[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_201":202,"_203":204},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_95":-7,"_96":53,"_83":-7,"_97":-5,"_15":98,"_99":100,"_101":102,"_103":104,"_105":106,"_107":-5,"_108":-5,"_109":-5,"_110":20,"_111":112,"_113":48,"_114":-5,"_115":-5,"_116":117},"routes/_app.x.$handle.$name.remixes",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5},"handle","heatshectare9h","name","oura-mcp","project",{"_27":59,"_13":14,"_49":60,"_61":-5,"_62":20,"_33":34,"_35":34,"_30":31,"_32":-5,"_36":37,"_45":63,"_47":48,"_64":-5,"_65":-5,"_51":22,"_38":39,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_41":79,"_43":80,"_81":82,"_40":20},"forks",[26],"hasNext",false,"page",0,"forkCount",1,"upstream",{"_27":28,"_13":29,"_30":31,"_32":-5,"_33":34,"_35":34,"_36":37,"_38":39,"_40":20,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":22},"id","6cdbad9a-9b29-4956-bfca-5f8b9d67967e","mcp-fidy","description","Remote MCP server wrapping the Oura Ring API v2 for Claude","imageUrl","privacy","public","httpPrivacy","userId","d6d2db8a-e658-43be-bda0-1c773ddf1c89","orgId","019ec236-7f72-71cf-98bc-ea091897a6b8","isOwned","user",{"_11":12,"_58":53},"org",{"_11":12,"_52":53,"_54":53,"_36":37,"_55":56,"_57":20},"pinnedFileId","019ec23e-be47-77cb-973d-29d068855186","pinPreview",true,"createdAt",["D",1781375352350],"likeCount","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","d7eea596-9923-42ca-baed-5637c9770a60",["D",1781374892592],"deletedAt","legacyEnvVars","d2141274-6756-11f1-be90-1607ee4eb77e","pinMigrated","screenshotVersion","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_58":53},{"_11":12,"_52":53,"_54":53,"_36":37,"_55":56,"_57":20},"branch",{"_83":84,"_13":85,"_27":86,"_87":59,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":14,"_94":12},"version",11,"main","fcb812bc-dc78-45c5-83b3-9d06e12bd579","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","branchName","path","adoptOrgId",{"_27":59,"_13":14,"_49":197,"_61":-5,"_62":20,"_33":34,"_35":34,"_30":31,"_32":-5,"_36":37,"_45":63,"_47":48,"_64":-5,"_65":-5,"_51":22,"_38":39,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_41":198,"_43":199,"_81":200,"_40":20},"tree",[176,177,178,179,180],"files",[176,177,178,179,180],"counts",{"_166":22,"_167":24,"_17":24,"_168":169,"_170":171},"contents",[118,119,120,121,122],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_27":160,"_13":161,"_125":162,"_127":-5,"_128":86,"_129":84,"_131":48,"_49":163,"_83":22,"_133":107,"_135":164,"_137":20,"_138":-5,"_96":165},{"_27":153,"_13":154,"_125":63,"_127":-5,"_128":86,"_129":155,"_131":48,"_49":156,"_83":22,"_133":157,"_135":158,"_137":20,"_138":-5,"_96":159},{"_27":146,"_13":147,"_125":148,"_127":-5,"_128":86,"_129":149,"_131":48,"_49":150,"_83":22,"_133":134,"_135":151,"_137":20,"_138":-5,"_96":152},{"_27":140,"_13":141,"_125":142,"_127":-5,"_128":86,"_129":143,"_131":48,"_49":144,"_83":22,"_133":134,"_135":53,"_137":20,"_138":-5,"_96":145},{"_27":123,"_13":124,"_125":126,"_127":-5,"_128":86,"_129":130,"_131":48,"_49":132,"_83":22,"_133":134,"_135":136,"_137":20,"_138":-5,"_96":139},"0d64c077-f0ae-4be0-9b5f-90423fcc868c","oura.ts","fileId","bc598e32-6756-11f1-be74-1607ee4eb77e","parentId","branchId","branchVersion",7,"latest",["D",1781375764994],"fileType","script","content","// Oura Ring API v2 helpers: token storage/refresh + authenticated GET.\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nexport const OURA_CLIENT_ID = Deno.env.get(\"OURA_CLIENT_ID\")!;\nexport const OURA_CLIENT_SECRET = Deno.env.get(\"OURA_CLIENT_SECRET\")!;\n\nexport const OURA_AUTHORIZE = \"https://cloud.ouraring.com/oauth/authorize\";\nexport const OURA_TOKEN = \"https://api.ouraring.com/oauth/token\";\nexport const OURA_API = \"https://api.ouraring.com/v2/usercollection\";\nexport const SCOPES = \"personal daily heartrate workout spo2 session tag\";\n\nexport const TOKENS_KEY = \"oura_tokens\"; // { access_token, refresh_token, expires_at }\nexport const STATE_KEY = \"oura_oauth_state\";\n\ninterface Tokens {\n access_token: string;\n refresh_token: string;\n expires_at: number;\n}\n\nexport async function getTokens(): Promise {\n return (await blob.getJSON(TOKENS_KEY)) ?? null;\n}\n\nexport async function saveTokens(t: any) {\n await blob.setJSON(TOKENS_KEY, {\n access_token: t.access_token,\n refresh_token: t.refresh_token,\n // refresh ~1 min early\n expires_at: Date.now() + (t.expires_in ?? 86400) * 1000 - 60_000,\n });\n}\n\nasync function ensureAccessToken(): Promise {\n const tk = await getTokens();\n if (!tk) throw new Error(\"Not connected to Oura yet — visit /auth once.\");\n if (Date.now() < tk.expires_at) return tk.access_token;\n\n // refresh\n const body = new URLSearchParams({\n grant_type: \"refresh_token\",\n refresh_token: tk.refresh_token,\n client_id: OURA_CLIENT_ID,\n client_secret: OURA_CLIENT_SECRET,\n });\n const res = await fetch(OURA_TOKEN, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n if (!res.ok) throw new Error(`Token refresh failed: ${res.status} ${await res.text()}`);\n const json = await res.json();\n // Oura may rotate the refresh token; keep the new one if present.\n if (!json.refresh_token) json.refresh_token = tk.refresh_token;\n await saveTokens(json);\n return json.access_token;\n}\n\nexport async function ouraGet(path: string, params: Record = {}) {\n const token = await ensureAccessToken();\n const url = new URL(`${OURA_API}/${path}`);\n for (const [k, v] of Object.entries(params)) if (v) url.searchParams.set(k, v);\n const res = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });\n if (!res.ok) throw new Error(`Oura ${path} -> ${res.status}: ${await res.text()}`);\n return res.json();\n}\n","deleted","label",[124],"c310b632-2edb-412f-b71c-3b3f12ee0fdf","new-file-3370.ts","908baa88-6756-11f1-be90-1607ee4eb77e",6,["D",1781375691504],[141],"70eb8d4e-fd66-4f2e-89d9-2ea5481accdf","mcp.ts","c3ec2240-6756-11f1-bd99-1607ee4eb77e",8,["D",1781375777700],"// MCP tool catalogue + JSON-RPC handler (streamable HTTP, single-response mode).\nimport { ouraGet } from \"./oura.ts\";\n\nconst dateSchema = {\n type: \"object\",\n properties: {\n start_date: { type: \"string\", description: \"YYYY-MM-DD\" },\n end_date: { type: \"string\", description: \"YYYY-MM-DD\" },\n },\n};\n\nconst TOOLS = [\n { name: \"get_daily_sleep\", description: \"Daily sleep scores & contributors.\", inputSchema: dateSchema },\n { name: \"get_daily_readiness\", description: \"Daily readiness scores & recovery.\", inputSchema: dateSchema },\n { name: \"get_daily_activity\", description: \"Daily activity: steps, calories, score.\", inputSchema: dateSchema },\n { name: \"get_daily_stress\", description: \"Daily stress summary.\", inputSchema: dateSchema },\n { name: \"get_daily_spo2\", description: \"Daily blood oxygen (SpO2).\", inputSchema: dateSchema },\n { name: \"get_sleep\", description: \"Detailed sleep periods (stages, HRV, etc.).\", inputSchema: dateSchema },\n { name: \"get_workouts\", description: \"Logged workouts.\", inputSchema: dateSchema },\n { name: \"get_sessions\", description: \"Moment/meditation sessions.\", inputSchema: dateSchema },\n {\n name: \"get_heartrate\",\n description: \"Heart-rate time series.\",\n inputSchema: {\n type: \"object\",\n properties: {\n start_datetime: { type: \"string\", description: \"ISO 8601, e.g. 2026-06-13T00:00:00+07:00\" },\n end_datetime: { type: \"string\", description: \"ISO 8601\" },\n },\n },\n },\n { name: \"get_personal_info\", description: \"Account/personal info.\", inputSchema: { type: \"object\", properties: {} } },\n];\n\nconst DATE_ENDPOINTS: Record = {\n get_daily_sleep: \"daily_sleep\",\n get_daily_readiness: \"daily_readiness\",\n get_daily_activity: \"daily_activity\",\n get_daily_stress: \"daily_stress\",\n get_daily_spo2: \"daily_spo2\",\n get_sleep: \"sleep\",\n get_workouts: \"workout\",\n get_sessions: \"session\",\n};\n\nasync function callTool(name: string, args: any) {\n if (DATE_ENDPOINTS[name]) {\n return ouraGet(DATE_ENDPOINTS[name], {\n start_date: args?.start_date,\n end_date: args?.end_date,\n });\n }\n if (name === \"get_heartrate\") {\n return ouraGet(\"heartrate\", {\n start_datetime: args?.start_datetime,\n end_datetime: args?.end_datetime,\n });\n }\n if (name === \"get_personal_info\") return ouraGet(\"personal_info\");\n throw new Error(`Unknown tool: ${name}`);\n}\n\nexport async function handleMcp(req: Request): Promise {\n const msg = await req.json();\n const reply = (result: any, id: any) =>\n new Response(JSON.stringify({ jsonrpc: \"2.0\", id, result }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n const fail = (code: number, message: string, id: any) =>\n new Response(JSON.stringify({ jsonrpc: \"2.0\", id, error: { code, message } }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const { method, id, params } = msg;\n\n // notifications carry no id and expect no body\n if (method?.startsWith(\"notifications/\")) return new Response(null, { status: 202 });\n\n if (method === \"initialize\") {\n return reply(\n {\n protocolVersion: params?.protocolVersion ?? \"2025-06-18\",\n capabilities: { tools: {} },\n serverInfo: { name: \"oura-mcp\", version: \"1.0.0\" },\n },\n id,\n );\n }\n if (method === \"ping\") return reply({}, id);\n if (method === \"tools/list\") return reply({ tools: TOOLS }, id);\n if (method === \"tools/call\") {\n try {\n const data = await callTool(params?.name, params?.arguments);\n return reply({ content: [{ type: \"text\", text: JSON.stringify(data) }] }, id);\n } catch (e) {\n return reply({ content: [{ type: \"text\", text: `Error: ${(e as Error).message}` }], isError: true }, id);\n }\n }\n return fail(-32601, `Method not found: ${method}`, id);\n}\n",[147],"3e2d8c27-a0a4-44b5-b665-474f0ad45e7c","main.ts",9,["D",1781375801446],"http","// ──────────────────────────────────────────────────────────────────────────\n// Oura MCP Server — Val Town HTTP entrypoint\n//\n// Remote MCP server that Claude (web + iPhone) can connect to, wrapping the\n// Oura Ring API v2. Handles the one-time Oura OAuth2 flow and stores the\n// refresh token in Val Town blob storage so it survives restarts.\n//\n// SET THESE ENV VARS (val Settings → Environment Variables):\n// OURA_CLIENT_ID — from cloud.ouraring.com OAuth app\n// OURA_CLIENT_SECRET — from cloud.ouraring.com OAuth app\n// MCP_SECRET — a long random string you invent (guards your endpoint)\n//\n// Oura OAuth app redirect URI must be: https:///callback\n//\n// Endpoints:\n// GET / status (detailed only with ?key=MCP_SECRET)\n// GET /auth?key=... start Oura OAuth (visit once)\n// GET /callback Oura redirects here; stores tokens\n// POST /mcp/ the MCP endpoint Claude connects to\n// ──────────────────────────────────────────────────────────────────────────\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { handleMcp } from \"./mcp.ts\";\nimport {\n getTokens,\n OURA_AUTHORIZE,\n OURA_CLIENT_ID,\n OURA_CLIENT_SECRET,\n OURA_TOKEN,\n saveTokens,\n SCOPES,\n STATE_KEY,\n} from \"./oura.ts\";\n\nconst MCP_SECRET = Deno.env.get(\"MCP_SECRET\")!;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const origin = `${url.protocol}//${url.host}`;\n\n // 1) Start OAuth (gated behind the secret so randoms can't overwrite tokens)\n if (path === \"/auth\") {\n if (url.searchParams.get(\"key\") !== MCP_SECRET) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n const state = crypto.randomUUID();\n await blob.setJSON(STATE_KEY, state);\n const auth = new URL(OURA_AUTHORIZE);\n auth.searchParams.set(\"response_type\", \"code\");\n auth.searchParams.set(\"client_id\", OURA_CLIENT_ID);\n auth.searchParams.set(\"redirect_uri\", `${origin}/callback`);\n auth.searchParams.set(\"scope\", SCOPES);\n auth.searchParams.set(\"state\", state);\n // NOTE: Response.redirect is broken on Val Town — build the redirect manually.\n return new Response(null, { status: 302, headers: { Location: auth.toString() } });\n }\n\n // 2) OAuth callback -> exchange code for tokens\n if (path === \"/callback\") {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const saved = await blob.getJSON(STATE_KEY).catch(() => null);\n if (!code) return new Response(\"Missing code\", { status: 400 });\n if (state !== saved) return new Response(\"State mismatch\", { status: 400 });\n\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: `${origin}/callback`,\n client_id: OURA_CLIENT_ID,\n client_secret: OURA_CLIENT_SECRET,\n });\n const res = await fetch(OURA_TOKEN, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n if (!res.ok) return new Response(`Token exchange failed: ${await res.text()}`, { status: 500 });\n await saveTokens(await res.json());\n return new Response(\"✅ Connected to Oura. You can close this tab and use Claude.\");\n }\n\n // 3) MCP endpoint (URL itself is the credential). Wrong secret/method gets the\n // same 404 as any other miss, so guesses can't be distinguished.\n if (path.startsWith(\"/mcp/\")) {\n if (path === `/mcp/${MCP_SECRET}` && req.method === \"POST\") {\n return handleMcp(req);\n }\n return new Response(\"Not Found\", { status: 404 });\n }\n\n // 4) status — detailed (with ready-to-copy URLs) only when the key is supplied\n if (url.searchParams.get(\"key\") === MCP_SECRET) {\n const connected = !!(await getTokens());\n return new Response(\n `Oura MCP server.\\n` +\n `Oura connected: ${connected ? \"yes\" : \"no\"}\\n` +\n `Auth (visit once): ${origin}/auth?key=${MCP_SECRET}\\n` +\n `MCP endpoint (add to Claude): ${origin}/mcp/${MCP_SECRET}`,\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n return new Response(\"ok\", { headers: { \"Content-Type\": \"text/plain\" } });\n}\n",[154],"7670615a-53a4-4f7f-9b92-ebb2d043917e","README.md","de95464e-6756-11f1-a6bc-1607ee4eb77e",["D",1781375822428],"# Oura MCP Server\n\nA remote [MCP](https://modelcontextprotocol.io/) server that lets Claude (web + iPhone)\nread your [Oura Ring](https://ouraring.com/) data. It wraps the Oura API v2, handles the\none-time Oura OAuth2 flow, and stores the refresh token in Val Town blob storage so it\nsurvives restarts.\n\n## Architecture\n\n```mermaid\nflowchart LR\n Claude[Claude web / iPhone] -- \"POST /mcp/SECRET\" --> Main[main.ts router]\n Main --> Mcp[mcp.ts
JSON-RPC + tools]\n Mcp --> Oura[oura.ts
token + API helpers]\n Oura -- \"Bearer token\" --> API[(Oura API v2)]\n Oura <--> Blob[(blob: oura_tokens)]\n Browser[You, once] -- \"GET /auth\" --> Main\n Main -- \"OAuth redirect\" --> OAuth[cloud.ouraring.com]\n OAuth -- \"GET /callback\" --> Main\n```\n\n## Files\n\n- `main.ts` — HTTP entrypoint / router (`/`, `/auth`, `/callback`, `/mcp/`)\n- `mcp.ts` — MCP JSON-RPC handler and the tool catalogue\n- `oura.ts` — Oura token storage/refresh + authenticated GET helper\n\n## Setup\n\n### 1. Create an Oura OAuth app\n\nAt , create an application. Set the\n**Redirect URI** to your val's callback URL:\n\n```\nhttps:///callback\n```\n\nGrab the **Client ID** and **Client Secret**.\n\n### 2. Set environment variables\n\nThis val needs three env vars:\n\n| Key | Value |\n| --- | --- |\n| `OURA_CLIENT_ID` | from your Oura OAuth app |\n| `OURA_CLIENT_SECRET` | from your Oura OAuth app |\n| `MCP_SECRET` | a long random string you invent — guards the endpoint |\n\n### 3. Connect Oura (once)\n\nVisit `https:///auth?key=` in a browser, approve access, and\nyou'll see \"✅ Connected to Oura.\"\n\n### 4. Add to Claude\n\nAdd this as a custom connector / MCP server in Claude:\n\n```\nhttps:///mcp/\n```\n\n## Security model\n\n- The MCP URL itself is the credential — the `MCP_SECRET` path segment is unguessable.\n Wrong secrets and wrong methods return a plain `404`, indistinguishable from any miss.\n- `/auth` is gated behind `?key=` so randoms can't start the flow or\n overwrite your stored tokens.\n- The root `/` returns a bare `ok` unless `?key=` is supplied, in which case\n it shows connection status and ready-to-copy URLs.\n\n## Tools exposed to Claude\n\n`get_daily_sleep`, `get_daily_readiness`, `get_daily_activity`, `get_daily_stress`,\n`get_daily_spo2`, `get_sleep`, `get_workouts`, `get_sessions`, `get_heartrate`,\n`get_personal_info`.\n",[161],"pulls","branches","envVars",{"_172":174,"_175":22},"connections",{"_172":22,"_173":22},"count","unfilledCount",3,"emptyCount",{"_27":160,"_13":161,"_125":162,"_127":-5,"_128":86,"_129":84,"_131":48,"_49":194,"_83":22,"_133":107,"_135":164,"_137":20,"_138":-5,"_182":195,"_96":196},{"_27":153,"_13":154,"_125":63,"_127":-5,"_128":86,"_129":155,"_131":48,"_49":191,"_83":22,"_133":157,"_135":158,"_137":20,"_138":-5,"_182":192,"_96":193},{"_27":146,"_13":147,"_125":148,"_127":-5,"_128":86,"_129":149,"_131":48,"_49":188,"_83":22,"_133":134,"_135":151,"_137":20,"_138":-5,"_182":189,"_96":190},{"_27":140,"_13":141,"_125":142,"_127":-5,"_128":86,"_129":143,"_131":48,"_49":185,"_83":22,"_133":134,"_135":53,"_137":20,"_138":-5,"_182":186,"_96":187},{"_27":123,"_13":124,"_125":126,"_127":-5,"_128":86,"_129":130,"_131":48,"_49":181,"_83":22,"_133":134,"_135":136,"_137":20,"_138":-5,"_182":183,"_96":184},["D",1781375764994],"children",[],[124],["D",1781375691504],[],[141],["D",1781375777700],[],[147],["D",1781375801446],[],[154],["D",1781375822428],[],[161],["D",1781374892592],{"_11":12,"_58":53},{"_11":12,"_52":53,"_54":53,"_36":37,"_55":56,"_57":20},{"_83":84,"_13":85,"_27":86,"_87":59,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":14,"_94":12},"ctx",{"_41":-5,"_115":234,"_235":236,"_237":238,"_239":20,"_240":20,"_241":20,"_242":48,"_243":-5,"_244":-7,"_245":-7,"_246":22,"_247":20,"_248":20,"_249":-5,"_250":20,"_251":20,"_252":20,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":85,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Remixes1

Remixes
1