# io.github.davidmosiah/wellness-air (npm · wellness-air)

Local-first air-quality MCP for AI agents — AirGradient, AirThings, PurpleAir, IQAir, Awair.

- Trust score: 68/100 (medium)
- Change this week: +22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `wellness-air`: 68/100 (this document), [markdown](https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air.md), [page](https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air)

## Channel facts

- Registry: `npm`
- Package: `wellness-air`
- Version: `0.5.6`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 95), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 95), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 1 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1498 tokens (~78/item across 19 items; 19 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 95/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 85% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add davidmosiah-wellness-air -- npx -y wellness-air
```

### Codex

```bash
codex mcp add davidmosiah-wellness-air -- npx -y wellness-air
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "davidmosiah-wellness-air": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "wellness-air"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add davidmosiah-wellness-air --command npx --arg -y --arg wellness-air
```

### Hermes

```yaml
mcp_servers:
  davidmosiah-wellness-air:
    command: "npx"
    args: ["-y", "wellness-air"]
```

### Other

```json
{
  "mcpServers": {
    "davidmosiah-wellness-air": {
      "command": "npx",
      "args": [
        "-y",
        "wellness-air"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 68, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 64, +7)

- [security improvement] Known CVEs: unverified → partial
- [functional improvement] Dependency health: unverified → partial

### 2026-08-01 (score 57, −10)

- [security regression] Known CVEs: partial → unverified
- [functional regression] Dependency health: partial → unverified

### 2026-07-31 (score 67, +42)

- [security regression] Provenance: unverified → fail
- [security regression] Malware scan: pass → unverified
- [security improvement] Install scripts: unverified → pass
- [functional regression] Dependency health: partial → unverified
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional] Licence: MIT
- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 25, +1)

- [functional improvement] Dependency health: unverified → partial

### 2026-07-28 (score 24, −22)

- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (19)

### `air_agent_manifest` (~52 tokens)

Air agent manifest

Returns the wellness-air agent manifest: tool list, supported clients, env vars, recommended first calls, capabilities, privacy posture, and community links.

Input parameters:

- `client` (string): Optional client name for tailored manifest hints.

### `air_capabilities` (~27 tokens)

Air capabilities

Lists supported providers, configured providers (via env vars), available metrics, and privacy modes.

### `air_connection_status` (~31 tokens)

Air connection status

Reports which providers are configured, which is the default, and any warnings the agent should surface to the user.

### `air_privacy_audit` (~33 tokens)

Air privacy audit

Returns what wellness-air stores locally, what it sends to providers, what it never logs, and agent rules.

### `air_data_inventory` (~29 tokens)

Air data inventory

Returns the inventory of air-quality metrics this connector exposes plus per-provider availability hints (no remote calls).

### `air_current_reading` (~69 tokens)

Air current reading

Fetches the most recent air-quality reading for a location. Defaults to the AirGradient public sensor at WELLNESS_AIR_DEFAULT_LOCATION (or pass locationId).

Input parameters:

- `locationId` (string): Provider-specific location identifier.
- `provider` (string): Provider to query. Defaults to airgradient.

### `air_list_devices` (~55 tokens)

Air list devices

Lists devices owned by the configured provider account. v0.3 supports AirThings (requires AIRTHINGS_CLIENT_ID/SECRET). For AirGradient owned sensors use air_search_public_sensors instead.

Input parameters:

- `provider` (string)

### `air_aqi_check` (~45 tokens)

Air AQI check

Returns just the AQI number + band for the configured location. Use for fast 'is the air OK to go outside?' prompts.

Input parameters:

- `locationId` (string)

### `air_daily_summary` (~68 tokens)

Air daily summary

Returns a synthesized daily snapshot for a location. v0.1 returns the current reading framed as a daily snapshot; richer multi-hour aggregation arrives in v0.2.

Input parameters:

- `date` (string): YYYY-MM-DD; defaults to today (local timezone).
- `locationId` (string)

### `air_compare_locations` (~39 tokens)

Air compare locations

Compare current readings across multiple location IDs (default: AirGradient public sensors).

Input parameters:

- `locationIds` (array, required): Two to ten provider-specific location identifiers.

### `air_search_public_sensors` (~57 tokens)

Air search public sensors

Helper for discovering AirGradient public sensors. Returns a curated list of well-maintained public sensors plus a hint to the AirGradient map for finding more.

Input parameters:

- `query` (string): Free-text city / region hint for the human.

### `air_quickstart` (~51 tokens)

Air quickstart

Returns a personalized 3-step setup walkthrough for the human based on the current agent/env state. Call this first when the user asks 'how do I use this?'

Input parameters:

- `client` (string)

### `air_profile_get` (~57 tokens)

Air profile get

Returns the shared Delx Wellness profile (~/.delx-wellness/profile.json). Read-only. Surfaces the user's preferred location, sensitivity flags (asthma, etc.), and units so wellness-air can choose tighter AQI thresholds.

### `air_profile_update` (~115 tokens)

Air profile update

Persist a partial patch to the shared Delx Wellness profile. Requires explicit_user_intent: true. Rejects any field containing oauth/token/secret/password/cookie/refresh/api_key/session — the profile is for non-secret wellness context only.

Input parameters:

- `explicit_user_intent` (boolean): Must be true. Pass only after the user explicitly asked to save/update profile data.
- `patch` (object, required): Partial WellnessProfileDocument patch. Top-level keys: profile, goals, devices, training, nutrition, preferences, safety, notes.

### `air_onboarding` (~80 tokens)

Air onboarding

Returns the 11-question onboarding flow for the shared Delx Wellness profile. Read-only. The agent should ask these questions next so wellness-air (and the rest of the wellness stack) can personalize responses — non-secret data only, stored at ~/.delx-wellness/profile.json.

Input parameters:

- `locale` (string): Onboarding locale. Defaults to en.

### `air_demo` (~44 tokens)

Air demo

Returns a realistic example payload of what air_current_reading + air_daily_summary look like in practice. Use this to help users understand what the connector will return BEFORE they configure anything.

### `air_health_recommendation` (~187 tokens)

Air health recommendation

Quick PM2.5-centric health recommendation. Pass current PM2.5 (µg/m³) and optionally CO2 (ppm) and VOC index; returns WHO/EPA-aligned bands per pollutant, the overall worst band, and a deduplicated list of plain-language actions. Use this when you have a reading already and just want a 'what should I do?' answer. For richer four-pollutant classification with full source citations use air_health_bands.

Input parameters:

- `co2_ppm` (number): Optional. CO2 concentration in parts per million.
- `pm25_ug_m3` (number, required): Required. PM2.5 concentration in micrograms per cubic meter.
- `response_format` (string): Output shape. Defaults to json.
- `voc_index` (number): Optional. VOC index (sensor-reported 0-500 style).

### `air_health_bands` (~233 tokens)

Air health bands

Classify PM2.5, PM10, CO2, and VOC readings into WHO 2021 / EPA / ASHRAE / UBA health bands. Pass readings directly, or omit them and the tool will fetch the current reading from the default provider (PM2.5, PM10, CO2, VOC where available). Returns per-pollutant band + the worst signal across pollutants + deduplicated recommended actions + source citations.

Input parameters:

- `co2` (number): CO2 in ppm. If omitted, pulled from air_current_reading.
- `locationId` (string): Provider-specific location id for fetch fallback.
- `pm10` (number): PM10 in µg/m³. If omitted, pulled from air_current_reading.
- `pm25` (number): PM2.5 in µg/m³. If omitted, pulled from air_current_reading.
- `provider` (string): Provider for fetch fallback. Defaults to airgradient.
- `voc` (number): tVOC in ppb. If omitted, pulled from air_current_reading.tvoc when present.

### `air_trend` (~226 tokens)

Air trend

Windowed trend analysis for PM2.5 / CO2 / VOC. Pulls past measurements from AirGradient (public or owned) and returns per-pollutant mean / median / min / max / current / rate_of_change_per_hour / peak_at / trough_at / time_above_threshold_minutes plus an optional natural-language observation (only when the data supports one). Pass `pollutant: 'all'` (default) for an array of per-pollutant trends plus `worst_pollutant` per current WHO/ASHRAE bands. Use this for 'is PM2.5 climbing?' / 'was CO2 stable overnight?' / 'when did VOC spike?' kinds of questions.

Input parameters:

- `hours` (number): Analysis window in hours (1-168, default 24).
- `locationId` (string): AirGradient locationId. Falls back to WELLNESS_AIR_DEFAULT_LOCATION.
- `pollutant` (string): Pollutant to analyze. Default 'all'.
- `response_format` (string): Output shape. Defaults to json.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air#diagnostics

## Score history

- 2026-08-03: 68
- 2026-08-02: 64
- 2026-08-01: 57
- 2026-07-31: 67
- 2026-07-29: 25
- 2026-07-28: 24
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/wellness-air
- Socket report: https://socket.dev/npm/package/wellness-air
- Repository: https://github.com/davidmosiah/wellness-air
- Website: https://wellness.delx.ai/connectors/air
- Changelog RSS feed: https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air/changelog.json
- HTML version of this page: https://verifymcp.io/servers/davidmosiah-wellness-air/wellness-air