Totem MCP Server
Totem - talk to your wearables with AI. Today: full Whoop access (48 tools).
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
VERIFIED ACTIVE
LAST COMMIT 2026-07-26 · ★ 108 · #55 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
NOASSERTION · TypeScript servers · how we verify → /methodology
01 · Install Totem
before you install - you'll need
Set AUTH_PASSWORD, PUBLIC_URL before connecting.
Claude Code
claude mcp add thebriangao-totem -- npx -y @thebriangao/totem Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"thebriangao-totem": {
"command": "npx",
"args": [
"-y",
"@thebriangao/totem"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license no standard license detected - usage rights unclear; check the repo before commercial use
npm package @thebriangao/totem - published under the repo owner's npm scope (@thebriangao)
registry namespace io.github.thebriangao is GitHub-verified and matches the repo owner
03 · What Totem can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v1.4.4 · 2026-06-12
Account rename: briangaoo → thebriangao across all three homes. · repo now lives at thebriangao/totem (old URLs redirect; update remotes: git remote set-url origin · package is now @thebriangao/totem - npm-global…
v1.4.3 · 2026-06-07
Hardening pass on the totem update flow from 1.4.2: · Version picker dates each version by its commit date (so backfilled tags like v1.1.0 read 2026-05-26, in chronological order); dropped the duplicate v1.0.0 tag.…
v1.4.2 · 2026-06-07
totem update is now an interactive updater - a version picker (every release, newest first, with dates + notes), newest as default, older versions warn. Applies your choice with a guided animated build (fast-forward…
04 · Who maintains Totem
totem is maintained by thebriangao. It's the only MCP server we track from this author; the repo dates to May 2026.
05 · Facts
- repository
- github.com/thebriangao/totem
- category
- security - ranked #55 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 10+ releases in the last 90 days (latest 2026-06-12)
- registry
- io.github.thebriangao/totem (active, first published 2026-06-12)
- packages
- npm:@thebriangao/totem
06 · Totem FAQ
What is Totem?
Totem - talk to your wearables with AI. Today: full Whoop access (48 tools).
Is Totem still maintained?
Yes - as of 2026-08-25, its last commit was 2026-07-26 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
How do I install Totem?
Run `npx -y @thebriangao/totem`. The README documents 2 environment variables (AUTH_PASSWORD, PUBLIC_URL) to set first. Set AUTH_PASSWORD, PUBLIC_URL before connecting. You can also paste the ready-made client config above.
Does Totem run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Totem
Alternatives to Totem
Maintained security servers if Totem isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Totem doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Thingctx · Thoughtspot MCP Server · Zyrax Guard · Raven Nest MCP · Hound
More TypeScript MCP servers · CV Forge · Replicant MCP · Myco Brain · Writing Style Checker · Javaperf · see all