Oura Ring Mcp Server

io.github.jordanburkePublished by GitHub account jordanburkev0.2.0Updated Oct 24, 2026

Oura Ring MCP server for the Oura API v2: sleep, readiness, activity, heart rate, and more.

VerifiedSTDIODesktop onlyLocation & LifestyleData & Analytics

Overview

AI-generated overview

Lets an assistant read Oura Ring sleep, readiness, activity, heart rate, and workout data through a single consolidated tool.

What you can do
Exposes one consolidated oura_data tool with a collection parameter covering Oura API v2 usercollection endpoints: daily activity, sleep, readiness, SpO2, stress, resilience, cardiovascular age, vO2 max, sessions, workouts, tags, rest mode periods, heart rate, ring battery level, ring configuration, and personal info. Parameters include date or datetime ranges, latest-sample, document id, pagination cursor, and sparse fieldsets. It validates parameters per collection and returns actionable errors.
When to use it
Useful when you want an assistant to answer questions about your own Oura data, such as average readiness last week, sleep stages for a given night, the most recent heart rate reading, or workout counts and durations.
Requirements
Runs locally over stdio via the npm package; Node.js 24 or newer. Needs an Oura OAuth2 application: OURA_CLIENT_ID and OURA_CLIENT_SECRET, plus a one-time login command that opens a browser and writes tokens to a local token store. A legacy OURA_API_KEY personal access token is an alternative. Optional httpStream transport uses PORT and HOST.
Before you install
Requires Oura OAuth2 credentials OURA_CLIENT_SECRET and OURA_CLIENT_ID, and stores refresh tokens on disk; refresh tokens are single-use and rotated by the server. The default scope set requests broad read access including email, personal, heartrate, and heart health. The server only reads Oura data; it does not write. Optional telemetry can be written to a file or console.

Installation

In SourceWeft

  1. Open Oura Ring Mcp Server in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

oura-ring-mcp-server

[Node.js CI] [npm version] [License: MIT]

A Model Context Protocol server for the Oura Ring API v2. Point Claude (or any MCP client) at your Oura data and ask about your sleep, readiness, activity, heart rate, workouts, and more.

Built with somamcp (telemetry + introspection), functype (typed error handling), and zod.

Design

Rather than one tool per endpoint, the server exposes a single consolidated oura_data tool with a collection parameter. This keeps the tool schema small (low token cost) while covering every Oura usercollection endpoint. The tool validates that the parameters you pass are legal for the chosen collection and returns actionable messages when they are not.

Requirements

  • Node.js 24+ (pinned in .nvmrc)

  • An Oura OAuth2 application — register one at cloud.ouraring.com/oauth/applications to get a client ID and secret. Set the redirect URI to http://localhost:8080/callback and enable the read scopes you want. The default requests the full set — email personal daily heartrate tag workout session spo2 ring_configuration stress heart_health — so every collection works (heart_health in particular gates vO2_max and daily_cardiovascular_age).

    Oura stopped issuing new personal access tokens in December 2025, so OAuth2 is the path for new setups. A previously-issued PAT still works — see Authentication.

Authentication

The server authenticates to Oura with an OAuth2 access token that it refreshes automatically. You authorize once with the built-in login command:

bash
# with OURA_CLIENT_ID and OURA_CLIENT_SECRET set in the environmentnpx -y oura-ring-mcp-server login

This opens your browser for consent, captures the redirect on http://localhost:8080/callback, and writes the tokens to ~/.config/oura-ring-mcp/tokens.json (override with OURA_TOKEN_STORE). Oura refresh tokens are single-use, so the server owns and rotates them in that store from then on — you never put a refresh token in your environment. The MCP server reads the store on startup; re-run login only if the refresh token is ever revoked.

Legacy PAT: if you still have a valid personal access token, set OURA_API_KEY instead and skip the OAuth setup. When both are configured, OAuth takes precedence.

Usage

Claude Desktop / Claude Code

Add to your MCP client config (e.g. claude_desktop_config.json):

json
{  "mcpServers": {    "oura": {      "command": "npx",      "args": ["-y", "oura-ring-mcp-server"],      "env": {        "OURA_CLIENT_ID": "your-oauth-client-id",        "OURA_CLIENT_SECRET": "your-oauth-client-secret"      }    }  }}

That runs the server over stdio, which is what most MCP clients expect. Run login once first (see Authentication) so the token store exists.

Configuration

Env varRequiredDefaultDescription
OURA_CLIENT_IDfor OAuth—Oura OAuth2 client ID.
OURA_CLIENT_SECRETfor OAuth—Oura OAuth2 client secret.
OURA_API_KEYfor legacy PAT—Legacy personal access token (Bearer). Alternative to the OAuth pair.
OURA_REDIRECT_URInohttp://localhost:8080/callbackRedirect URI for login; must match the Oura app registration.
OURA_SCOPESnofull read set (see Requirements)Space-separated scopes requested during login.
OURA_TOKEN_STOREno~/.config/oura-ring-mcp/tokens.jsonPath to the OAuth token store.
OURA_SANDBOXnofalseUse Oura's /sandbox/ demo data instead of your real data.
TRANSPORT_TYPEnostdiostdio or httpStream.
PORTno3000Port for httpStream transport.
HOSTno0.0.0.0Host for httpStream transport.
OURA_TELEMETRY_FILEno—Write NDJSON telemetry events to this file path (safe under any transport).
OURA_TELEMETRY_CONSOLEnotrueConsole telemetry, httpStream only (never enabled under stdio).

HTTP transport

For a long-running / networked deployment:

bash
OURA_CLIENT_ID=... OURA_CLIENT_SECRET=... TRANSPORT_TYPE=httpStream PORT=3000 npx -y oura-ring-mcp-server

The MCP endpoint is served at /mcp; somamcp also exposes a public GET /health probe.

The oura_data tool

ParameterApplies toNotes
collectionallWhich data collection to fetch (see below).
start_date / end_datedaily collectionsYYYY-MM-DD. Omitted → last 7 days.
start_datetime / end_datetimeheartrate, ring_battery_levelISO-8601. Omitted → last 24 hours.
latestheartrate, ring_battery_levelReturn only the most recent sample.
document_idcollections with a detail routeFetch a single record by id.
next_tokenlist collectionsPagination cursor from a previous response.
fieldslist collectionsComma-separated sparse fieldset.

Collections

Daily (start_date/end_date): daily_activity, daily_sleep, daily_readiness, daily_spo2, daily_stress, daily_resilience, daily_cardiovascular_age, vO2_max, sleep, sleep_time, session, workout, tag, enhanced_tag, rest_mode_period

Time-series (start_datetime/end_datetime): heartrate, ring_battery_level

List / singleton: ring_configuration, personal_info

Example prompts

  • "What was my average readiness score last week?"
  • "Show my sleep stages for the night of 2026-06-20."
  • "Get my most recent heart rate reading."
  • "How many workouts did I log this month and how long were they?"

Development

bash
pnpm installpnpm validate   # format + lint + typecheck + test + buildpnpm dev        # watch buildpnpm inspect    # run against the MCP Inspector

Try it without a ring by setting OURA_SANDBOX=true to hit Oura's demo dataset.

License

MIT

Source: README.md at commit 8e5e956

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts