41
/ 100
22 days ago
glama

strava-mcp-bridge

Bridges local stdio MCP clients like Codex and OpenCode to Strava's official MCP endpoint, enabling Strava data access via imported OAuth credentials from Claude Code without a developer app.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: STRAVA_MCP_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMCP_PROTOCOL_VERSIONUpstream and protocol: STRAVA_MCP_URL,
🔐 secretSTRAVA_MCP_ACCESS_TOKEN(only read with --auth env)
configSTRAVA_MCP_ALLOWED_TOOLSTool allowlist and Keychain plumbing: ,
configSTRAVA_MCP_ALLOW_TOKEN_ENDPOINT_OVERRIDE1 can redirect OAuth refresh requests
configSTRAVA_MCP_AUTHAuth and credential handling: ,
configSTRAVA_MCP_BRIDGE_KEYCHAIN_SERVICE, STRAVA_MCP_CLAIM_ON_IMPORT,
configSTRAVA_MCP_CLAIM_ON_IMPORTSTRAVA_MCP_BRIDGE_KEYCHAIN_SERVICE, ,
configSTRAVA_MCP_DATA_DIRThe equivalent environment variables are and
configSTRAVA_MCP_KEYCHAIN_BACKEND, STRAVA_MCP_KEYCHAIN_HELPER
configSTRAVA_MCP_KEYCHAIN_HELPERSTRAVA_MCP_KEYCHAIN_BACKEND,
configSTRAVA_MCP_KEYCHAIN_TIMEOUT_MS
configSTRAVA_MCP_NO_CLAIM_ON_IMPORT, STRAVA_MCP_REFRESH_SKEW_SECONDS,
configSTRAVA_MCP_OAUTH_TIMEOUT_MSTimeouts: , STRAVA_MCP_UPSTREAM_TIMEOUT_MS,
configSTRAVA_MCP_REFRESH_SKEW_SECONDSSTRAVA_MCP_NO_CLAIM_ON_IMPORT, ,
configSTRAVA_MCP_STREAM_OUTPUT_DIR
configSTRAVA_MCP_TOKEN_ENDPOINTtogether with
configSTRAVA_MCP_UPSTREAM_TIMEOUT_MSTimeouts: STRAVA_MCP_OAUTH_TIMEOUT_MS, ,
configSTRAVA_MCP_URLUpstream and protocol: , MCP_PROTOCOL_VERSION
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/millerchou-strava-mcp-bridge-1iuj1a)](https://m8ven.ai/mcp/millerchou-strava-mcp-bridge-1iuj1a)
commit: 0820aed080cbec492263ef2cebe669fe5988b177
code hash: 19108dc056cc039ca8eb94401f4c509e7f56652089a51aaa0bdaa83832964db0
verified: 7/9/2026, 10:06:39 AM
view raw JSON →