No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by cygnusb · MCP Server · ★ 121
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is coros-mcp safe to install? View the security audit →
coros-mcp A Model Context Protocol (MCP) server that fetches sleep, HRV, and training data from the unofficial Coros API and exposes them to AI assistants like Claude. No API key required. This server authenticates directly with your Coros Training Hub credentials. Your token is stored securely in your system keyring (or an encrypted local file as fallback), never transmitted anywhere except to Coros. What You Can Do Ask your AI assistant questions like: "How much deep sleep and REM did I get last week?" "What was my HRV trend over the last 4 weeks?" "Show me my resting heart rate and training load for last week" "How many steps did I average per day this month?" "List my rides from last month" "Show me the details of my last long ride" "Create a 90-minute sweet spot workout for me" "What's on my training calendar next week?" "Schedule my VO2 workout for Thursday" "Create a 20-minute strength circuit with squats, lunges, and planks" Features
| Stars | 121 |
| Forks | 33 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 74.8061971439606/100 |
| Open Issues | 4 |
| Last Updated | 2026-10-02 |
| Created | 2026-03-04 |
| Platforms | claude-code, mcp, python |
| Est. Tokens | ~18k |
These tools work well together with coros-mcp for enhanced workflows:
Looking for a coros-mcp alternative? If you're comparing coros-mcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organ
This is the public release of MIRA OS. Discrete memories decay through momentum loss, tools auto-configure whe
MCP Server for Tree-sitter
Code search MCP for Claude Code. Make entire codebase the context for any coding agent. Embeddings are created
Universal development automation for ANY project. Claude Code implements features, runs tests, creates PRs aut
K8s-mcp-server is a Model Context Protocol (MCP) server that enables AI assistants like Claude to securely exe
Explore other popular mcp server tools:
coros-mcp is MCP server for AI assistants to read and manage Coros fitness data: sleep, HRV, daily metrics, activities, and structured workouts via the unofficial Coros API. It is categorized as a MCP Server with 121 GitHub stars.
coros-mcp is primarily written in Python. It covers topics such as ai-assistant, claude, coros.
You can find installation instructions and usage details in the coros-mcp GitHub repository at github.com/cygnusb/coros-mcp. The project has 121 stars and 33 forks, indicating an active community.
coros-mcp is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to coros-mcp on Agent Skills Hub include hevy-mcp, mira-OSS, mcp-server-tree-sitter. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: