Token found in mitchhankins01-oura-ring-mcp-347624e/CLAUDE.md
high
Authorization Bearer Token found in mitchhankins01-oura-ring-mcp-347624e/README.md
critical
AWS Access Key ID found in mitchhankins01-oura-ring-mcp-347624e/docs/reference/oura_ring_gen_3.ipynb
medium
No build provenance detected (SLSA L0)