Fitbit MCP
Retired, superseded by google-health-mcp. Fitbit Web API shuts down 30 Sept 2026. It runs locally over stdio via the published package.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.
VERIFIED ACTIVE
LAST COMMIT 2026-08-24 · ★ 2 · #54 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
GPL-3.0 · Python servers · how we verify → /methodology
01 · Install Fitbit MCP
before you install - you'll need
The README does not document required environment variables for a basic install.
Claude Code
claude mcp add partymola-fitbit-mcp -- uvx fitbit-mcp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"partymola-fitbit-mcp": {
"command": "uvx",
"args": [
"fitbit-mcp"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license GPL-3.0 - declared in the repository
pypi package fitbit-mcp - check the name against the project README before installing (PyPI has no namespace ownership)
registry namespace io.github.partymola is GitHub-verified and matches the repo owner
03 · What Fitbit MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.6.0 · 2026-08-20
Retired. Use google-health-mcp instead. · The Fitbit Web API shuts down on 30 September 2026, and Fitbit has already stopped accepting new app registrations, so this package can no longer be set up from scratch. An…
v0.5.3 · 2026-08-09
Fixed · Token files are tightened to owner-only permissions when they are rewritten, not only when first created. The tightening is best-effort: it needs ownership, and a file already emptied for rewriting must not be…
v0.5.2 · 2026-08-08
Fixed · Every way of failing to obtain an access token is now classified, and reaches callers as one of two outcomes rather than escaping. Only a refusal is an authentication failure: HTTP 400 or 401, a response with…
04 · Who maintains Fitbit MCP
fitbit-mcp is maintained by partymola. We track 6 MCP servers from partymola - 6 actively maintained, 6 combined GitHub stars, oldest repo from Apr 2026. Full record: all servers from partymola.
05 · Facts
- repository
- github.com/partymola/fitbit-mcp
- category
- security - ranked #54 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 9 releases in the last 90 days (latest 2026-08-20)
- registry
- io.github.partymola/fitbit-mcp (active, first published 2026-07-11 · 7 versions)
- packages
- pypi:fitbit-mcp
06 · Fitbit MCP FAQ
What is Fitbit MCP?
Retired, superseded by google-health-mcp. Fitbit Web API shuts down 30 Sept 2026. It runs locally over stdio via the published package.
Is Fitbit MCP still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 9 releases in the last 90 days. We re-verify nightly.
How do I install Fitbit MCP?
Run `uvx fitbit-mcp`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.
Does Fitbit MCP run locally?
Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Fitbit MCP
Alternatives to Fitbit MCP
Maintained security servers if Fitbit MCP isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Fitbit MCP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · DugganUSA CLI - Local STDIO MCP · Commit - Supply Chain Risk Scoring · SSH · Promptrejectormcp · Royal MCP
More Python MCP servers · Monzo MCP · Piia Engram · Terra Vision · Indie Stack · BAILII UK Case Law · see all