[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_196":197,"_198":199},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_89":-7,"_90":83,"_29":-7,"_91":-5,"_15":92,"_93":94,"_95":96,"_97":98,"_99":100,"_101":-5,"_102":-5,"_103":-5,"_104":38,"_105":106,"_107":50,"_108":-5,"_109":-5,"_110":111},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","heatshectare9h","name","oura-mcp","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62,"_63":62,"_64":65,"_66":65,"_67":65,"_68":62,"_69":62,"_70":71,"_72":73,"_74":75,"_76":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","fcb812bc-dc78-45c5-83b3-9d06e12bd579","createdAt",["D",1781374892597],"updatedAt",["D",1781375822428],"main","projectId","d7eea596-9923-42ca-baed-5637c9770a60","version",11,"forkedBranchId","forkedBranchVersion","lockfileKey","1781375822612-esm.town_v_heatshectare9h_oura-mcp@11-main","deletedAt",["D",1781374892592],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","Remote MCP server wrapping the Oura Ring API v2 for Claude","imageUrl","userId","d6d2db8a-e658-43be-bda0-1c773ddf1c89","pinnedFileId","d2141274-6756-11f1-be90-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019ec236-7f72-71cf-98bc-ea091897a6b8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_88":83},"org",{"_11":12,"_82":83,"_84":83,"_45":46,"_85":86,"_87":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","path","adoptOrgId",{"_20":28,"_13":14,"_22":192,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62,"_63":62,"_64":65,"_66":65,"_67":65,"_68":62,"_69":62,"_70":193,"_72":194,"_74":195,"_76":38},"tree",[171,172,173,174,175],"files",[171,172,173,174,175],"counts",{"_160":54,"_17":161,"_162":161,"_163":164,"_165":166},"contents",[112,113,114,115,116],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_20":154,"_13":155,"_119":156,"_121":-5,"_122":21,"_123":30,"_125":50,"_22":157,"_29":54,"_127":101,"_129":158,"_131":38,"_132":-5,"_90":159},{"_20":147,"_13":148,"_119":48,"_121":-5,"_122":21,"_123":149,"_125":50,"_22":150,"_29":54,"_127":151,"_129":152,"_131":38,"_132":-5,"_90":153},{"_20":140,"_13":141,"_119":142,"_121":-5,"_122":21,"_123":143,"_125":50,"_22":144,"_29":54,"_127":128,"_129":145,"_131":38,"_132":-5,"_90":146},{"_20":134,"_13":135,"_119":136,"_121":-5,"_122":21,"_123":137,"_125":50,"_22":138,"_29":54,"_127":128,"_129":83,"_131":38,"_132":-5,"_90":139},{"_20":117,"_13":118,"_119":120,"_121":-5,"_122":21,"_123":124,"_125":50,"_22":126,"_29":54,"_127":128,"_129":130,"_131":38,"_132":-5,"_90":133},"0d64c077-f0ae-4be0-9b5f-90423fcc868c","oura.ts","fileId","bc598e32-6756-11f1-be74-1607ee4eb77e","parentId","branchId","branchVersion",7,"latest",["D",1781375764994],"fileType","script","content","// Oura Ring API v2 helpers: token storage/refresh + authenticated GET.\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nexport const OURA_CLIENT_ID = Deno.env.get(\"OURA_CLIENT_ID\")!;\nexport const OURA_CLIENT_SECRET = Deno.env.get(\"OURA_CLIENT_SECRET\")!;\n\nexport const OURA_AUTHORIZE = \"https://cloud.ouraring.com/oauth/authorize\";\nexport const OURA_TOKEN = \"https://api.ouraring.com/oauth/token\";\nexport const OURA_API = \"https://api.ouraring.com/v2/usercollection\";\nexport const SCOPES = \"personal daily heartrate workout spo2 session tag\";\n\nexport const TOKENS_KEY = \"oura_tokens\"; // { access_token, refresh_token, expires_at }\nexport const STATE_KEY = \"oura_oauth_state\";\n\ninterface Tokens {\n access_token: string;\n refresh_token: string;\n expires_at: number;\n}\n\nexport async function getTokens(): Promise {\n return (await blob.getJSON(TOKENS_KEY)) ?? null;\n}\n\nexport async function saveTokens(t: any) {\n await blob.setJSON(TOKENS_KEY, {\n access_token: t.access_token,\n refresh_token: t.refresh_token,\n // refresh ~1 min early\n expires_at: Date.now() + (t.expires_in ?? 86400) * 1000 - 60_000,\n });\n}\n\nasync function ensureAccessToken(): Promise {\n const tk = await getTokens();\n if (!tk) throw new Error(\"Not connected to Oura yet — visit /auth once.\");\n if (Date.now() < tk.expires_at) return tk.access_token;\n\n // refresh\n const body = new URLSearchParams({\n grant_type: \"refresh_token\",\n refresh_token: tk.refresh_token,\n client_id: OURA_CLIENT_ID,\n client_secret: OURA_CLIENT_SECRET,\n });\n const res = await fetch(OURA_TOKEN, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n if (!res.ok) throw new Error(`Token refresh failed: ${res.status} ${await res.text()}`);\n const json = await res.json();\n // Oura may rotate the refresh token; keep the new one if present.\n if (!json.refresh_token) json.refresh_token = tk.refresh_token;\n await saveTokens(json);\n return json.access_token;\n}\n\nexport async function ouraGet(path: string, params: Record = {}) {\n const token = await ensureAccessToken();\n const url = new URL(`${OURA_API}/${path}`);\n for (const [k, v] of Object.entries(params)) if (v) url.searchParams.set(k, v);\n const res = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });\n if (!res.ok) throw new Error(`Oura ${path} -> ${res.status}: ${await res.text()}`);\n return res.json();\n}\n","deleted","label",[118],"c310b632-2edb-412f-b71c-3b3f12ee0fdf","new-file-3370.ts","908baa88-6756-11f1-be90-1607ee4eb77e",6,["D",1781375691504],[135],"70eb8d4e-fd66-4f2e-89d9-2ea5481accdf","mcp.ts","c3ec2240-6756-11f1-bd99-1607ee4eb77e",8,["D",1781375777700],"// MCP tool catalogue + JSON-RPC handler (streamable HTTP, single-response mode).\nimport { ouraGet } from \"./oura.ts\";\n\nconst dateSchema = {\n type: \"object\",\n properties: {\n start_date: { type: \"string\", description: \"YYYY-MM-DD\" },\n end_date: { type: \"string\", description: \"YYYY-MM-DD\" },\n },\n};\n\nconst TOOLS = [\n { name: \"get_daily_sleep\", description: \"Daily sleep scores & contributors.\", inputSchema: dateSchema },\n { name: \"get_daily_readiness\", description: \"Daily readiness scores & recovery.\", inputSchema: dateSchema },\n { name: \"get_daily_activity\", description: \"Daily activity: steps, calories, score.\", inputSchema: dateSchema },\n { name: \"get_daily_stress\", description: \"Daily stress summary.\", inputSchema: dateSchema },\n { name: \"get_daily_spo2\", description: \"Daily blood oxygen (SpO2).\", inputSchema: dateSchema },\n { name: \"get_sleep\", description: \"Detailed sleep periods (stages, HRV, etc.).\", inputSchema: dateSchema },\n { name: \"get_workouts\", description: \"Logged workouts.\", inputSchema: dateSchema },\n { name: \"get_sessions\", description: \"Moment/meditation sessions.\", inputSchema: dateSchema },\n {\n name: \"get_heartrate\",\n description: \"Heart-rate time series.\",\n inputSchema: {\n type: \"object\",\n properties: {\n start_datetime: { type: \"string\", description: \"ISO 8601, e.g. 2026-06-13T00:00:00+07:00\" },\n end_datetime: { type: \"string\", description: \"ISO 8601\" },\n },\n },\n },\n { name: \"get_personal_info\", description: \"Account/personal info.\", inputSchema: { type: \"object\", properties: {} } },\n];\n\nconst DATE_ENDPOINTS: Record = {\n get_daily_sleep: \"daily_sleep\",\n get_daily_readiness: \"daily_readiness\",\n get_daily_activity: \"daily_activity\",\n get_daily_stress: \"daily_stress\",\n get_daily_spo2: \"daily_spo2\",\n get_sleep: \"sleep\",\n get_workouts: \"workout\",\n get_sessions: \"session\",\n};\n\nasync function callTool(name: string, args: any) {\n if (DATE_ENDPOINTS[name]) {\n return ouraGet(DATE_ENDPOINTS[name], {\n start_date: args?.start_date,\n end_date: args?.end_date,\n });\n }\n if (name === \"get_heartrate\") {\n return ouraGet(\"heartrate\", {\n start_datetime: args?.start_datetime,\n end_datetime: args?.end_datetime,\n });\n }\n if (name === \"get_personal_info\") return ouraGet(\"personal_info\");\n throw new Error(`Unknown tool: ${name}`);\n}\n\nexport async function handleMcp(req: Request): Promise {\n const msg = await req.json();\n const reply = (result: any, id: any) =>\n new Response(JSON.stringify({ jsonrpc: \"2.0\", id, result }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n const fail = (code: number, message: string, id: any) =>\n new Response(JSON.stringify({ jsonrpc: \"2.0\", id, error: { code, message } }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const { method, id, params } = msg;\n\n // notifications carry no id and expect no body\n if (method?.startsWith(\"notifications/\")) return new Response(null, { status: 202 });\n\n if (method === \"initialize\") {\n return reply(\n {\n protocolVersion: params?.protocolVersion ?? \"2025-06-18\",\n capabilities: { tools: {} },\n serverInfo: { name: \"oura-mcp\", version: \"1.0.0\" },\n },\n id,\n );\n }\n if (method === \"ping\") return reply({}, id);\n if (method === \"tools/list\") return reply({ tools: TOOLS }, id);\n if (method === \"tools/call\") {\n try {\n const data = await callTool(params?.name, params?.arguments);\n return reply({ content: [{ type: \"text\", text: JSON.stringify(data) }] }, id);\n } catch (e) {\n return reply({ content: [{ type: \"text\", text: `Error: ${(e as Error).message}` }], isError: true }, id);\n }\n }\n return fail(-32601, `Method not found: ${method}`, id);\n}\n",[141],"3e2d8c27-a0a4-44b5-b665-474f0ad45e7c","main.ts",9,["D",1781375801446],"http","// ──────────────────────────────────────────────────────────────────────────\n// Oura MCP Server — Val Town HTTP entrypoint\n//\n// Remote MCP server that Claude (web + iPhone) can connect to, wrapping the\n// Oura Ring API v2. Handles the one-time Oura OAuth2 flow and stores the\n// refresh token in Val Town blob storage so it survives restarts.\n//\n// SET THESE ENV VARS (val Settings → Environment Variables):\n// OURA_CLIENT_ID — from cloud.ouraring.com OAuth app\n// OURA_CLIENT_SECRET — from cloud.ouraring.com OAuth app\n// MCP_SECRET — a long random string you invent (guards your endpoint)\n//\n// Oura OAuth app redirect URI must be: https:///callback\n//\n// Endpoints:\n// GET / status (detailed only with ?key=MCP_SECRET)\n// GET /auth?key=... start Oura OAuth (visit once)\n// GET /callback Oura redirects here; stores tokens\n// POST /mcp/ the MCP endpoint Claude connects to\n// ──────────────────────────────────────────────────────────────────────────\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { handleMcp } from \"./mcp.ts\";\nimport {\n getTokens,\n OURA_AUTHORIZE,\n OURA_CLIENT_ID,\n OURA_CLIENT_SECRET,\n OURA_TOKEN,\n saveTokens,\n SCOPES,\n STATE_KEY,\n} from \"./oura.ts\";\n\nconst MCP_SECRET = Deno.env.get(\"MCP_SECRET\")!;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const origin = `${url.protocol}//${url.host}`;\n\n // 1) Start OAuth (gated behind the secret so randoms can't overwrite tokens)\n if (path === \"/auth\") {\n if (url.searchParams.get(\"key\") !== MCP_SECRET) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n const state = crypto.randomUUID();\n await blob.setJSON(STATE_KEY, state);\n const auth = new URL(OURA_AUTHORIZE);\n auth.searchParams.set(\"response_type\", \"code\");\n auth.searchParams.set(\"client_id\", OURA_CLIENT_ID);\n auth.searchParams.set(\"redirect_uri\", `${origin}/callback`);\n auth.searchParams.set(\"scope\", SCOPES);\n auth.searchParams.set(\"state\", state);\n // NOTE: Response.redirect is broken on Val Town — build the redirect manually.\n return new Response(null, { status: 302, headers: { Location: auth.toString() } });\n }\n\n // 2) OAuth callback -> exchange code for tokens\n if (path === \"/callback\") {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const saved = await blob.getJSON(STATE_KEY).catch(() => null);\n if (!code) return new Response(\"Missing code\", { status: 400 });\n if (state !== saved) return new Response(\"State mismatch\", { status: 400 });\n\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: `${origin}/callback`,\n client_id: OURA_CLIENT_ID,\n client_secret: OURA_CLIENT_SECRET,\n });\n const res = await fetch(OURA_TOKEN, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n if (!res.ok) return new Response(`Token exchange failed: ${await res.text()}`, { status: 500 });\n await saveTokens(await res.json());\n return new Response(\"✅ Connected to Oura. You can close this tab and use Claude.\");\n }\n\n // 3) MCP endpoint (URL itself is the credential). Wrong secret/method gets the\n // same 404 as any other miss, so guesses can't be distinguished.\n if (path.startsWith(\"/mcp/\")) {\n if (path === `/mcp/${MCP_SECRET}` && req.method === \"POST\") {\n return handleMcp(req);\n }\n return new Response(\"Not Found\", { status: 404 });\n }\n\n // 4) status — detailed (with ready-to-copy URLs) only when the key is supplied\n if (url.searchParams.get(\"key\") === MCP_SECRET) {\n const connected = !!(await getTokens());\n return new Response(\n `Oura MCP server.\\n` +\n `Oura connected: ${connected ? \"yes\" : \"no\"}\\n` +\n `Auth (visit once): ${origin}/auth?key=${MCP_SECRET}\\n` +\n `MCP endpoint (add to Claude): ${origin}/mcp/${MCP_SECRET}`,\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n return new Response(\"ok\", { headers: { \"Content-Type\": \"text/plain\" } });\n}\n",[148],"7670615a-53a4-4f7f-9b92-ebb2d043917e","README.md","de95464e-6756-11f1-a6bc-1607ee4eb77e",["D",1781375822428],"# Oura MCP Server\n\nA remote [MCP](https://modelcontextprotocol.io/) server that lets Claude (web + iPhone)\nread your [Oura Ring](https://ouraring.com/) data. It wraps the Oura API v2, handles the\none-time Oura OAuth2 flow, and stores the refresh token in Val Town blob storage so it\nsurvives restarts.\n\n## Architecture\n\n```mermaid\nflowchart LR\n Claude[Claude web / iPhone] -- \"POST /mcp/SECRET\" --> Main[main.ts router]\n Main --> Mcp[mcp.ts
JSON-RPC + tools]\n Mcp --> Oura[oura.ts
token + API helpers]\n Oura -- \"Bearer token\" --> API[(Oura API v2)]\n Oura <--> Blob[(blob: oura_tokens)]\n Browser[You, once] -- \"GET /auth\" --> Main\n Main -- \"OAuth redirect\" --> OAuth[cloud.ouraring.com]\n OAuth -- \"GET /callback\" --> Main\n```\n\n## Files\n\n- `main.ts` — HTTP entrypoint / router (`/`, `/auth`, `/callback`, `/mcp/`)\n- `mcp.ts` — MCP JSON-RPC handler and the tool catalogue\n- `oura.ts` — Oura token storage/refresh + authenticated GET helper\n\n## Setup\n\n### 1. Create an Oura OAuth app\n\nAt , create an application. Set the\n**Redirect URI** to your val's callback URL:\n\n```\nhttps:///callback\n```\n\nGrab the **Client ID** and **Client Secret**.\n\n### 2. Set environment variables\n\nThis val needs three env vars:\n\n| Key | Value |\n| --- | --- |\n| `OURA_CLIENT_ID` | from your Oura OAuth app |\n| `OURA_CLIENT_SECRET` | from your Oura OAuth app |\n| `MCP_SECRET` | a long random string you invent — guards the endpoint |\n\n### 3. Connect Oura (once)\n\nVisit `https:///auth?key=` in a browser, approve access, and\nyou'll see \"✅ Connected to Oura.\"\n\n### 4. Add to Claude\n\nAdd this as a custom connector / MCP server in Claude:\n\n```\nhttps:///mcp/\n```\n\n## Security model\n\n- The MCP URL itself is the credential — the `MCP_SECRET` path segment is unguessable.\n Wrong secrets and wrong methods return a plain `404`, indistinguishable from any miss.\n- `/auth` is gated behind `?key=` so randoms can't start the flow or\n overwrite your stored tokens.\n- The root `/` returns a bare `ok` unless `?key=` is supplied, in which case\n it shows connection status and ready-to-copy URLs.\n\n## Tools exposed to Claude\n\n`get_daily_sleep`, `get_daily_readiness`, `get_daily_activity`, `get_daily_stress`,\n`get_daily_spo2`, `get_sleep`, `get_workouts`, `get_sessions`, `get_heartrate`,\n`get_personal_info`.\n",[155],"pulls",1,"forks","envVars",{"_167":169,"_170":54},"connections",{"_167":54,"_168":54},"count","unfilledCount",3,"emptyCount",{"_20":154,"_13":155,"_119":156,"_121":-5,"_122":21,"_123":30,"_125":50,"_22":189,"_29":54,"_127":101,"_129":158,"_131":38,"_132":-5,"_177":190,"_90":191},{"_20":147,"_13":148,"_119":48,"_121":-5,"_122":21,"_123":149,"_125":50,"_22":186,"_29":54,"_127":151,"_129":152,"_131":38,"_132":-5,"_177":187,"_90":188},{"_20":140,"_13":141,"_119":142,"_121":-5,"_122":21,"_123":143,"_125":50,"_22":183,"_29":54,"_127":128,"_129":145,"_131":38,"_132":-5,"_177":184,"_90":185},{"_20":134,"_13":135,"_119":136,"_121":-5,"_122":21,"_123":137,"_125":50,"_22":180,"_29":54,"_127":128,"_129":83,"_131":38,"_132":-5,"_177":181,"_90":182},{"_20":117,"_13":118,"_119":120,"_121":-5,"_122":21,"_123":124,"_125":50,"_22":176,"_29":54,"_127":128,"_129":130,"_131":38,"_132":-5,"_177":178,"_90":179},["D",1781375764994],"children",[],[118],["D",1781375691504],[],[135],["D",1781375777700],[],[141],["D",1781375801446],[],[148],["D",1781375822428],[],[155],["D",1781374892592],{"_11":12,"_88":83},{"_11":12,"_82":83,"_84":83,"_45":46,"_85":86,"_87":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_109":229,"_230":231,"_232":233,"_234":38,"_235":38,"_236":38,"_237":50,"_238":-5,"_239":-7,"_240":-7,"_241":54,"_242":38,"_243":38,"_244":-5,"_245":38,"_246":38,"_247":38,"_248":-5},"ENV",{"_200":201,"_202":203,"_204":26,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1