garmin-mcp

Item: garmin-mcp
Rating: 71
Author: M8ven

Self-hosted MCP server that exposes 90+ Garmin Connect tools to Claude and includes a live triathlon dashboard.

→ sumal009/garmin-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GARMIN_PASSWORD, MCP_ACCESS_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGARMIN_MFA_CODE

configGARMIN_MFA_CODE_FILE

configGARMIN_MFA_WAIT_SECONDS

configGARMIN_EMAIL— / GARMIN_PASSWORD Fallback Full login if no token blob; may trigger MFA

🔐 secretGARMIN_PASSWORD— GARMIN_EMAIL / Fallback Full login if no token blob; may trigger MFA

configGARMINTOKENS

configGARMIN_TOKEN_BASE64— Recommended Pre-minted Garmin OAuth blob — avoids logging in from a cloud IP (Garmin blocks those)

configGARMINTOKENS_BASE64

configGARMIN_MCP_ENABLE_HOST_CHECK

configGARMIN_MCP_ALLOWED_HOSTS

configGARMIN_MCP_TRANSPORT— Yes streamable-http

configDASHBOARD_TZ_OFFSET_HOURS— Optional Local-day offset for the dashboard (default 5.5 = IST)

🔐 secretMCP_ACCESS_TOKEN— Yes Bearer token guarding /mcp and /dashboard (≥16 chars, or the server won't start)

configGARMIN_MCP_PATH

configGARMIN_MCP_HOST— Yes 0.0.0.0

configPORT— Auto Injected by Railway; the server binds it

configGARMIN_MCP_PORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sumal009-garmin-mcp-g521ia)](https://m8ven.ai/mcp/sumal009-garmin-mcp-g521ia)

commit: 808210372333c0d1086e45951523679c999023af

code hash: 165c46ae0b053fcd764377aee7ad8dd5d60ef1e2da9a6e6c2116500309eda88e

verified: 7/15/2026, 8:49:13 AM

view raw JSON →