Trainer Connect
REMOTE · API.TRAINERCONNECT.COM.BR
Manage students, workouts, appointments and payments through your personal trainer account.
Available components
Last scanned (7 hours ago)
Scores higher than 96% of remote servers
Reachable. Last reached 5 Nov 2026.
Category CRM and Sales
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 16095 tokens (~56/item across 283 items; 283 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage86
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 58% of tool parameters carry a description.Partial
Tool Safety95
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 8 of 10 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "list_charges" implies "charge" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 284 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
- Tool “get_anamnesis_overview” rewrote its description, which is the text the model reads security
- New tool “list_workouts_to_renew” functional
- New tool “update_program_exercise” functional
- “get_anamnesis_overview” added an optional parameter “status” cosmetic
- 4 Nov 26 0
- Tool “get_active_diets” rewrote its description, which is the text the model reads security
- Tool “get_latest_assessments” rewrote its description, which is the text the model reads security
- Tool “list_inactive_students” rewrote its description, which is the text the model reads security
- Tool “list_leads” rewrote its description, which is the text the model reads security
- Tool “list_payments” rewrote its description, which is the text the model reads security
- Tool “list_workout_suggestions” rewrote its description, which is the text the model reads security
- Tool “read_lead_chat” rewrote its description, which is the text the model reads security
- “get_latest_assessments” added an optional parameter “days” cosmetic
- “get_latest_assessments” added an optional parameter “only_due” cosmetic
- “list_workout_suggestions” added an optional parameter “status” cosmetic
- Tool “get_active_diets” changed its title: See active diets → See students diets cosmetic
- 3 Nov 26 +1
- Tool “get_checkins_overview” rewrote its description, which is the text the model reads security
- Tool “get_schedule” rewrote its description, which is the text the model reads security
- Tool “list_inactive_students” rewrote its description, which is the text the model reads security
- 2 Nov 26 0
- New tool “list_inactive_students” functional
- 1 Nov 26 +1
- A breaking change shipped without a version bump: still 3.0.0 ▼ security
- Tool “list_inactive_students” was removed ▼ security
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
- Tool “list_payments” rewrote its description, which is the text the model reads security
- “list_payments” added an optional parameter “student” cosmetic
- 27 Oct 26 0
- New tool “list_inactive_students” functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.trainerconnect.com.br/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=trainerconnect.com.br | CN=YE2,O=Let's Encrypt,C=US | 2 Oct 2026 | 31 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 6bd76400d5b877937fd28f1ac6c767ccd4b |
| SANs: *.trainerconnect.com.br, trainerconnect.com.br | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.trainerconnect.com.br. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| br. | present | 38298 | 13 | Verified |
| com.br. | present | 50930 | 13 | Verified |
| trainerconnect.com.br. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="mcp", resource_metadata="https://api.trainerconnect.com.br/.well-known/oauth-protected-resource/mcp"
Bearer realm="mcp", resource_metadata="https://api.trainerconnect.com.br/.well-known/oauth-protected-resource/mcp"| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| x-content-type-options | nosniff |
Protected resource metadata
| Document | https://api.trainerconnect.com.br/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://api.trainerconnect.com.br/mcp |
| Authorisation server | https://api.trainerconnect.com.br |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.trainerconnect.com.br/mcp | Verified | 200 | |
| http (plaintext) | http://api.trainerconnect.com.br/mcp | HTTPS enforced | 301 | https://api.trainerconnect.com.br/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_ai_credits_statement See my AI credits history ~21
What used and added AI credits. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_anamnesis_form See an anamnesis form ~37
The questions of one anamnesis form.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Id from list_anamnesis_forms. |
No output schema declared.
No examples provided.
get_anamnesis_overview See anamnesis status ~183
Every active student with the anamnesis (health questionnaire) status: pending (sent, not answered, not expired; waiting_days and expires_at), answered (last_submitted_at) or never_sent (never received one, or it expired unanswered). Each row has name, phone to reach out (the guardian's for a dependent) and app_url: the student profile, or the answer already open when answered. status filters one group: status=pending answers "who has not answered the anamnesis yet?", longest wait first; status=never_sent lists who still needs send_anamnesis. Next: list_anamnesis_answers to read one, or send_anamnesis. Read only: nothing is sent to the student.
| Name | Type | Req | Description |
|---|---|---|---|
| status | string | – | Only one group: pending, answered or never_sent. Default all. |
No output schema declared.
No examples provided.
get_anticipation_limits See what I can anticipate ~36
How much of the future receivables can be anticipated now and the fee. Read only: anticipating is in the app.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_assessment See an assessment ~34
One physical assessment with every measurement and the photos.
| Name | Type | Req | Description |
|---|---|---|---|
| assessmentId | integer | yes | The id from list_assessments. |
No output schema declared.
No examples provided.
get_assessment_ai_analysis See the AI analysis of an assessment ~40
The latest AI analysis written for one assessment, if there is one.
| Name | Type | Req | Description |
|---|---|---|---|
| assessmentId | integer | yes | The id from list_assessments. |
No output schema declared.
No examples provided.
get_assessment_ai_quota See my AI assessment quota ~25
How many AI assessment analyses the trainer has left. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_autopilot See autopilot actions ~30
What the app's autopilot did or suggests (reminders, follow-ups) for the trainer.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_balance See my balance ~28
Balance available and to receive in the trainer's wallet. Read only: withdrawals stay in the app.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_catalog_workout See a catalog workout ~31
One catalog workout with every exercise.
| Name | Type | Req | Description |
|---|---|---|---|
| workoutId | integer | yes | Id from list_catalog_workouts. |
No output schema declared.
No examples provided.
get_chat_block_status See if a chat is blocked ~41
Whether the trainer blocked a person in the chat, or was blocked.
| Name | Type | Req | Description |
|---|---|---|---|
| otherUserId | integer | yes | The other person's user id (student_id). |
No output schema declared.
No examples provided.
get_checkin_status See who answered a check-in ~40
For one check-in questionnaire: which students got it, answered or are late.
| Name | Type | Req | Description |
|---|---|---|---|
| templateId | integer | yes | Id from list_checkin_templates. |
No output schema declared.
No examples provided.
get_checkins_overview See check-ins status ~70
Active check-ins of every student, late ones first: student name, how many are overdue, last answer date and mood, and the app_url of the student check-ins screen. Use it to answer "who is late on the check-in?" and then list_checkin_answers for one student.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_checkout_funnel See my sales page funnel ~23
How many people opened the plan checkout, started and finished it.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_competition See a challenge ~31
One challenge with participants and ranking.
| Name | Type | Req | Description |
|---|---|---|---|
| competitionId | integer | yes | Id from list_competitions. |
No output schema declared.
No examples provided.
get_contract See a plan ~35
One of the trainer's plans/contracts with its terms. Read only.
| Name | Type | Req | Description |
|---|---|---|---|
| contractId | integer | yes | Id from list_contracts. |
No output schema declared.
No examples provided.
get_contracts_overview See my plans overview ~26
Totals per plan: active students, revenue per month. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_diet_adherence See diet adherence ~61
Percentage of meals the student checked in the last days, day by day.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | How many days back, 7 by default, at most 30. |
| studentId | integer | yes | The student_id from list_students. |
No output schema declared.
No examples provided.
get_diet_plan See a diet plan ~37
One diet plan with meals, foods, amounts and macros.
| Name | Type | Req | Description |
|---|---|---|---|
| planId | integer | yes | Id from list_diet_plans. |
No output schema declared.
No examples provided.
get_digital_account_balance See my digital account balance ~20
Balance of the digital account. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_digital_account_statement See my digital account statement ~54
Entries and exits of the digital account in a period. Read only.
| Name | Type | Req | Description |
|---|---|---|---|
| end_date | string | – | YYYY-MM-DD. |
| offset | integer | – | – |
| start_date | string | – | YYYY-MM-DD. |
No output schema declared.
No examples provided.
get_digital_account_status See my digital account ~33
State of the trainer's digital account (Asaas): approved, pending documents or not opened. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_feature_request See an idea ~32
One idea for the app with votes and comments.
| Name | Type | Req | Description |
|---|---|---|---|
| ideaId | integer | yes | Id from list_feature_requests. |
No output schema declared.
No examples provided.
get_fee_settings See who pays the fees ~46
Fee settings per payment method: platform and processing fees and whether the student or the trainer pays them. Read only.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | – | Gateway; the active one by default. |
No output schema declared.
No examples provided.
get_financial_metrics See my business numbers ~27
Monthly revenue, recurring revenue, default rate, average ticket and churn. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_free_slots See free time slots ~34
The trainer's free time slots on a date, for booking a class.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | yes | YYYY-MM-DD. |
No output schema declared.
No examples provided.
get_gym_report See gym indicators ~30
Gym indicators: active members, plans with access, revenue per month and check-ins at the door.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_invite_link Get my invite link ~30
The trainer's shareable link: a student who opens it signs up already linked to this trainer.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_latest_assessments See latest assessment of each student ~167
Every active student with the date of the latest physical assessment (null = never assessed), days_since, weight and body fat, whether a reassessment is already booked, and the app_url of the student assessments screen. due true = past the reassessment interval (90 days by default, counted from the start of the student link when never assessed) and nothing booked, the same rule as the app reminder. only_due true answers "who is due a reassessment?", longest wait first. Next: list_assessments for one student, or schedule_class to book it. Read only.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Reassessment interval in days, 30 to 365. Default 90. |
| only_due | boolean | – | Only students due a reassessment. Default false. |
No output schema declared.
No examples provided.
get_lead See a lead ~37
One lead: contact, origin, status, notes and the first message.
| Name | Type | Req | Description |
|---|---|---|---|
| leadId | integer | yes | Id from list_leads. |
No output schema declared.
No examples provided.
get_leads_stats See my leads numbers ~22
Leads by status and origin, and how many became students.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_library_exercise See a library exercise ~39
One exercise of the app library with instructions, muscles, equipment and video.
| Name | Type | Req | Description |
|---|---|---|---|
| exerciseId | integer | yes | Id from list_library_exercises. |
No output schema declared.
No examples provided.
get_monthly_closing See the monthly closing ~39
Classes given, missed and make-up credits per student in a month.
| Name | Type | Req | Description |
|---|---|---|---|
| month | string | – | YYYY-MM, current month by default. |
No output schema declared.
No examples provided.
get_my_account See my account ~30
The connected trainer's account: name, e-mail, phone, language, appearance and the app settings.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_profile See my profile ~23
The trainer's profile in the app (name, contact, specialties).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_team_role See my role in the team ~29
Whether the connected user is the account owner or a team member, and what they can do.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_trainer_connect_plan See my Trainer Connect plan ~40
The trainer's own Trainer Connect plan: active, trial, grace period and renewal. Read only: changing the plan is in the app.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_partial_workout_log See a workout left halfway ~43
What the student already did in a workout that was started and not finished (sets, loads).
| Name | Type | Req | Description |
|---|---|---|---|
| workoutId | integer | yes | Id from list_workouts. |
No output schema declared.
No examples provided.
get_payment See a payment ~38
One payment: amount, due date, status, method and receipt. Read only.
| Name | Type | Req | Description |
|---|---|---|---|
| paymentId | integer | yes | Id from list_payments. |
No output schema declared.
No examples provided.
get_program See a training program ~37
One training program with its weeks, days and exercises.
| Name | Type | Req | Description |
|---|---|---|---|
| programId | integer | yes | Id from list_programs or list_student_programs. |
No output schema declared.
No examples provided.
get_public_profile See my public page ~28
The trainer's public page (bio, specialties, photos, link) as students see it.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_public_profile_stats See my public page visits ~18
Visits and contacts the public page got.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_receiving_status See my receiving account ~28
Which gateway receives the students' payments and what is still missing to receive. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_referrals See my referrals ~20
Trainers and students the trainer referred, and the rewards.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_schedule See my schedule ~126
Lists the trainer's classes and appointments between two dates (today and the next 7 days by default): date and time, student, phone to confirm, type, status, place, notes, video link of the online ones and the app_url to open each appointment in the app. Times are in Brazil time (America/Sao_Paulo).
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | First day, YYYY-MM-DD. Default: today. |
| to | string | – | Last day, YYYY-MM-DD. Default: 7 days after "from". At most 62 days after "from". |
No output schema declared.
No examples provided.
get_session_events See what happened in a session ~42
Set-by-set events of a workout session (sets done, loads, pauses).
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | integer | yes | Id from list_student_sessions or list_live_sessions. |
No output schema declared.
No examples provided.
get_statement See my statement ~21
Wallet statement: what came in and the fees. Read only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_student See a student ~69
Gets one of the trainer's students: profile (goal, age, weight, height), the active workouts with their exercises, sets, reps and load, and the latest logged sessions with how many in the last 30 days.
| Name | Type | Req | Description |
|---|---|---|---|
| student_id | integer | yes | The student_id returned by list_students. |
No output schema declared.
No examples provided.
get_student_ai_consent See a student AI consent ~39
Whether the student agreed to have assessments analysed by AI, and when.
| Name | Type | Req | Description |
|---|---|---|---|
| studentId | integer | yes | The student_id from list_students. |
No output schema declared.
No examples provided.
get_student_diet_context See what the app knows to write a diet ~52
The student summary the app's AI uses to write diet plans (age, sex, goal, restrictions), plus the AI quota left.
| Name | Type | Req | Description |
|---|---|---|---|
| student_id | integer | yes | The student_id from list_students. |
No output schema declared.
No examples provided.
How do I install the Trainer Connect MCP server?
Trainer Connect is a hosted endpoint at https://api.trainerconnect.com.br/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.trainerconnect.com.br
claude mcp add --transport http br-com-trainerconnect-personal-trainer 'https://api.trainerconnect.com.br/mcp'
What is the Trainer Connect MCP server?
Trainer Connect is an MCP server listed in the public MCP registry as br.com.trainerconnect/personal-trainer. Manage students, workouts, appointments and payments through your personal trainer account. This page covers its hosted endpoint (https://api.trainerconnect.com.br/mcp).
Is the Trainer Connect MCP server safe to use?
Trainer Connect scores 88 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Trainer Connect MCP server expose?
Trainer Connect exposes 283 tools: list_students, list_inactive_students, list_workouts_to_renew, get_checkins_overview, get_latest_assessments, and 278 more. Their descriptions and schemas cost roughly 15,509 tokens of context every time the server is loaded.
Does the Trainer Connect MCP server require authentication?
Yes. Trainer Connect asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Trainer Connect MCP server still maintained?
Trainer Connect is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.