
Research
Security News
The Landscape of Malicious Open Source Packages: 2025 Mid‑Year Threat Report
A look at the top trends in how threat actors are weaponizing open source packages to deliver malware and persist across the software supply chain.
A Model Context Protocol (MCP) server that provides access to the Strava API. It allows language models to query athlete activities data from the Strava API.
The server exposes the following tools:
get_activities(limit: int = 10)
: Get the authenticated athlete's recent activitiesget_activities_by_date_range(start_date: str, end_date: str, limit: int = 30)
: Get activities within a specific date rangeget_activity_by_id(activity_id: int)
: Get detailed information about a specific activityget_recent_activities(days: int = 7, limit: int = 10)
: Get activities from the past X daysDates should be provided in ISO format (YYYY-MM-DD
).
The server returns activity data with consistent field names and units:
Field | Description | Unit |
---|---|---|
name | Activity name | - |
sport_type | Type of sport | - |
start_date | Start date and time | ISO 8601 |
distance_metres | Distance | meters |
elapsed_time_seconds | Total elapsed time | seconds |
moving_time_seconds | Moving time | seconds |
average_speed_mps | Average speed | meters per second |
max_speed_mps | Maximum speed | meters per second |
total_elevation_gain_metres | Total elevation gain | meters |
elev_high_metres | Highest elevation | meters |
elev_low_metres | Lowest elevation | meters |
calories | Calories burned | kcal |
start_latlng | Start coordinates | [lat, lng] |
end_latlng | End coordinates | [lat, lng] |
To use this server, you'll need to authenticate with the Strava API. Follow these steps:
Create a Strava API application:
localhost
Get your refresh token:
get_strava_token.py
script:python get_strava_token.py
.env
fileSet environment variables: The server requires the following environment variables:
STRAVA_CLIENT_ID
: Your Strava API Client IDSTRAVA_CLIENT_SECRET
: Your Strava API Client SecretSTRAVA_REFRESH_TOKEN
: Your Strava API Refresh TokenUpdate your claude_desktop_config.json
(located in ~/Library/Application\ Support/Claude/claude_desktop_config.json
on macOS and %APPDATA%/Claude/claude_desktop_config.json
on Windows) to include the following:
{
"mcpServers": {
"strava": {
"command": "uvx",
"args": [
"strava-mcp-server"
],
"env": {
"STRAVA_CLIENT_ID": "YOUR_CLIENT_ID",
"STRAVA_CLIENT_SECRET": "YOUR_CLIENT_SECRET",
"STRAVA_REFRESH_TOKEN": "YOUR_REFRESH_TOKEN"
}
}
}
}
For Claude Web, you can run the server locally and connect it using the MCP extension.
Once connected, you can ask Claude questions like:
The server provides human-readable error messages for common issues:
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
MCP server for Strava API integration
We found that strava-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A look at the top trends in how threat actors are weaponizing open source packages to deliver malware and persist across the software supply chain.
Security News
ESLint now supports HTML linting with 48 new rules, expanding its language plugin system to cover more of the modern web development stack.
Security News
CISA is discontinuing official RSS support for KEV and cybersecurity alerts, shifting updates to email and social media, disrupting automation workflows.