# HAPI Strava MCP Server (remote · strava.run.mcp.com.ai)

Strava MCP tools for AI: athletes, activities, segments, clubs, routes. Powered by HAPI MCP server.

- Trust score: 69/100 (medium)
- Change this week: +5
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `strava.run.mcp.com.ai`: 69/100 (this document), [markdown](https://verifymcp.io/servers/ai-com-mcp-strava/strava.md), [page](https://verifymcp.io/servers/ai-com-mcp-strava/strava)

## Channel facts

- Endpoint: `https://strava.run.mcp.com.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `3.0.0+0.7.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 78/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 720 tokens (~42/item across 17 items; 13 tools + 4 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http ai-com-mcp-strava https://strava.run.mcp.com.ai/mcp
```

### Codex

```toml
[mcp_servers.ai-com-mcp-strava]
url = "https://strava.run.mcp.com.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-com-mcp-strava": {
      "type": "remote",
      "url": "https://strava.run.mcp.com.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-com-mcp-strava --url https://strava.run.mcp.com.ai/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-com-mcp-strava:
    url: "https://strava.run.mcp.com.ai/mcp"
```

### Other

```json
{
  "mcpServers": {
    "ai-com-mcp-strava": {
      "type": "http",
      "url": "https://strava.run.mcp.com.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 67, +3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 64, −1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 64, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 63)

First indexed and scored.

## MCP tools (13)

### `getStats` (~39 tokens)

Get Athlete Stats

Get Athlete Stats - Returns the activity stats of an athlete. Only includes data from activities set to Everyone visibilty.

Input parameters:

- `id` (integer, required)

### `getLoggedInAthlete` (~44 tokens)

Get Authenticated Athlete

Get Authenticated Athlete - Returns the currently authenticated athlete. Tokens with profile:read_all scope will receive a detailed athlete representation; all others will receive a summary representation.

### `getLoggedInAthleteStarredSegments` (~59 tokens)

List Starred Segments

List Starred Segments - List of the authenticated athlete's starred segments. Private segments are filtered out unless requested by a token with read_all scope.

Input parameters:

- `page` (integer)
- `per_page` (integer)

### `getEffortsBySegmentId` (~70 tokens)

List Segment Efforts

List Segment Efforts - Returns a set of the authenticated athlete's segment efforts for a given segment.  Requires subscription.

Input parameters:

- `end_date_local` (string)
- `per_page` (integer)
- `segment_id` (integer, required)
- `start_date_local` (string)

### `exploreSegments` (~53 tokens)

Explore segments

Explore segments - Returns the top 10 segments matching a specified query.

Input parameters:

- `activity_type` (string)
- `bounds` (array, required)
- `max_cat` (integer)
- `min_cat` (integer)

### `getSegmentEffortById` (~42 tokens)

Get Segment Effort

Get Segment Effort - Returns a segment effort from an activity that is owned by the authenticated athlete. Requires subscription.

Input parameters:

- `id` (integer, required)

### `getClubById` (~28 tokens)

Get Club

Get Club - Returns a given club using its identifier.

Input parameters:

- `id` (integer, required)

### `getClubMembersById` (~51 tokens)

List Club Members

List Club Members - Returns a list of the athletes who are members of a given club.

Input parameters:

- `id` (integer, required)
- `page` (integer)
- `per_page` (integer)

### `getClubAdminsById` (~49 tokens)

List Club Administrators

List Club Administrators - Returns a list of the administrators of a given club.

Input parameters:

- `id` (integer, required)
- `page` (integer)
- `per_page` (integer)

### `getClubActivitiesById` (~76 tokens)

List Club Activities

List Club Activities - Retrieve recent activities from members of a specific club. The authenticated athlete must belong to the requested club in order to hit this endpoint. Pagination is supported. Athlete profile visibility is respected for all activities.

Input parameters:

- `id` (integer, required)
- `page` (integer)
- `per_page` (integer)

### `getLoggedInAthleteClubs` (~45 tokens)

List Athlete Clubs

List Athlete Clubs - Returns a list of the clubs whose membership includes the authenticated athlete.

Input parameters:

- `page` (integer)
- `per_page` (integer)

### `getGearById` (~27 tokens)

Get Equipment

Get Equipment - Returns an equipment using its identifier.

Input parameters:

- `id` (string, required)

### `getRoutesByAthleteId` (~58 tokens)

List Athlete Routes

List Athlete Routes - Returns a list of the routes created by the authenticated athlete. Private routes are filtered out unless requested by a token with read_all scope.

Input parameters:

- `page` (integer)
- `per_page` (integer)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-com-mcp-strava/strava#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 68
- 2026-08-01: 68
- 2026-07-31: 67
- 2026-07-30: 64
- 2026-07-29: 65
- 2026-07-28: 64
- 2026-07-27: 64
- 2026-07-26: 63

## Links

- Remote endpoint: https://strava.run.mcp.com.ai/mcp
- Repository: https://github.com/la-rebelion/hapimcp
- Website: https://run.mcp.com.ai/
- Changelog RSS feed: https://verifymcp.io/servers/ai-com-mcp-strava/strava/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-com-mcp-strava/strava/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ai-com-mcp-strava/strava
