telo
health.telo/telotelo.healthstreamable-httpv1.0.1Scanned
Apple Health history for Claude, ChatGPT and any MCP client: sleep, HRV, workouts, daily metrics.
16 tools: 2 can delete or cancel things, 2 do something that can't be undone, 10 change things and 2 only read.
- Reads private data · 0
- Reads text others write · 1
- Can send data out · 3
- 4 findings
Anlyon alternative
14 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
16 tools
Deletes or cancels 2Claude Code: deny
arrange_homeReorder cards, remove cards or remove marks, when the user asks to set up or tidy their home (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Reorder cards, remove cards or remove marks, when the user asks to set up or tidy their home (e.g. 'set my home up for race week'). The reason is shown to the user in the change history, and every change can be undone on the phone.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
cancel_workout_planRequest cancellation of the user's identified workout plan.No findings
Why it is in this group
- The name "cancel_workout_plan" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Request cancellation of the user's identified workout plan. The iPhone must process removal, either during an automatic refresh or by opening telo > Planned workouts. Does not delete any recorded HealthKit result. Idempotent; cancel_requested is NOT confirmation of removal from Apple Watch. To change a prescription, cancel the old plan and create a new one for review.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Can't be undone 2Claude Code: ask
derived_metricsDuration-based training workload (minutes), excluding walking unless include_walking=true: rolling ATL 7 days, CTL 42 days, same-day TSB=CTL-ATL and acute/chronic ratio.Can send data outNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it Duration-based training workload (minutes), excluding walking unless include_walking=true: rolling ATL 7 days, CTL 42 days, same-day TSB=CTL-ATL and acute/chronic ratio. Not intensity-weighted TSS. Every training row includes trimp_load, trimp_atl, trimp_ctl and trimp_tsb: simple zone TRIMP = sum(zone_seconds[z] * z / 60), with weights [0,1,2,3,4,5] for zones 0–5. TRIMP ATL/CTL use 7/42-day rolling means; TSB=CTL-ATL. max_hr overrides the observed workout maximum. include_trimp=true also returns the legacy trimp object with coverage details. Existing duration fields remain unchanged. TRIMP sums observed zone time; workouts without usable zones contribute zero, so rolling ATL/CTL/TSB remain numeric with incomplete coverage. trimp_coverage, trimp_coverage_7d and trimp_coverage_42d report the fraction of included workout duration with usable HR zones for the day and rolling windows. Covered seconds are capped per workout at its duration; coverage is null when there is no included duration. Missing workout days count as zero; coverage is reported. HRV SDNN and resting HR compared with the preceding 30–60 calendar days, excluding the target date; at least 7 valid daily values required. Includes mean, population SD, absolute/percentage delta and z-score. Maximum 500 total rows; narrow the range if truncated.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: Training load and personal baselines
sessionsSleep nights or workouts within an inclusive date range.Can send data outNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it Sleep nights or workouts within an inclusive date range. Workout activity accepts run/bike/swim (or running/cycling/swimming). granularity=week groups workouts by Monday date and modality, summing duration, distance and estimated HR-zone seconds. Boundary weeks cover only the requested dates. Distance and zone coverage counts distinguish missing data from zero; max_hr uses the same definition as workout_detail. Filters and weekly grouping require kind=workout. Timestamps carry the local UTC offset.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: Sleep and workout sessions
Changes things 10Claude Code: ask
create_workout_planCreate one structured workout requested by the user, scheduled within the next 7 days.No findings
Why it is in this group
- The name "create_workout_plan" says "create": a word for a change.
Description, as the server wrote it Create one structured workout requested by the user, scheduled within the next 7 days. Stores a pending plan; does NOT immediately deliver to or start Apple Watch. The first delivery is manual: open telo on iPhone > Planned workouts and tap Schedule on Watch to grant permission. Afterwards the user may opt into automatic delivery for newly created plans on that iPhone. Background scheduling is opportunistic, not immediate; otherwise review each plan manually. Use seconds/meters and an explicit local UTC offset. Step names can describe reps/weights; these are instructions, not native repetition goals. Pool swimming uses activity=swimming and location=indoor only. Optional pool_length_m is displayed for review; the user sets pool length on Watch when starting because WorkoutKit has no pool-length setter. pool_distance_with_time goals require meters and seconds, and advance only when BOTH distance and time are fulfilled (send-off intervals; overrunning distance delays the next step). Distance-only goals are also supported. Pool custom workouts require watchOS 11 or later. Device supportsActivity/supportsGoal validation can reject unsupported activities, goals or alerts before scheduling. Retry with the SAME idempotency_key and payload. Read workout_plans to check delivery and exact recorded results. Never claim the Watch received a pending plan.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
data_statusInspect before health reviews or investigating missing data.Reads text others write1 finding
Why it is in this group
- The name "data_status" says "status": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe description's first sentence says "inspect" and "review": it reads comments, which other people can write.
Findings
- Warn
The server marks "data_status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "data_status" says "status": a word for reading.
Description, as the server wrote it Inspect before health reviews or investigating missing data. Returns the last received upload batch, collection date ranges/counts and per-metric coverage. Not a sync command. history_import is the iPhone's own report of its history import (complete, still arriving, or unknown for older app builds); when next_step is present, relay its message to the user; HealthKit read permissions are unknown. An upload can be empty or re-send old records; old dates alone do not prove stalled sync. No account identifiers returned.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: Data availability and sync evidence
edit_cardChange one card: title, window, style, comparison, usual range, color, size, change_from, or a goal the user stated.No findings
Why it is in this group
- The name "edit_card" says "edit": a word for a change.
Description, as the server wrote it Change one card: title, window, style, comparison, usual range, color, size, change_from, or a goal the user stated. null removes an option. Call home first for ids.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_metricsLists the available health metrics, the unit of each one, and how far back the data goes.1 finding
Why it is in this group
- The name "list_metrics" says "list": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "list_metrics" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "list_metrics" says "list": a word for reading.
Description, as the server wrote it Lists the available health metrics, the unit of each one, and how far back the data goes. Call this before query_daily if you do not know the exact metric names.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: List metrics
mark_dateKeep a short note the user told you about a date or span (illness, travel, new training, new shoes).No findings
Why it is in this group
- The name "mark_date" says "mark": a word for a change.
Description, as the server wrote it Keep a short note the user told you about a date or span (illness, travel, new training, new shoes). It appears on every telo chart covering that date and is returned by home to any assistant later. Only for facts the user stated, never your inference.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
pin_cardPut a live chart on the user's telo iPhone home.No findings
Why it is in this group
- The name "pin_card" says "pin": a word for a change.
Description, as the server wrote it Put a live chart on the user's telo iPhone home. Only when the user asks to pin, save, show or keep something on telo. The card keeps updating with each sync. Styles: trend (line), stat (number and change), bars. Optional: compare_with draws a second metric on the same window; baseline=personal draws the user's usual range; display=pace_km turns running_speed into min/km; goal only when the user stated one; color only when the user asks (cards default to a color per metric category); size=half puts two consecutive half cards side by side (a number and a small trend, details on tap); change_from=usual or year_ago changes what the change line compares with. Always pass the user's question in their words; it is shown on the card.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
pin_countdownAdd a countdown to a date the user named (a race, a trip, a test) to their telo home.No findings
Why it is in this group
- The name "pin_countdown" says "pin": a word for a change.
Description, as the server wrote it Add a countdown to a date the user named (a race, a trip, a test) to their telo home. telo counts days; it never judges them.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
query_dailyDaily records or week/month aggregates.Can send data out1 finding
Why it is in this group
- The name "query_daily" says "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
The server marks "query_daily" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "query_daily" says "query": a word for reading.
Description, as the server wrote it Daily records or week/month aggregates. aggregation identifies sum or unweighted average of stored daily values; daily_min/max are extrema of daily values, not raw samples. days_present counts stored dates; days_expected counts calendar dates in period_start/end clipped to the request, not expected sensor wear. Units and aggregation methods are kept separate. Entirely missing buckets/metrics have no row: missing is not zero. Weekly labels use SQLite %Y-W%W (Monday weeks split at New Year), not ISO weeks; use period_start/end. Limit 500 rows. If truncated, discard the partial response and re-query smaller non-overlapping ranges aligned to complete buckets, or fewer metrics. Do not combine partial bucket averages without weighting by days_present.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: Query daily metrics
report_gapCall when the user asked for something telo cannot do with the tools here: a chart or layout on the telo home, a metric telo does not have, data that is missing, a question no tool…No findings
Why it is in this group
- The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when the user asked for something telo cannot do with the tools here: a chart or layout on the telo home, a metric telo does not have, data that is missing, a question no tool answers. Pass their request in their words, what you tried instead, and what is missing. Then tell the user you noted it for the telo team, without promising it will be built. Not for questions you can answer by reading their data.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
workout_detailDetail for a workout UUID from sessions.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description is 3,688 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ependently. No GPS route/altitude series or inferred sensor identity is included."
Description, as the server wrote it Detail for a workout UUID from sessions. Includes source/device, indoor flag, pool length, elevation gain, laps, classified segments, paired pause intervals, a swimming summary and reduced series when accessible in HealthKit. Summaries, events and zones are permanent; only raw series expire after 30 days. The iPhone must sync with a version that collects detail. raw_available and summary_available distinguish coverage. synced_at is the server ingestion time when recorded; older summaries fall back to the R2 object upload time (which may be the storage migration time). not_available means not synced. HR zones estimate active bucket time (excluding pauses) using one unambiguous HR source and six percent-max bands, including zone 0 below 50%. max_hr can override the observed personal workout maximum; observed maximum is an estimate, not a tested physiological maximum. Missing buckets are excluded and coverage is reported. Values[i] covers seconds [(offset+i)*interval_s, (offset+i+1)*interval_s) from workout start, clipped at elapsed_s; null is missing. Each series has its own source, do not sum or average duplicate metrics across sources. Averages are weighted by sample overlap; sums are prorated across buckets. Gaps and sampling limit precision, including time in HR zones. Events are normalized before pagination: pause/resume pairs become one pause with pause_kind and end_reason; unmatched resumes are marked, and trailing pauses end at workout end. Segment distance_basis distinguishes metadata from bucket estimates; distance_split labels are distance matches, not guaranteed native types. swimming_summary uses lap intervals minus the union of recorded pauses; gaps outside laps count as inferred rest. It preserves swimming_s, total_rest_s and pace_s_per_100m. wall_gaps exposes every consecutive unique lap transition (after_lap is 1-based, gap_s is next start minus previous end, manual_pause includes boundary/spanning pauses). sets contains HealthKit segments covering complete laps, with segment_kind=set and distance_m=pool_length_m*laps (null without pool length), never series estimates. Continuity joins gaps without manual pauses at or below tolerance: nearest-rank P90 of non-manual gaps from 0 to 15s plus 1s, clamped to 3–12s; fewer than 6 candidates falls back to 10s. wall_tolerance_s overrides this with a fixed 0–300s value. continuity_rule returns method, tolerance_s and candidate count. This is a heuristic, not proof that short gaps were turns. longest_continuous selects maximum distance, fastest duration on ties (tie_count includes the winner); otherwise selects duration, retaining selected_by. It adds laps and pace_s_per_100m. Continuous duration and pace include tolerated wall gaps, while swimming/rest totals retain their existing meaning. Pauses within laps still split them, with distance prorated by active time; laps counts contributing lengths, including partial ones. continuous_stretches lists all stretches >=100m chronologically with offset_s, distance_m, duration_s, pace_s_per_100m and laps. healthkit_set_disagrees flags a set split by this rule when its internal gaps have no manual pause and none exceeds 15s; diagnostic only. Continuity is recalculated from permanent events on every request, including after raw expiry. Distance uses lap/pool length or one distance series, with its basis exposed. Missing or overlapping/legacy point laps make the summary unavailable, not zero. The full summary is repeated on every page, even with metrics: []. Active duration does not measure moving time. Follow next_offset and next_event_offset independently. No GPS route/altitude series or inferred sensor identity is included.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- title: Workout detail
Only reads 2Show 2 read-only tools
homeRead the cards on the user's telo iPhone home screen, the dated marks they asked you to keep (e.g.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read the cards on the user's telo iPhone home screen, the dated marks they asked you to keep (e.g. 'Sick', 'Intervals start'), and recent changes. Marks are context the user gave about their life; use them when interpreting their data. Call before editing the home.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
workout_plansRead the latest 50 planned workouts, or one by id, including the original prescription, delivery state and first exactly linked HealthKit workout.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read the latest 50 planned workouts, or one by id, including the original prescription, delivery state and first exactly linked HealthKit workout. pending awaits iPhone processing (manual review, or automatic scheduling if enabled on that iPhone); scheduled means the iPhone scheduler accepted it, NOT confirmed Watch delivery; cancel_requested awaits iPhone removal. recorded_workout=null means no linked result has synced, not proof the workout was skipped. A linked recording does not prove every prescribed interval was completed. Use its uuid with workout_detail for analysis and ask for perceived effort. If truncated, query a known id. Plans have no automatic edits. Automatic scheduling is an optional iPhone setting after a first manual delivery; its current value and background execution time are unknown to the server.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write1
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out3
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
- Warndata_status
The server marks "data_status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "data_status" says "status": a word for reading.
- Warnlist_metrics
The server marks "list_metrics" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "list_metrics" says "list": a word for reading.
- Warnquery_daily
The server marks "query_daily" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "query_daily" says "query": a word for reading.
- Infoworkout_detail
The description is 3,688 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ependently. No GPS route/altitude series or inferred sensor identity is included."
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http telo https://telo.health/mcpclaude mcp add --transport http telo https://telo.health/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__telo__workout_plans",
"mcp__telo__home"
],
"ask": [
"mcp__telo__create_workout_plan",
"mcp__telo__data_status",
"mcp__telo__list_metrics",
"mcp__telo__query_daily",
"mcp__telo__workout_detail",
"mcp__telo__sessions",
"mcp__telo__derived_metrics",
"mcp__telo__pin_card",
"mcp__telo__pin_countdown",
"mcp__telo__edit_card",
"mcp__telo__mark_date",
"mcp__telo__report_gap"
],
"deny": [
"mcp__telo__cancel_workout_plan",
"mcp__telo__arrange_home"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as telo. Review it before you use it.
Capability tags behind 4 rules
- mcp__telo__data_status untrusted-input
- mcp__telo__query_daily outbound
- mcp__telo__sessions outbound
- mcp__telo__derived_metrics outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/health.telo/telo/verify?hash=e617016a46b49eb225a50e51c86e8d0f7d9d45860662c7abc50beb41d4581970" | jq -e '.changed == false'Pinned hash e617016a46b4, from Nov 5, 2026, 13:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/health.telo/telo/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/health.telo/telo)Source: MCP Registry. Synced Nov 5, 2026, 13:17 UTC.