What is coros-mcp CLAUDE.md?

Repository guidance for developing coros-mcp, a server that lets AI assistants access Coros fitness data such as sleep, heart-rate variability, training metrics, and activities. It covers setup, authentication, commands, and development checks.

Use it when setting up coros-mcp, connecting it to Claude Code, authenticating Coros accounts, syncing data, checking cache coverage, or running pytest, ruff, and mypy.

It explains how to install, run, authenticate, cache, and test the server without having to discover those details from the code.

How cygnusb/coros-mcp configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to cygnusb/coros-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/cygnusb/coros-mcp/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/cygnusb/coros-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/cygnusb/coros-mcp/claude-md/github.svg)](https://agentmods.dev/instructions/cygnusb/coros-mcp/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/cygnusb/coros-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cygnusb/coros-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/cygnusb/coros-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cygnusb/coros-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 1,457 This file is loaded in full into every session.

When invoked 1,457 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.01457	$0.01457
Opus 5.5	$0.00583	$0.00583
Sonnet 5.5	$0.00291	$0.00291
Haiku 4.5	$0.00146	$0.00146

Measured 2mo ago against content hash 8d2162b38737, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

coros-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 73 lines

How it starts

The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Project Overview

coros-mcp is a Model Context Protocol (MCP) server that exposes Coros fitness data (sleep, HRV, training metrics, activities, workouts) to AI assistants. It uses the unofficial Coros API — no official API key required.

Setup & Installation

python3 -m venv .venv
source .venv/bin/activate
pip install -e .
# For development (pytest, ruff, mypy):
pip install -e ".[dev]"

Running the Server

# Run via CLI entry point (recommended):
coros-mcp serve

# Or register with Claude Code:
claude mcp add coros -- /path/to/coros-mcp/.venv/bin/coros-mcp serve

CLI Commands

coros-mcp auth           # Authenticate (web + mobile tokens)
coros-mcp auth-web       # Web API only (no sleep data)
coros-mcp auth-mobile    # Mobile API only (sleep data)
coros-mcp auth-status    # Check token status
coros-mcp auth-clear     # Remove stored tokens
coros-mcp sync [--from YYYYMMDD] [--to YYYYMMDD]  # Backfill data to local cache
coros-mcp cache-status   # Show local cache coverage

Architecture

The project wraps two separate Coros APIs behind a unified MCP interface:

Dual API Design

Training Hub web API (teameuapi.coros.com / teamapi.coros.com): HRV, daily metrics, activities, workouts. Auth via MD5-hashed password → accessToken header. Token TTL: 24 hours.
Mobile API (apieu.coros.com / apius.coros.com): Sleep stage data (deep/light/REM/awake). Auth via AES-128-CBC encrypted credentials (key reverse-engineered from Coros APK). Token TTL: ~1 hour, auto-refreshes by replaying the stored encrypted login payload.

Token Storage (`coros_mcp/auth/`)

Priority chain for retrieval: COROS_ACCESS_TOKEN env var → system keyring → encrypted local file. The env var replaces only the web access token — stored user_id, region, and mobile token/payload are merged in so sleep data keeps working. On write, both keyring and encrypted file are updated (belt-and-suspenders). The entire StoredAuth object (web token + mobile token + mobile login payload for replay) is serialized as JSON and stored as a single credential.

Read the full file on GitHub · 73 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago Changed · +49 tokens per session 8d2162b38737
2mo ago First seen · 73 lines · 1,408 tokens per session scan A 97507b3f9ea2

Subscribe to this mod's changes

coros-mcp CLAUDE.md is an instructions file published in the GitHub repository cygnusb/coros-mcp (125 stars, last pushed 5d ago), licensed MIT. It adds 1,457 tokens to every session, about $0.0058 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Hardware and IoT ai-assistant claude coros fitness health-data mcp

coros-mcp CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
coros-mcp CLAUDE.mdcygnusb/coros-mcp	Instructions file	125	5d ago	MIT	A	1,457	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	9,719	GitHub Copilot
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	5,516	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	today	MIT	A	4,680	Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	3,093	GitHub Copilot
vscode model-prompts.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	2,022	GitHub Copilot

coros-mcp: Instructions file for Claude Code

Borrowing it

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

CLAUDE.md

Project Overview

Setup & Installation

Running the Server

CLI Commands

Architecture

Dual API Design

Token Storage (`coros_mcp/auth/`)

What this file has done since we first saw it

coros-mcp CLAUDE.md compared with instructions from other repositories

coros-mcp: Instructions file for Claude Code

Borrowing it

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

CLAUDE.md

Project Overview

Setup & Installation

Running the Server

CLI Commands

Architecture

Dual API Design

Token Storage (coros_mcp/auth/)

What this file has done since we first saw it

coros-mcp CLAUDE.md compared with instructions from other repositories

Token Storage (`coros_mcp/auth/`)