
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
health-analyzer-mcp
Advanced tools
Apple Health data for AI agents — expose your Apple Health / HealthKit data to Claude, Cursor, and other MCP clients via the Health Data AI Analyzer Mac app. All data stays local.
Apple Health data for AI agents: an MCP server that gives Claude, Cursor, OpenClaw, and any other MCP client read-only access to your Apple Health / HealthKit data through the Health Data AI Analyzer Mac app. All data stays local on your Mac.
The numbers this server returns match the Apple Health app. Health data exported from HealthKit is messy: the same step count or heart-rate sample is often recorded by both your iPhone and your Apple Watch, and different sources report in different units. The Health Data AI Analyzer Mac app (1.996+) de-duplicates overlapping samples across your iPhone and Apple Watch and unit-corrects every metric, so a question like "how many steps did I take last week?" returns the same figure you'd see in Apple Health — not an inflated double-count.
npm install -g health-analyzer-mcp
Or install from source:
cd mcp-server
npm install
npm link
Add to your MCP client config (e.g., OpenClaw or Claude Desktop):
{
"mcpServers": {
"health-analyzer": {
"command": "health-analyzer-mcp"
}
}
}
For OpenClaw workspace skills, you can also keep the skill folder from this repo in your workspace:
skills/health-analyzer-mac-local/
That skill assumes this MCP server is installed and available as health-analyzer-mcp.
The MCP server reads the local API token automatically from:
~/Library/Application Support/Health Data AI Analyzer/local-api-token.txt
For the sandboxed App Store build, it will also search the container path automatically, for example:
~/Library/Containers/com.rumjahn.healthkitanalyzer/Data/Library/Application Support/Health Data AI Analyzer/local-api-token.txt
You can override it with:
HEALTH_ANALYZER_TOKEN=...
HEALTH_ANALYZER_TOKEN_FILE=/absolute/path/to/local-api-token.txt
| Tool | Description |
|---|---|
get_status | Check whether the local API is running and a dataset is loaded |
list_metrics | Check what health data is loaded |
get_health_summary | Overview of all metrics |
get_daily_health_brief | Daily overview with sleep, steps, workouts, and recovery context |
get_steps | Step counts and averages |
get_sleep | Sleep duration and stages |
get_heart_rate | Heart rate, resting HR, and HRV trends |
get_hrv | Heart rate variability |
get_weight | Weight measurements |
get_workouts | Workout history |
get_vo2max | VO2 max fitness level |
"Cannot connect to Health Data AI Analyzer"
Local API section shows RunningHEALTH_ANALYZER_TOKEN_FILE to the token file path shown in app SettingsTools not showing up
health-analyzer-mcp is in your PATHFAQs
Apple Health data for AI agents — expose your Apple Health / HealthKit data to Claude, Cursor, and other MCP clients via the Health Data AI Analyzer Mac app. All data stays local.
We found that health-analyzer-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.