Back to MCP Directory

Oura

Model Context Protocol moderate risk

Oura

The Oura MCP server provides language models with access to Oura ring data, including sleep, readiness, and resilience metrics, via API calls.

Connections & Capabilities

Connects To

GitHub

Capabilities

read

Quickstart

Config

{
    "mcpServers": {
        "oura": {
            "command": "uvx",
            "args": [
                "oura-mcp-server"
            ],
            "env": {
                "OURA_API_TOKEN": "YOUR_OURA_API_TOKEN"
            }
        }
    }
}

Exposed MCP Tools (6)

safe

get_sleep_data

Retrieves sleep data for a specified date range from the Oura API.

Read-only operation; retrieves data without modifying anything.

safe

get_readiness_data

Fetches readiness data for a given date range from the Oura API.

Read-only operation; retrieves data without modifying anything.

safe

get_resilience_data

Obtains resilience data for a specified date range from the Oura API.

Read-only operation; retrieves data without modifying anything.

safe

get_today_sleep_data

Retrieves sleep data for the current day from the Oura API.

Read-only operation; retrieves data without modifying anything.

safe

get_today_readiness_data

Fetches readiness data for the current day from the Oura API.

Read-only operation; retrieves data without modifying anything.

safe

get_today_resilience_data

Obtains resilience data for the current day from the Oura API.

Read-only operation; retrieves data without modifying anything.

Safety Assessment

This server is relatively safe due to its read-only nature and reliance on Oura's API for authentication. However, the security of the Oura API token is critical. Ensure the token is stored securely and not exposed in logs or configuration files.

Read-only access to Oura data.
No direct write or delete operations.
Relies on Oura's API authentication for security.
Limited scope of data access (sleep, readiness, resilience).

Requires an Oura API token, which needs secure handling.
Potential for information leakage if the API token is compromised.
Dependence on the security of the Oura API.
No sandboxing implemented, relies on the security of the execution environment.