io.github.CSOAI-ORG/workout-planner-ai-mcp

Create workout plans, track progress, and get exercise suggestions.

Source

Official Registry

Updated

2026-08-19

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Summary

The available material is minimal, but the MCP tool comes from the official registry, is open source, and has recent updates, with no clear high-risk red flags visible. It is flagged as executing code, so it likely runs a local server process; given the lack of README and permission details, it should be used with normal caution.

CredentialsLow risk

The materials state that no keys or environment variables are required, and there is no indication that API keys, OAuth tokens, or other sensitive credentials must be provided, so credential exposure/abuse risk appears low.

Network egressLow risk

No remote host endpoints are declared, and the materials do not describe any external API or cloud-service interaction; based on the available facts, there is no clear user-data egress path.

Code executionCaution

System checks indicate that it executes code; as an MCP server, it typically needs to start a local process to provide functionality. This is normal for this class of tool, but the lack of a README prevents confirming whether it invokes additional system capabilities.

Data accessCaution

The description only mentions creating workout plans, tracking progress, and suggesting exercises, so it likely handles user-provided fitness-related data; however, the materials do not specify what local files, databases, or other resources it reads or writes, making its data-access scope insufficiently transparent.

Supply chainCaution

Positive factors include its presence in the official registry, an open-source repository that can be audited, and updates within the last year; however, the README is missing, no license is declared, and community adoption is very low (0 stars), so supply-chain trust is moderate but cautious.

Recommendations

Review the repository source code and dependency list before installation to confirm whether there are undeclared file operations or network requests.
Run it in an isolated environment and limit the local directories and system permissions it can access.
If used for workout tracking, avoid entering unnecessary sensitive personal or health-related information.
Prefer waiting for a proper README, license, and fuller documentation before long-term use.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.CSOAI-ORG/workout-planner-ai-mcp" MCP server from askskill:
Run: claude mcp add 'io-github-csoai-org-workout-planner-ai-mcp' -- npx -y workout-planner-ai-mcp