Our grade: 4 checks
Unofficial login It signs in to your own account at another platform the way the platform's app does, not through an official API, so the platform can block it at any time. That would cap the grade at C even if the four checks scored higher. Read the page that says so · Why we cap it
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 3
- 4 6
- 3 3
- 2 2
- 1 0
Trust in production
- Trust it - 50%
- With caveats - 50%
- Wouldn't - 0%
64% would recommend this server
How reviewers scored it
- Setup & docs 3.4
- Auth experience 3.5
- Reliability 3.6
- Maintainer responsiveness 3.7
Why it got a C
A community MCP server for Garmin Connect (MIT, Python, about 1.5K GitHub stars). It uses the unofficial python-garminconnect library, so it signs in the way the Garmin Connect app does: you type your Garmin email, password and MFA code once into garmin-mcp-auth, and it keeps the session tokens in ~/.garminconnect. That means the AI can see your health data: sleep, heart rate, HRV, stress, weight, body composition and every activity with its GPS track. Around 155 tools load by default, including writes: renaming and editing activities, logging weigh-ins, uploading and scheduling workouts, and deleting an activity after a second confirm call. GARMIN_TOOL_PROFILE (for example health) or GARMIN_ENABLED_TOOLS cuts the list down. Install it from GitHub as the README shows; the PyPI package called garmin-mcp belongs to someone else. One dependency advisory is open: the pinned garminconnect 0.3.2 (CVE-2026-54447, fixed in 0.3.5) saved tokens world-readable, though this server restricts the token files to the owner after login. Unofficial login: python-garminconnect calls itself an unofficial client that signs in the way the Garmin Connect app does, so Garmin can block it at any time, and that would keep the grade capped at C even once the advisory is fixed. Biggest deduction: there's no scoped or read-only login, so the saved tokens give the server full access to your Garmin account and health history; keep the token folder private, and changing your Garmin password ends the session.
How to connect
// claude_desktop_config.json (README; run garmin-mcp-auth first)
{ "mcpServers": { "garmin": { "command": "uvx",
"args": ["--python", "3.12", "--from",
"git+https://github.com/Taxuspt/garmin_mcp", "garmin-mcp"] } } }Is Garmin MCP Server (garmin_mcp) safe?
Is Garmin MCP Server (garmin_mcp) safe to use?
Garmin MCP Server (garmin_mcp) grades C (usable with care). Unofficial login: it signs in to your own account at another platform the way the platform's app does, not through an official API, so the platform can block it at any time. That would cap the grade at C even if the four checks scored higher. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. It has 1 open CVE. Check the advisories before you install. It runs locally over stdio, so it acts with your machine's access.
Does Garmin MCP Server (garmin_mcp) have known vulnerabilities?
Yes, 1 open CVE in our data. The listing above explains what they affect and what to run instead.
Does Garmin MCP Server (garmin_mcp) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Docs & Knowledge
- A Context7 MCPPulls version-accurate library documentation into the model context.
- B Stack Overflow MCP ServerOfficial hosted Stack Overflow server (beta) to search questions and answers.
- B Zotero MCP (zotero-mcp-server)A community MCP server for your Zotero library, run locally from PyPI, to search, read and annotate papers, add items by DOI or BibTeX, and manage collections and tags.
- C AIOS Public Discovery MCP ServerHosted server that checks the status, recent changes and source evidence of five monitored GOV.UK employment guidance topics, including minimum wage and statutory sick pay.
- C AWS Knowledge MCP ServerAWS's hosted read-only server for AWS docs, API references, regional availability and agent skills.
Embed this badge
[](https://trustedmcp.io/servers/garmin-mcp)<a href="https://trustedmcp.io/servers/garmin-mcp"><img src="https://trustedmcp.io/badge/garmin-mcp.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Works, just lock it down
Good for experimenting, still deciding about production. Scoped the token to just what the agent needs and it respected that. Worth it, just do not skip the hardening steps.
Used for Drafting docs from existing pages
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Recommended it to two teams already
Replaced a homegrown script with Garmin MCP Server (garmin_mcp) and have not looked back. Narrowing the scopes took ten minutes and made me much happier running it. Updates land regularly, and nothing broke when I upgraded.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Our team uses it every day
Set this up for our team after comparing a few options. Sign-in flow was painless and I never had to paste a key into a config file. Would recommend without hesitation.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Would not run this unattended
It works in a demo, but things got shaky under real use. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. I would use it in prod, but only with a human approving writes.
Used for Answering questions from our internal wiki
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 1/5
- Maintainer responsiveness 2/5
The Garmin (garmin_mcp) integration I wanted
Been running this for about a month now. Read-only mode is the first thing I enable, and it covers most of what I need. Scoped the token to just what the agent needs and it respected that. It is in our production agent and I sleep fine.
Used for Keeping a team knowledge base tidy
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Does what it says, no drama
Installed it on a Friday, it was part of my workflow by Monday. Sign-in flow was painless and I never had to paste a key into a config file. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Turned on read-only mode on day one, highly recommend doing the same. Easy recommendation.
Used for Finding the right runbook during incidents
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Struggled to get it stable
Not what I expected from the description. Releases come often and the changelog is clear. Sign-in flow was painless and I never had to paste a key into a config file. Keep permissions tight and it is a good tool.
Used for Onboarding Q&A for new hires
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 2/5
Worth the five minutes to set up
Hooked Garmin MCP Server (garmin_mcp) into Claude Code and it worked on the first try. You can tell it is actively maintained, the rough edges keep getting fixed. Auth is handled properly, and revoking access later was one click. Good choice if you need Garmin (garmin_mcp) in your agent.
Used for Drafting docs from existing pages
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Simple to set up in Cursor, simple to reason about. You can tell it is actively maintained, the rough edges keep getting fixed. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Happy to run it in production.
Used for Onboarding Q&A for new hires
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
It does the job, but it took some tweaking. Filed an issue and got a reply within two days. Sign-in flow was painless and I never had to paste a key into a config file. Fine in production if you sandbox it.
Used for Finding the right runbook during incidents
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Tried it on a side project first, then rolled it out at work. Read-only mode is the first thing I enable, and it covers most of what I need. Recommended, with sensible guardrails.
Used for Summarising meeting notes
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Promising, a bit raw
Mostly reliable, with the odd timeout. Auth is handled properly, and revoking access later was one click.
Used for Keeping a team knowledge base tidy
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Exactly what I needed from Garmin (garmin_mcp)
Started with it as an experiment, now it is a fixture. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Would recommend without hesitation.
Used for Summarising meeting notes
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
Clear tool names, sensible outputs, very few surprises. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Answering questions from our internal wiki
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.