Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

dev.anatome/anatome

REMOTE · ANATOME.DEV · SCANNED OCT 12

Log workouts and meals by telling your AI. 873 exercises, muscle diagrams, food lookup.

Available components

0 this week 79 Trust /100

Recent critical change

Authorization (13 Aug 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability79
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 3327 tokens (~75/item across 44 items; 36 tools + 8 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage78
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 22% of tool parameters carry a description.Partial
  • Structured output schemas are declared (56% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 38 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
  • Supports UI / widget rendering.Pass
Install

How do I install the dev.anatome/anatome MCP server?

dev.anatome/anatome is a hosted endpoint at https://anatome.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · anatome.dev

# add to Claude Code
claude mcp add --transport http dev-anatome-anatome 'https://anatome.dev/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "dev-anatome-anatome": {
      "url": "https://anatome.dev/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "dev-anatome-anatome": {
      "type": "http",
      "url": "https://anatome.dev/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.dev-anatome-anatome]
url = "https://anatome.dev/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-anatome-anatome": {
      "type": "remote",
      "url": "https://anatome.dev/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add dev-anatome-anatome --url 'https://anatome.dev/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  dev-anatome-anatome:
    url: "https://anatome.dev/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "dev-anatome-anatome": {
      "Transport": "http",
      "Url": "https://anatome.dev/mcp"
    }
  }
}
# add to Vellum
assistant mcp add dev-anatome-anatome -t streamable-http -u 'https://anatome.dev/mcp'
// mcp.json
{
  "mcpServers": {
    "dev-anatome-anatome": {
      "type": "http",
      "url": "https://anatome.dev/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 13 Sept 26 +5
    • Stability: fail → pass ▲ security
  • 12 Sept 26 −3

    No change was recorded against any check on this day. Stability & Change Management went from 86 to 69.

  • 11 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 82 to 86.

  • 9 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 76 to 79.

  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 17 Aug 26 0
    • Tool “get_events” rewrote its description, which is the text the model reads security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 12 Oct 2026 · Probed https://anatome.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=anatome.dev CN=WE1,O=Google Trust Services,C=US 9 Oct 2026 7 Jan 2027 ECDSA 256 ECDSA-SHA256 99e49e4eafda43200eca99908621ed20
SANs: anatome.dev, wiki.anatome.dev, *.wiki.anatome.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of anatome.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
anatome.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://anatome.dev/mcp Verified 200
http (plaintext) http://anatome.dev/mcp HTTPS enforced 301 https://anatome.dev/mcp
MCP tools · 36 exposed · ~2,974 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
ai_meal_plan ~78

Draft a meal plan. Not medical advice. confirm:true required. Pass health constraints so the draft can honour them.

NameTypeReqDescription
confirmbooleanyes–
daily_caloriesnumber––
daysnumberyes–
diet_typestring––
goalstring––
healthobject––

No output schema declared.

No examples provided.

ai_parse_meal ~45

Parse free-text meal description ('2 eggs and toast with butter') into structured items with grams + macros.

NameTypeReqDescription
localestring––
textstringyes–

No output schema declared.

No examples provided.

ai_photo_macros ~96

Analyze a meal image and estimate foods + macros. Pass exactly one of image_url or image_base64. Vision model, capped separately from the text AI budget (free tier 1/mo).

NameTypeReqDescription
image_base64string–Base64-encoded image bytes, no data: prefix. Mutually exclusive with image_url.
image_urlstring–Public URL of the image. Mutually exclusive with image_base64.

No output schema declared.

No examples provided.

ai_workout_plan ~70

Draft a workout plan. Not medical advice. confirm:true required. Pass health constraints so the draft can honour them.

NameTypeReqDescription
confirmbooleanyes–
days_per_weeknumberyes–
experiencestring––
goalstring––
healthobject––

No output schema declared.

No examples provided.

delete_meal ~41

Delete a logged meal by id (soft delete, 30-day recovery window). Requires X-App-User-Id.

NameTypeReqDescription
meal_idstringyes–
NameTypeReqDescription
deletedstring––

No examples provided.

delete_workout ~36

Delete a logged workout and its sets by id (soft delete, 30-day recovery window).

NameTypeReqDescription
workout_idstringyes–
NameTypeReqDescription
deletedstring––

No examples provided.

export_data ~91

Export the signed-in user's data as JSON. Pass `domains` (e.g. meals,workouts) or confirm:true for a full copy. Identity comes from the token, never a caller-supplied user id.

NameTypeReqDescription
confirmboolean–Required true for a full dump when domains is omitted.
domainsstring–Comma-separated subset, e.g. 'meals,workouts'.

No output schema declared.

No examples provided.

generate_muscle_image ~50

Render an SVG diagram of the human body with muscles highlighted in arbitrary colors. Returns SVG.

NameTypeReqDescription
genderstring––
layersarrayyes–
viewstring––
NameTypeReqDescription
formatstring––
muscles_renderedarray––
svgstring––

No examples provided.

get_body_metrics ~93

List the current app user's body metrics / measurements (weight, height, bicep, body fat, etc.), most recent first. Filter by metric_type (e.g. 'weight', 'bicep') and/or a date range. Requires an app user context.

NameTypeReqDescription
fromstring––
limitnumber––
metric_typestring––
tostring––
NameTypeReqDescription
itemsarray––

No examples provided.

get_cardio_activities ~46

List the current app user's cardio activities (most recent first).

NameTypeReqDescription
date_fromstring––
date_tostring––
limitnumber––
NameTypeReqDescription
itemsarray––

No examples provided.

get_events ~143

What changed since a cursor, including DELETES, which a list read cannot show. Returns {seq, entity, id, action}. Pass the last seq back as `since` on the next call to receive only entries after it; omit `since` for a first sync. seq is a global counter: gaps in your feed are other accounts' events, not lost data. Judge completeness from has_more, not seq.

NameTypeReqDescription
entitiesstring–Optional comma-separated filter, e.g. 'workout,meal'.
limitnumber––
sincestring–Cursor from the previous call's last seq. Omit for a first sync.

No output schema declared.

No examples provided.

get_exercise ~41

Fetch one exercise by name, id, or random.

NameTypeReqDescription
idstring––
namestring––
randomboolean––

No output schema declared.

No examples provided.

get_meals ~36

List the current app user's meals for a date range.

NameTypeReqDescription
date_fromstring––
date_tostring––
NameTypeReqDescription
itemsarray––

No examples provided.

get_muscle_recovery ~92

Per-muscle 7-day recovery % (Fitbod parity) — the 'what should I train today?' input. Recommends fresh muscles. Pass include_bodyweight=true to add the user's bodyweight to bodyweight exercises so recovery reflects real load.

NameTypeReqDescription
include_bodyweightboolean–If true, add the user's bodyweight to bodyweight exercises (requires a logged weight or profile.weight).
NameTypeReqDescription
musclesarray––
threshold_volumenumber––
window_daysnumber––

No examples provided.

get_nutrition_daily ~93

Per-day calories, macros, fiber/sugar/sodium/alcohol, water, targets and adherence % over a date range (default: last 7 days). The 'how am I tracking today?' tool. Requires X-App-User-Id.

NameTypeReqDescription
date_fromstring–YYYY-MM-DD
date_tostring–YYYY-MM-DD (defaults to the user's today, in their timezone)
NameTypeReqDescription
daysarray––
fromstring––
limits–––
targets–––
tostring––

No examples provided.

get_profile ~36

Get the current app user's fitness profile (height, weight, macro + water goals, diet, active sports). Requires an app user context.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_progress ~247

Any progression metric for the current user — pick one in `metric`. training_load is acute:chronic (>1.5 ramping too fast, <0.8 detraining); muscle_recovery is per-muscle freshness; correlate takes metric_a vs metric_b. Only completed sets count.

NameTypeReqDescription
bucketstring––
daysnumber–training_load window
exercisestring–Required for prs; optional filter for volume, one_rep_max and compare_periods.
fromstring–YYYY-MM-DD
goal_idstring–goal_trajectory
group_bystring–volume only
include_bodyweightboolean–Add the user's bodyweight to bodyweight exercises (pull-ups, dips). prs, volume and muscle_recovery.
methodstring–training_load: auto | power | hr | rpe
metricstringyes–
metric_astring–correlate
metric_bstring–correlate
sportstring–training_load and cardio_prs
tostring–YYYY-MM-DD
windownumber–weight_trend smoothing window

No output schema declared.

No examples provided.

get_routine ~56

Fetch a single curated routine by slug with all days + slots fully expanded (exercises, sets, reps ranges, rest, superset groupings). The 'give me a full program' tool.

NameTypeReqDescription
slugstringyes–

No output schema declared.

No examples provided.

get_water ~52

List the current app user's water intake entries for a date range. Requires X-App-User-Id.

NameTypeReqDescription
datestring––
date_fromstring––
date_tostring––

No output schema declared.

No examples provided.

get_workouts ~43

List the current app user's workouts (most recent first).

NameTypeReqDescription
date_fromstring––
date_tostring––
limitnumber––
NameTypeReqDescription
itemsarray––

No examples provided.

instantiate_routine ~68

Schedule the signed-in user's routine into planned workouts from start_date. Coach assignment of another user is REST-only.

NameTypeReqDescription
cadence_daysnumber––
idempotency_keystring––
routine_idstringyes–
start_datestringyesYYYY-MM-DD

No output schema declared.

No examples provided.

list_muscles ~22

List all 23 supported muscle slugs with anatomical names.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_routines ~88

Browse the curated workout routine library (PPL, upper/lower, full-body, 5x5, etc.). Filter by difficulty, goal, split_type, days_per_week. Returns minimal list.

NameTypeReqDescription
days_per_weeknumber––
difficultystring––
goalstring––
limitnumber––
split_typestring––

No output schema declared.

No examples provided.

log_body_metric ~121

Log a body measurement. metric_type: weight (kg), height (cm), body_fat (%), muscle_mass (kg), waist/chest/bicep/forearm/hip/thigh/calf/neck/shoulder (cm), bmi, resting_hr (bpm). Logging weight enables bodyweight-inclusive volume analytics.

NameTypeReqDescription
datestringyes–
idempotency_keystring––
metric_typestringyes–
notesstring––
unitstringyes–
valuenumberyes–
NameTypeReqDescription
datestring––
idstring––
metric_typestring––
valuenumber––

No examples provided.

log_cardio ~107

Log a cardio activity (run/bike/swim/etc.) for the current app user. Supports duration, distance, HR, power, calories.

NameTypeReqDescription
avg_hrnumber––
caloriesnumber––
datestringyes–
distance_mnumber––
duration_secondsnumber––
idempotency_keystring––
notesstring––
sportstringyes–
titlestring––
NameTypeReqDescription
datestring––
distance_mnumber––
duration_snumber––
idstring––
sportstring––

No examples provided.

log_meal ~87

Log a meal (calories + macros + optional ingredients) for the current app user.

NameTypeReqDescription
caloriesnumberyes–
carbsnumber––
datestringyes–
fatsnumber––
idempotency_keystring––
meal_typestring––
namestringyes–
proteinnumber––
NameTypeReqDescription
caloriesnumber––
carbsnumber––
datestring––
fatsnumber––
idstring––
namestring––
proteinnumber––

No examples provided.

log_water ~45

Log water intake (ml) for the current app user.

NameTypeReqDescription
amount_mlnumberyes–
datestringyes–
idempotency_keystring––
NameTypeReqDescription
datestring––
idstring––
mlnumber––

No examples provided.

log_workout ~67

Log a workout with exercise sets (strength or cardio unified). Requires an app user context.

NameTypeReqDescription
datestringyes–
idempotency_keystring––
primary_sportstring––
setsarray––
titlestring––
NameTypeReqDescription
datestring––
idstring––
titlestring––

No examples provided.

lookup_barcode ~27

Lookup a food product by EAN/UPC barcode.

NameTypeReqDescription
barcodestringyes–
NameTypeReqDescription
barcodestring––
foundboolean––
messagestring––

No examples provided.

my_training_context ~105

Returns a slice of the signed-in user's training picture. Default domains are workouts and today's nutrition. Pass `domains` to add checkin, notes or profile, or `domains=all`. Identity comes from the token, not a caller-supplied user id.

NameTypeReqDescription
domainsstring–Comma-separated subset. Accepted: workouts, nutrition, checkin, notes, profile, or 'all'. Default: workouts,nutrition.
workout_limitnumber––
NameTypeReqDescription
datestring––
domains–––
latest_checkin–––
nutrition_today–––
profile–––
recent_notes–––
recent_workouts–––

No examples provided.

resolve_exercise ~29

Resolve an exercise name into primary/secondary muscle layers for rendering.

NameTypeReqDescription
exercisestringyes–

No output schema declared.

No examples provided.

search_exercises ~135

Search 873 exercises by name with muscle/equipment/level filters. Rows are lean (name, ext_id, equipment, level, muscles) — enough to pick one; get_exercise returns instructions and media. Paginates: pass next_cursor back as `cursor`.

NameTypeReqDescription
cursorstring–next_cursor from the previous response. Omit for the first page.
equipmentstring––
fieldsstring–Extra fields, comma-separated, or `all`.
levelstring––
limitnumber––
musclestring––
qstringyes–
NameTypeReqDescription
next_cursorstring––
resultsarray––
total_matchednumber––

No examples provided.

search_foods ~50

Search food products by name (Open Food Facts + USDA). Returns macros per 100g.

NameTypeReqDescription
localestring––
page_sizenumber––
qstringyes–
NameTypeReqDescription
countnumber––
itemsarray––

No examples provided.

update_meal ~154

Correct a previously logged meal — name, macros, nutrients, portion, date or meal_type. Pass only the fields you want to change. Requires X-App-User-Id.

NameTypeReqDescription
alcoholnumber–g of ethanol
caloriesnumber––
carbsnumber––
datestring––
fatsnumber––
fibernumber––
idempotency_keystring––
meal_idstringyes–
meal_typestring––
namestring––
proteinnumber––
saturated_fatnumber––
sodiumnumber–mg
sugarnumber––
NameTypeReqDescription
caloriesnumber––
carbsnumber––
datestring––
fatsnumber––
idstring––
namestring––
proteinnumber––

No examples provided.

update_sets ~143

Correct sets already logged, by set id (log_workout returns them). Relabel the exercise, fix weight/reps/rpe, mark completed, add notes, or delete. Selection and change are separate, so a subset can be relabelled. Adding a set is log_workout, not this.

NameTypeReqDescription
completedboolean––
deleteboolean––
exercisestring–Catalog name, ext_id, or the user's own words for a custom movement.
notesstring––
repsnumber––
rpenumber––
set_idsarrayyes–
weightnumber––
NameTypeReqDescription
deletednumber––
missingarray––
updatednumber––

No examples provided.

upsert_profile ~241

Upsert the current app user's fitness profile. Set `timezone` first: every daily total, streak and adherence window is bucketed by it and defaults to UTC. `weight` doubles as the fallback bodyweight for bodyweight-inclusive volume when no dated weight metric exists.

NameTypeReqDescription
active_sportsarray––
daily_calorie_goalnumber––
daily_carbs_goalnumber––
daily_fats_goalnumber––
daily_fiber_goalnumber–g/day to reach
daily_protein_goalnumber––
daily_sodium_limitnumber–mg/day to stay under
daily_sugar_limitnumber–g/day to stay under
daily_water_goal_mlnumber––
diet_typestring––
goalstring––
heightnumber–cm
languagestring––
meals_per_daynumber––
timezonestring–IANA zone name, e.g. 'Europe/Warsaw'.
unit_systemstring––
weightnumber–kg

No output schema declared.

No examples provided.

Common questions

What is the dev.anatome/anatome MCP server?

dev.anatome/anatome is an MCP server listed in the public MCP registry as dev.anatome/anatome. Log workouts and meals by telling your AI. 873 exercises, muscle diagrams, food lookup. This page covers its hosted endpoint (https://anatome.dev/mcp).

Is the dev.anatome/anatome MCP server safe to use?

dev.anatome/anatome scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the dev.anatome/anatome MCP server expose?

dev.anatome/anatome exposes 36 tools: search_exercises, get_exercise, resolve_exercise, list_muscles, generate_muscle_image, and 31 more. Their descriptions and schemas cost roughly 2,974 tokens of context every time the server is loaded.

Does the dev.anatome/anatome MCP server require authentication?

No. We connected to dev.anatome/anatome without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the dev.anatome/anatome MCP server still maintained?

dev.anatome/anatome is still listed as active in the MCP registry. We last reached this channel on 12 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.