
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
musclesworked-mcp
Advanced tools
MCP server for the musclesworked.com exercise-to-muscle mapping API.
Connects Claude Desktop, Claude Code, Cursor, and other MCP clients to 856 exercises and 65 muscles with detailed primary/secondary/stabilizer activation data across 14 muscle groups.
Get an API key at musclesworked.com/dashboard.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp"],
"env": {
"MUSCLESWORKED_API_KEY": "mw_live_..."
}
}
}
}
claude mcp add musclesworked -- npx -y musclesworked-mcp --api-key mw_live_...
Or add to .mcp.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp", "--api-key", "mw_live_..."]
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp"],
"env": {
"MUSCLESWORKED_API_KEY": "mw_live_..."
}
}
}
}
| Tool | Description |
|---|---|
get_muscles_worked | Get primary, secondary, and stabilizer muscles for an exercise |
find_exercises | Find exercises targeting a specific muscle with optional filters |
analyze_workout | Analyze a workout for coverage, gaps, and imbalances |
get_alternatives | Find alternative exercises ranked by muscle overlap |
search_exercises | Search exercises by name to discover IDs |
search_muscles | Search muscles by name to discover IDs |
| Option | Description |
|---|---|
--api-key <key> | API key (or set MUSCLESWORKED_API_KEY env var) |
MUSCLESWORKED_API_URL | Override base URL (default: https://musclesworked.com) |
git clone https://github.com/csjoblom/musclesworked-mcp.git
cd musclesworked-mcp
npm install
npm run build
# Test with MCP Inspector
MUSCLESWORKED_API_KEY=mw_live_... npx @modelcontextprotocol/inspector node dist/index.js
MIT
FAQs
MCP server for the musclesworked.com exercise-to-muscle mapping API
The npm package musclesworked-mcp receives a total of 39 weekly downloads. As such, musclesworked-mcp popularity was classified as not popular.
We found that musclesworked-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.