{ "data": { "similar": [ { "grade": "E", "json": "https://www.anchorterminal.com/tools/ride-with-gps.json", "name": "Ride with GPS API", "score": 45.2, "shared": [ "hobbies.routes", "hobbies.activities" ], "slug": "ride-with-gps" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/ticketmaster.json", "name": "Ticketmaster Discovery API", "score": 42.9, "shared": null, "slug": "ticketmaster" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/chess-com.json", "name": "Chess.com Published-Data API", "score": 40.8, "shared": null, "slug": "chess-com" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/rebrickable.json", "name": "Rebrickable", "score": 34.7, "shared": null, "slug": "rebrickable" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/ravelry.json", "name": "Ravelry", "score": 16.5, "shared": null, "slug": "ravelry" } ], "tool": { "slug": "strava", "name": "Strava MCP Connector + API", "vendor": "Strava, Inc.", "vendorUrl": "https://www.strava.com", "kind": "mcp", "category": "hobbies", "summary": "Strava's MCP Connector is a hosted, read-only MCP server that gives a Strava subscriber's AI assistant access to their own activity history, fitness trends, gear and best efforts. The V3 REST API reaches the same data for registered developer apps.", "url": "https://www.anchorterminal.com/tools/strava", "markdownUrl": "https://www.anchorterminal.com/tools/strava.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/strava.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/strava.json", "dns": "strava.grade.anchorterminal.com", "license": "Proprietary service under the Strava API Agreement (updated 1 June 2026) and the Strava terms, neither read because www.strava.com disallows our reader", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.strava.com/mcp", "packages": [], "auth": "oauth", "authNotes": "The MCP Connector needs a Strava subscription. The client opens a browser where the person signs in and approves access, and the connection is read-only and scoped to that account, revocable under Settings, My Apps (https://support.strava.com/en-us/articles/15401531-strava-mcp-connector). The V3 API uses OAuth 2.0 with seven scopes (`read`, `read_all`, `profile:read_all`, `profile:write`, `activity:read`, `activity:read_all`, `activity:write`), 6-hour access tokens and rotating refresh tokens; creating an app at strava.com/settings/api needs a subscription, new apps start in single-player mode, self-upgrade to 10 athletes, and more needs a review (https://developers.strava.com/docs/authentication/).", "pricing": "paid", "pricingNotes": "A Strava subscription is required for the MCP Connector and for Standard Tier API apps, with no further fee for API access per the Developer FAQ (https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906). The subscription price is on www.strava.com, which robots.txt disallows for our reader, so no figure is recorded.", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the MCP support articles, the Swagger file or the changelog (checked 3 November 2026). Access is by subscription and OAuth.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://developers.strava.com/docs/", "openapi": "https://developers.strava.com/swagger/swagger.json", "capabilities": [ "hobbies.activities", "hobbies.routes" ], "tags": [ "hosted", "mcp", "remote-mcp", "oauth", "read-only-mode", "paid", "subscription", "approval-required", "status-page", "openapi", "closed-source" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 45.8, "grade": "E", "agentReady": false, "rank": 1125, "ranked": true, "rankOf": 1349, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 49, "maintenance": 40, "payments": 0, "reliability": 63, "schema": 50, "security": 48, "transparency": 59 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 63, "points": 12.6, "reason": "Read with the hosted lines on the MCP Connector, the surface Strava sanctions for an assistant, with the V3 API where the connector publishes nothing. status.strava.com on Atlassian Statuspage lists Mobile applications, Strava.com, API, Upload, AWS and MCP Connector components with a history feed (20). From 4 August to 3 November 2026 the feed has 15 resolved incidents. None touches the MCP Connector; the API component had Beacon failures for 48 minutes on 23 October; activity uploads were degraded for 3 hours 7 minutes on 27 September with the mobile app unavailable for most users, and Garmin uploads were delayed twice. For the graded surface that reads as minor incidents only (20). API limits are published with numbers (200 per 15 minutes and 2,000 a day, 100 and 1,000 for reads, doubled after the self-service upgrade); the MCP article says limits per minute and per day exist and gives none (8 of 15). The API returns 429 with a JSON error and X-RateLimit-Usage headers and asks callers to throttle, with no Retry-After, and the connector is read-only, so retries are safe; nothing on MCP overload (5 of 15). No SLA (0). The connector launched on 1 June 2026 and carries no beta label (10). 20 + 20 + 8 + 5 + 0 + 10 = 63.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 50, "points": 8.13, "reason": "A public Swagger 2.0 file describes the V3 API (29 paths, 31 operations, 7 OAuth scopes). The MCP tool definitions are only visible after OAuth, which we did not run, so the contract line is scored on the API half (15 of 25). No llms.txt on developers.strava.com (404) and no Markdown docs (0). The support article names the data the connector reads (activity history, fitness trends, cross-sport insights, gear, best efforts, weather, streaks) and the Swagger descriptions state each operation's purpose and scope; no when-not-to-use guidance and no tool descriptions read (6 of 20). The Swagger file has enums for upload data_type, stream keys and explore activity_type and marks required parameters; one PUT /athlete parameter is declared in the path with no placeholder; MCP inputs unread (6 of 15). Most 200 responses carry examples, errors return a Fault object, 429 is not in the file, and the rate-limits page documents the 429 body (8 of 15). A dated changelog on developers.strava.com with removals announced three months ahead (15). 15 + 0 + 6 + 6 + 8 + 15 = 50.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 49, "points": 7.96, "reason": "The connector's tool count and definition sizes are not public, so context cost is scored as unknown (10 of 25). The API pages with page and per_page up to 200, before and after timestamps on activities and a cursor on comments; stream keys select channels; whether the MCP tools size their output is unread (12 of 20). API errors return a Fault object with a message and a 429 JSON error, with no error codes list; MCP errors unread (8 of 20). The connector is read-only, so every call is safe to repeat, and the API's reads are too; no idempotency key on uploads and no annotations read (12 of 20). Setup is one `claude mcp add` command plus browser consent; the API has sensible defaults but no official SDKs, only Swagger Codegen (7 of 15). 10 + 12 + 8 + 12 + 7 = 49.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 48, "points": 8.4, "reason": "OAuth 2.0 with seven scopes, 6-hour access tokens, rotating refresh tokens that invalidate the previous one, and POST /oauth/revoke with Basic auth; the connector's consent is in the browser and revocable under My Apps. The token endpoint's parameter table lists client_secret, refresh_token and access_token as query parameters, a documented option that costs 10 (20 of 30). The connector is read-only and scoped to one account, and the API splits read, read_all and write scopes by resource; no confirmation step exists for `activity:write` (18 of 20). Activity titles, descriptions, comments and club posts are user text the connector returns, with no guidance on treating them as untrusted (5 of 15). My Apps lists connected apps for revocation and the API dashboard shows rate-limit usage; no per-call log (5 of 15). security.txt, a disclosure policy, a bug bounty and certifications would sit on www.strava.com, which our reader could not fetch, and the support article's \"security and quality guardrails\" is a claim; scored absent and named in openQuestions (0 of 20). 20 + 18 + 5 + 5 + 0 = 48.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 0, "points": 0, "reason": "Read with the hosted rubric. No x402, MPP or L402 (0). A subscription is required and the FAQ says it carries no extra API fee, but the price is on www.strava.com, which robots.txt disallows for our reader, so the pricing line is scored absent and named in openQuestions (0 of 20). No free tier for the connector or for Standard Tier apps, and any subscription trial sits on the unread host (0 of 20). A person subscribes and completes OAuth in a browser (0). 0 + 0 + 0 + 0 = 0.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 40, "points": 3.5, "reason": "Read for a closed service. Gemini support for the connector arrived on 28 October 2026, and the API changelog's newest entry is 1 September 2026 (30). In the 90 days to 3 November, dated changes are the 1 September endpoint removals and the 28 October Gemini release; the 18 September FAQ is a document, not a change, so three are not established (0 of 20). A dated changelog, a Developer FAQ on the Community Hub (closed to replies), a developer forum there and a support site (10 of 15). No entry in the official MCP registry under a strava.com namespace and no official SDKs, only Swagger Codegen (0 of 15). No package or CI to assess (0 of 10). 30 + 0 + 10 + 0 + 0 = 40.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 59, "points": 5.16, "note": "editorial 31, provenance 86", "reason": "Closed service. The API Agreement (updated 1 June 2026) and the terms are on www.strava.com, which our reader could not fetch; the Developer FAQ summarises their restrictions on AI tools and intermediaries (10 of 30). The privacy policy is on the same host. The press release and support article say data stays the user's, the connection is read-only, and Strava chose Anthropic because it would not train on user data without consent; no retention periods or DPA were read (5 of 30). Deprecation notices carry dates, with removals announced on 1 June 2026 for 1 September, the base URL change available from 4 January 2027, and the legacy deauthorise endpoint unsupported from 1 June 2027 (16 of 20). Subprocessors and data locations were not read (0 of 20). 10 + 5 + 16 + 0 = 31.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "The connector's tool count and definition sizes are not public, so context cost is scored as unknown (10 of 25). The API pages with page and per_page up to 200, before and after timestamps on activities and a cursor on comments; stream keys select channels; whether the MCP tools size their output is unread (12 of 20). API errors return a Fault object with a message and a 429 JSON error, with no error codes list; MCP errors unread (8 of 20). The connector is read-only, so every call is safe to repeat, and the API's reads are too; no idempotency key on uploads and no annotations read (12 of 20). Setup is one `claude mcp add` command plus browser consent; the API has sensible defaults but no official SDKs, only Swagger Codegen (7 of 15). 10 + 12 + 8 + 12 + 7 = 49.", "maintenance": "Read for a closed service. Gemini support for the connector arrived on 28 October 2026, and the API changelog's newest entry is 1 September 2026 (30). In the 90 days to 3 November, dated changes are the 1 September endpoint removals and the 28 October Gemini release; the 18 September FAQ is a document, not a change, so three are not established (0 of 20). A dated changelog, a Developer FAQ on the Community Hub (closed to replies), a developer forum there and a support site (10 of 15). No entry in the official MCP registry under a strava.com namespace and no official SDKs, only Swagger Codegen (0 of 15). No package or CI to assess (0 of 10). 30 + 0 + 10 + 0 + 0 = 40.", "payments": "Read with the hosted rubric. No x402, MPP or L402 (0). A subscription is required and the FAQ says it carries no extra API fee, but the price is on www.strava.com, which robots.txt disallows for our reader, so the pricing line is scored absent and named in openQuestions (0 of 20). No free tier for the connector or for Standard Tier apps, and any subscription trial sits on the unread host (0 of 20). A person subscribes and completes OAuth in a browser (0). 0 + 0 + 0 + 0 = 0.", "reliability": "Read with the hosted lines on the MCP Connector, the surface Strava sanctions for an assistant, with the V3 API where the connector publishes nothing. status.strava.com on Atlassian Statuspage lists Mobile applications, Strava.com, API, Upload, AWS and MCP Connector components with a history feed (20). From 4 August to 3 November 2026 the feed has 15 resolved incidents. None touches the MCP Connector; the API component had Beacon failures for 48 minutes on 23 October; activity uploads were degraded for 3 hours 7 minutes on 27 September with the mobile app unavailable for most users, and Garmin uploads were delayed twice. For the graded surface that reads as minor incidents only (20). API limits are published with numbers (200 per 15 minutes and 2,000 a day, 100 and 1,000 for reads, doubled after the self-service upgrade); the MCP article says limits per minute and per day exist and gives none (8 of 15). The API returns 429 with a JSON error and X-RateLimit-Usage headers and asks callers to throttle, with no Retry-After, and the connector is read-only, so retries are safe; nothing on MCP overload (5 of 15). No SLA (0). The connector launched on 1 June 2026 and carries no beta label (10). 20 + 20 + 8 + 5 + 0 + 10 = 63.", "schema": "A public Swagger 2.0 file describes the V3 API (29 paths, 31 operations, 7 OAuth scopes). The MCP tool definitions are only visible after OAuth, which we did not run, so the contract line is scored on the API half (15 of 25). No llms.txt on developers.strava.com (404) and no Markdown docs (0). The support article names the data the connector reads (activity history, fitness trends, cross-sport insights, gear, best efforts, weather, streaks) and the Swagger descriptions state each operation's purpose and scope; no when-not-to-use guidance and no tool descriptions read (6 of 20). The Swagger file has enums for upload data_type, stream keys and explore activity_type and marks required parameters; one PUT /athlete parameter is declared in the path with no placeholder; MCP inputs unread (6 of 15). Most 200 responses carry examples, errors return a Fault object, 429 is not in the file, and the rate-limits page documents the 429 body (8 of 15). A dated changelog on developers.strava.com with removals announced three months ahead (15). 15 + 0 + 6 + 6 + 8 + 15 = 50.", "security": "OAuth 2.0 with seven scopes, 6-hour access tokens, rotating refresh tokens that invalidate the previous one, and POST /oauth/revoke with Basic auth; the connector's consent is in the browser and revocable under My Apps. The token endpoint's parameter table lists client_secret, refresh_token and access_token as query parameters, a documented option that costs 10 (20 of 30). The connector is read-only and scoped to one account, and the API splits read, read_all and write scopes by resource; no confirmation step exists for `activity:write` (18 of 20). Activity titles, descriptions, comments and club posts are user text the connector returns, with no guidance on treating them as untrusted (5 of 15). My Apps lists connected apps for revocation and the API dashboard shows rate-limit usage; no per-call log (5 of 15). security.txt, a disclosure policy, a bug bounty and certifications would sit on www.strava.com, which our reader could not fetch, and the support article's \"security and quality guardrails\" is a claim; scored absent and named in openQuestions (0 of 20). 20 + 18 + 5 + 5 + 0 = 48.", "transparency": "Closed service. The API Agreement (updated 1 June 2026) and the terms are on www.strava.com, which our reader could not fetch; the Developer FAQ summarises their restrictions on AI tools and intermediaries (10 of 30). The privacy policy is on the same host. The press release and support article say data stays the user's, the connection is read-only, and Strava chose Anthropic because it would not train on user data without consent; no retention periods or DPA were read (5 of 30). Deprecation notices carry dates, with removals announced on 1 June 2026 for 1 September, the base URL change available from 4 January 2027, and the legacy deauthorise endpoint unsupported from 1 June 2027 (16 of 20). Subprocessors and data locations were not read (0 of 20). 10 + 5 + 16 + 0 = 31." }, "sources": [ { "what": "MCP Connector support article", "url": "https://support.strava.com/en-us/articles/15401531-strava-mcp-connector", "seen": "2026-11-03" }, { "what": "API and MCP FAQ (18 September 2026)", "url": "https://support.strava.com/en-us/articles/15401526-strava-api-and-mcp-faq", "seen": "2026-11-03" }, { "what": "Developer FAQ (tiers, AI restriction)", "url": "https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906", "seen": "2026-11-03" }, { "what": "press release, MCP Connector launch", "url": "https://press.strava.com/articles/strava-launches-mcp-connector", "seen": "2026-11-03" }, { "what": "press release, Gemini integration", "url": "https://press.strava.com/articles/strava-now-integrated-as-a-connected-app-in-google-gemini-enabling-users-to-get-more-personalized-training-insights", "seen": "2026-11-03" }, { "what": "press index", "url": "https://press.strava.com/", "seen": "2026-11-03" }, { "what": "status page components", "url": "https://status.strava.com/", "seen": "2026-11-03" }, { "what": "status history feed", "url": "https://status.strava.com/history.atom", "seen": "2026-11-03" }, { "what": "API reference", "url": "https://developers.strava.com/docs/reference/", "seen": "2026-11-03" }, { "what": "getting started", "url": "https://developers.strava.com/docs/getting-started/", "seen": "2026-11-03" }, { "what": "authentication and scopes", "url": "https://developers.strava.com/docs/authentication/", "seen": "2026-11-03" }, { "what": "rate limits", "url": "https://developers.strava.com/docs/rate-limits/", "seen": "2026-11-03" }, { "what": "webhooks", "url": "https://developers.strava.com/docs/webhooks/", "seen": "2026-11-03" }, { "what": "changelog", "url": "https://developers.strava.com/docs/changelog/", "seen": "2026-11-03" }, { "what": "docs overview", "url": "https://developers.strava.com/docs/", "seen": "2026-11-03" }, { "what": "Swagger 2.0 file", "url": "https://developers.strava.com/swagger/swagger.json", "seen": "2026-11-03" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=strava", "seen": "2026-11-03" }, { "what": "robots.txt, www.strava.com (ClaudeBot disallowed)", "url": "https://www.strava.com/robots.txt", "seen": "2026-11-03" }, { "what": "robots.txt, status.strava.com", "url": "https://status.strava.com/robots.txt", "seen": "2026-11-03" }, { "what": "robots.txt, press.strava.com", "url": "https://press.strava.com/robots.txt", "seen": "2026-11-03" }, { "what": "RDAP for strava.com", "url": "https://rdap.verisign.com/com/v1/domain/strava.com", "seen": "2026-11-03" } ], "openQuestions": [ "Judgement call on surface. Graded on the MCP Connector, which Strava's FAQ points single users to and which is the only route an AI assistant can take under the Developer FAQ's refusal of apps that expose athlete data to third-party AI tools. The V3 API fills the lines the connector publishes nothing for, and the notes say which.", "unchecked: the MCP tool list, tool schemas, annotations and rate-limit numbers, which are visible only after OAuth with a subscribed account. No session was opened.", "unchecked: the Strava API Agreement (strava.com/legal/api, updated 1 June 2026), the terms of service, the privacy policy, retention periods, subprocessors, the subscription price and any security.txt. www.strava.com/robots.txt disallows ClaudeBot and does not name Claude-User, so nothing on that host was fetched. Payments scores 0 and transparency 31 partly for that reason.", "firstReleased is 1 June 2026, the connector's launch. The V3 API is older; its changelog's earliest entry is from 2021 and the API's first release date was not found on a readable page.", "The Developer FAQ's table puts Extended Access at 11 to 9,999 athletes while its text says 10,000 or more; the page does not resolve it.", "The support article dates Claude support to June 2026 and Gemini to October 2026 but carries no publication date beyond \"Updated this week\".", "The humans file records the 2020 and 2025 funding rounds from press coverage because press.strava.com carries no funding release; a later pass could confirm them from a first-hand page." ] }, "negative": 0, "verdict": "The MCP Connector is the surface Strava sanctions for an AI assistant, read-only, scoped to one subscriber's account, with its own status component. Its tool list and rate limits are not public, the API Agreement and prices sit on a host our reader could not fetch, and apps serving more than 10 athletes need a review that refuses AI tools.", "bestFor": "A personal assistant reading one subscriber's training history with consent.", "strengths": [ "Official hosted MCP server at https://mcp.strava.com/mcp, read-only, scoped to the subscriber's own account and revocable under Settings, My Apps", "status.strava.com has separate API and MCP Connector components, and no MCP incident appears between 4 August and 3 November 2026", "V3 API with a public Swagger 2.0 file, seven OAuth scopes, 6-hour access tokens and documented rate-limit headers", "Dated API changelog with notice periods, such as the 1 June 2026 announcement of the 1 September 2026 endpoint removals", "Webhooks for activity and deauthorisation events, so an app need not poll" ], "weaknesses": [ "The MCP tool list, schemas and rate-limit numbers are not published; they are only visible after OAuth, which we did not run", "A Strava subscription is needed for the connector and for Standard Tier API apps, and the price is on a page our reader could not fetch", "API apps that expose athlete data to third-party AI tools are not approved beyond 10 athletes, and intermediary platforms are non-compliant", "The API Agreement, terms, privacy policy and any security.txt are on www.strava.com, which disallows our reader, so none was read", "No official SDKs, no llms.txt and no entry in the official MCP registry" ], "agentNotes": [ "Connect with `claude mcp add --transport http strava-mcp https://mcp.strava.com/mcp` and have the subscriber complete the OAuth consent in the browser; a free account is refused", "Expect reads only. The connector cannot create, edit or delete activities, so hand uploads to the person or to an app with the `activity:write` scope", "On the V3 API, watch X-RateLimit-Usage against 200 per 15 minutes and 2,000 a day, and use webhooks rather than polling; a 429 carries no Retry-After", "Do not route Strava API data through another AI tool for an app serving more than 10 athletes; the Developer FAQ says such apps are not approved", "Move V3 calls to https://api-v3.strava.com after 4 January 2027 and use POST /oauth/revoke, since the legacy deauthorise endpoint ends on 1 June 2027" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 45.8 } ], "editorialScores": { "ergonomics": 49, "maintenance": 40, "payments": 0, "reliability": 63, "schema": 50, "security": 48, "transparency": 31 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "E", "kind": "listed", "method": "0.7", "score": 45.8 } ] }, "connect": { "http": "curl -H \"Authorization: Bearer \u003cACCESS_TOKEN\u003e\" \"https://www.strava.com/api/v3/athlete/activities?per_page=30\"", "claudeCode": "claude mcp add --transport http strava-mcp https://mcp.strava.com/mcp", "config": { "mcpServers": { "strava": { "type": "http", "url": "https://mcp.strava.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/hobbies.activities", "tool": "https://letme.dev/strava" }, "notable": [ "The MCP Connector launched on 1 June 2026 with Claude and reached Google Gemini in the US on 28 October 2026. Strava says it is read-only, scoped to the subscriber's own account and revocable from Strava settings (https://press.strava.com/articles/strava-launches-mcp-connector)", "Strava's API and MCP FAQ of 18 September 2026 says it launched with Anthropic because it believes Anthropic will honour terms not to use user data for model training without consent, and that a subscription deters exploitation of the API (https://support.strava.com/en-us/articles/15401526-strava-api-and-mcp-faq)", "The Developer FAQ says apps that expose athlete data to third-party AI tools will not be approved for more than 10 athletes, and that entering app credentials on an intermediary platform that makes API requests for you is non-compliant (https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906)", "On 1 September 2026 the Club Activities, Club Members and Club Admins endpoints were removed and Explore Segments was restricted to Extended Access developers, announced on 1 June 2026. A new base URL, api-v3.strava.com, is available from 4 January 2027 (https://developers.strava.com/docs/changelog/)", "Rate limits for API apps are 200 requests per 15 minutes and 2,000 a day overall, 100 and 1,000 for reads, doubling after the self-service upgrade, with X-RateLimit-Limit and X-RateLimit-Usage headers and a 429 JSON error. The MCP article says limits per minute and per day exist without numbers (https://developers.strava.com/docs/rate-limits/)", "status.strava.com (Atlassian Statuspage) lists API and MCP Connector components. From 4 August to 3 November 2026 the feed shows 15 incidents, one on the API (Beacon failures, 48 minutes on 23 October) and none on the MCP Connector (https://status.strava.com/history.atom)", "The official MCP registry has no entry under a strava.com namespace; the 25 strava results are third-party servers (https://registry.modelcontextprotocol.io/v0/servers?search=strava)", "www.strava.com/robots.txt disallows ClaudeBot for the whole site and does not name Claude-User, so the API Agreement, terms, privacy policy and subscription page there were not read" ], "area": "everyday", "details": [ { "label": "Surface listed", "value": "The hosted MCP Connector at mcp.strava.com and the V3 REST API, read from developers.strava.com, the Swagger file, support.strava.com, communityhub.strava.com, press.strava.com, status.strava.com and the MCP registry on 3 November 2026. No account, subscription, OAuth session or MCP session was made" }, { "label": "MCP Connector", "value": "https://mcp.strava.com/mcp, Streamable HTTP, OAuth in the browser. Read-only access to activity history, fitness trends, cross-sport insights, gear, best efforts, activity weather and streaks per the support article; the press release adds per-second heart rate, pace, GPS, power, club and event data. Clients named are Claude (web, desktop, Claude Code) and Google Gemini (US only at launch)" }, { "label": "V3 API", "value": "https://www.strava.com/api/v3 with 29 paths and 31 operations in the Swagger 2.0 file (26 GET, 3 PUT, 2 POST), covering athlete, activities, streams, segments, segment efforts, routes, clubs, gear and uploads. api-v3.strava.com is available from 4 January 2027" }, { "label": "Developer tiers", "value": "Single User (use the MCP), Standard (up to 10 athletes self-service, then up to 9,999 after review, subscription required) and Extended Access (reviewed, higher limits, eligible for Partner APIs). The FAQ's table and text disagree on where 10,000 athletes falls" }, { "label": "Rate limits", "value": "Default 200 per 15 minutes and 2,000 a day overall, 100 and 1,000 for reads; after upgrade 400 and 4,000 overall, 200 and 2,000 for reads. 15-minute windows reset on the quarter hour, daily at midnight UTC. 429 with a JSON error, no Retry-After. MCP limits per minute and per day are not published" }, { "label": "Webhooks", "value": "One subscription per app. Events for activity create, update and delete and for athlete deauthorisation. The callback must answer 200 within 2 seconds; delivery is retried up to three times" }, { "label": "Removed on 1 September 2026", "value": "Club Activities, Club Members and Club Admins endpoints. Explore Segments is now restricted to Extended Access developers" }, { "label": "Status page", "value": "status.strava.com on Atlassian Statuspage with Mobile applications, Strava.com, API, Upload, AWS and MCP Connector components" }, { "label": "Unread pages", "value": "The API Agreement (strava.com/legal/api), terms, privacy policy, subscription prices and any security.txt on www.strava.com, whose robots.txt disallows ClaudeBot and does not name Claude-User" } ], "provenance": { "legalEntity": "Strava, Inc.", "domain": "strava.com", "domainRegistered": "2003-12-22", "endpointOnVendorDomain": true, "terms": "https://www.strava.com/legal/api", "privacy": "https://www.strava.com/legal/privacy", "statusPage": "https://status.strava.com", "changelog": "https://developers.strava.com/docs/changelog/", "securityTxt": "unknown", "checked": "2026-11-03", "notes": [ "Strava, Inc. is the name in the footer of press.strava.com. The terms and privacy policy on www.strava.com were not read.", "www.strava.com/robots.txt disallows ClaudeBot (with Google-Extended, GPTBot and Meta-ExternalAgent) for the whole site and does not name Claude-User or Claude-SearchBot; its wildcard group disallows /api/ and athlete, activity and route pages. Nothing on that host was fetched. developers.strava.com has no robots.txt, press.strava.com allows everything, status.strava.com disallows /api/ and /embed/, support.strava.com and communityhub.strava.com allow the pages read.", "The API Agreement link in the docs is strava.com/legal/api, which the rate-limits page says was updated on 1 June 2026. Not read.", "security.txt on www.strava.com could not be requested, so its state is unknown. developers.strava.com/llms.txt returns 404.", "RDAP (Verisign) gives strava.com a creation date of 22 December 2003." ], "score": 86, "checks": [ { "check": "Legal entity named", "value": "Strava, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "strava.com, registered 2003-12-22 (22 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.strava.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 5.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.strava.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "4 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.strava.com/legal/api", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-06-01", "words": 4417, "points": 5.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective Date: June 1, 2026", "says": "Last updated 2026-06-01" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "You hereby consent and submit to the exclusive jurisdiction and venue in the state and federal courts of San Francisco County, California, U.S.A., for any legal proceedings related to the Strava API Materials, Strava Platform or this Agreement.", "says": "Disputes go to the courts of San Francisco County, California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "STRAVA’S AGGREGATE LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (i) THE FEES YOU PAID TO STRAVA FOR USE OF THE STRAVA API MATERIALS IN THE LAST YEAR OR (ii) ONE HUNDRED DOLLARS ($100).", "says": "Capped at the greater of $100 and the fees paid in the year before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Strava may terminate your access to the Strava API Materials immediately if you do not comply with the Service Terms or this Agreement, or you are engaged in any activity that may expose Strava to risk or liability of any kind, or if we otherwise reasonably object to your use of the Strava API Materials." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Any amendment to this Agreement will be effective upon our posting online of such updated terms.", "says": "Changes are posted, with no other notice named" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not create applications that compete with or replicate Strava functionality." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "You may not create applications that compete with or replicate Strava functionality.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Strava reserves the right at any time (and for any reason) to modify or discontinue, temporarily or permanently, the Strava API Materials, your use of the Strava API Materials, or any portion thereof with or without notice to you and without any form of compensation or consideration to you, regardless of the status of…", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Strava reserves the right at any time (and for any reason) to modify or discontinue, temporarily or permanently, the Strava API Materials, your use of the Strava API Materials, or any portion thereof with or without notice to you and without any form of compensation or consideration to you" } ], "notes": [ { "date": "2026-11-03", "text": "Liability is capped at the greater of fees paid in the last year or 100 US dollars, and API access is currently free of charge.", "quote": "STRAVA’S AGGREGATE LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (i) THE FEES YOU PAID TO STRAVA FOR USE OF THE STRAVA API MATERIALS IN THE LAST YEAR OR (ii) ONE HUNDRED DOLLARS ($100)." }, { "date": "2026-11-03", "text": "Strava Data from a user may only be displayed or disclosed in the application to that same user, and other users' data may not be shown even when public on Strava.", "quote": "Strava Data provided by a specific user can only be displayed or disclosed in your Developer Application to that user." }, { "date": "2026-11-03", "text": "The developer grants Strava a transferable, sublicensable licence to display the application and use the developer's name, likeness and brand for Strava's marketing.", "quote": "You hereby grant to Strava a paid-up, royalty-free, non-exclusive, worldwide, transferable, sublicenseable, right and license, under all applicable intellectual property rights, for Strava’s marketing and promotional purposes" } ] }, { "kind": "privacy", "url": "https://www.strava.com/legal/privacy", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-01-01", "words": 4235, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective Date: January 1, 2026", "says": "Last updated 2026-01-01" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "This Privacy Policy (“Policy”) describes how we collect, share, and use your personal information, as well as how to exercise your privacy rights and choices." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We retain information as long as needed to provide the Services, subject to our legal obligations.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "we do not disclose it to third parties without your prior consent;" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Targeted Advertising: We advertise our Services through third parties, and may use cookies and other tracking technologies to support targeted advertising and serve relevant ads (see Cookies and Similar Tracking Technologies)." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Access and Portability: You may have the right to know, and request access to, the personal information we collect, use, share, or otherwise process about you." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Getting in Touch: Please see the Contact Us section below for our Data Protection Officer and Data Protection Representative information.", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Whenever we transfer personal information internationally, we use legal mechanisms, such as Standard Contractual Clauses, to ensure the protection of your personal information, in accordance with applicable data protection law.", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "training.optout", "label": "Says it may use customer content to train or improve models, and gives an opt-out", "found": true, "quote": "AI Development: We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers." }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "We may also disclose information to marketing partners or third-party advertising networks to promote our services (with your consent, where required)." } ], "notes": [ { "date": "2026-11-03", "text": "Profiles and activities of users aged 18 or over are viewable by everyone, including the public and search engines, by default.", "quote": "If you are 18 years or older, certain information, including your profile and your activities, is set by default to be viewable by “Everyone.”" } ] } ] }, "humans": { "slug": "strava", "checked": "2026-11-03", "company": "Strava, Inc.", "people": [ { "name": "Mark Gainey", "role": "Co-founder", "founder": true, "bio": "Mark Gainey co-founded Strava with Michael Horvath. Strava's press release of 11 December 2023 names him as co-founder; his current role is not stated there.", "bioSources": [ "https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo" ], "page": "/people/mark-gainey/" }, { "name": "Michael Horvath", "role": "Co-founder, former CEO", "founder": true, "bio": "Michael Horvath co-founded Strava and was its CEO until Michael Martin took over on 2 January 2024, after which he became Executive Advisor to the CEO, per the press release of 11 December 2023.", "bioSources": [ "https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo" ], "page": "/people/michael-horvath/" }, { "name": "Michael Martin", "role": "Chief Executive Officer", "bio": "Michael Martin became Strava's CEO on 2 January 2024, joining its board the same day. He was general manager of YouTube Shopping at Google before that, per the press release of 11 December 2023.", "bioSources": [ "https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo" ], "page": "/people/michael-martin/" }, { "name": "Ryan Dixon", "role": "VP, Partnerships and Developer Relations", "bio": "Ryan Dixon is quoted as VP, Partnerships \u0026 Developer Relations in Strava's press release of 1 June 2026 announcing the MCP Connector.", "bioSources": [ "https://press.strava.com/articles/strava-launches-mcp-connector" ], "page": "/people/ryan-dixon/" } ], "peopleNote": "Founders and the CEO are taken from Strava's press release of 11 December 2023 on press.strava.com, and Ryan Dixon from the MCP Connector release of 1 June 2026. Strava's about and leadership pages are on www.strava.com, whose robots.txt disallows ClaudeBot without naming Claude-User, so they were not read and the roster may be incomplete. No first-hand page linked a personal LinkedIn, X or GitHub account, so none is recorded. Investors were looked for on press.strava.com (no funding release found), the press release boilerplates and web searches; the 2020 and 2025 rounds rest on press coverage of Strava's announcements, named in the sources.", "companySocial": {}, "support": { "urls": [ "https://support.strava.com/", "https://communityhub.strava.com/developers-knowledge-base-14" ], "community": [ { "label": "Strava Community Hub, developers forum", "url": "https://communityhub.strava.com/developers-knowledge-base-14", "kind": "forum" } ], "contactUrls": [ "https://press.strava.com/contact" ] }, "sources": [ "https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo", "https://press.strava.com/articles/strava-launches-mcp-connector", "https://press.strava.com/articles/strava-now-integrated-as-a-connected-app-in-google-gemini-enabling-users-to-get-more-personalized-training-insights", "https://press.strava.com/", "https://support.strava.com/en-us/articles/15401531-strava-mcp-connector", "https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906", "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "https://sgbonline.com/strava-nets-2-2-billion-valuation-in-funding-round/", "https://www.builtinsf.com/articles/strava-achieves-2b-valuation-20250523" ], "ownership": { "status": "private", "valuation": { "amount": "$2.2 billion", "basis": "stated", "round": "2025 round led by Sequoia Capital", "asOf": "2025-05-22", "source": "https://sgbonline.com/strava-nets-2-2-billion-valuation-in-funding-round/" }, "checked": "2026-11-03", "sources": [ "https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo", "https://sgbonline.com/strava-nets-2-2-billion-valuation-in-funding-round/" ] }, "investors": [ { "name": "Sequoia Capital", "kind": "vc", "rounds": [ "Series F (2020)", "2025 round" ], "lead": true, "url": "https://www.sequoiacap.com/", "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "US$110 million Series F financing round led by TCV and Sequoia Capital", "page": "/investors/sequoia-capital/" }, { "name": "TCV", "kind": "vc", "rounds": [ "Series F (2020)" ], "lead": true, "url": "https://www.tcv.com/", "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "US$110 million Series F financing round led by TCV and Sequoia Capital", "page": "/investors/tcv/" }, { "name": "Dragoneer Investment Group", "kind": "vc", "rounds": [ "Series F (2020)" ], "url": "https://www.dragoneer.com/", "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "with participation from Dragoneer Investment Group", "page": "/investors/dragoneer-investment-group/" }, { "name": "Madrone Capital Partners", "kind": "vc", "rounds": [ "Series F (2020)" ], "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "existing investors Madrone Capital Partners, Jackson Square Ventures, and Go4it Capital", "page": "/investors/madrone-capital-partners/" }, { "name": "Jackson Square Ventures", "kind": "vc", "rounds": [ "Series F (2020)" ], "url": "https://jsv.com/", "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "existing investors Madrone Capital Partners, Jackson Square Ventures, and Go4it Capital", "page": "/investors/jackson-square-ventures/" }, { "name": "Go4it Capital", "kind": "vc", "rounds": [ "Series F (2020)" ], "source": "https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia", "quote": "existing investors Madrone Capital Partners, Jackson Square Ventures, and Go4it Capital", "page": "/investors/go4it-capital/" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/strava.json", "live": { "slug": "strava", "probe": { "target": "https://mcp.strava.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-04T19:35:13.488125471Z", "lastOk": true, "lastStatus": 401, "lastMs": 346, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 396, "p95ms24h": 492, "samples24h": 43, "samples30d": 43, "days": [ { "date": "2026-11-04", "probes": 43, "ok": 43 } ] }, "vendorStatus": { "page": "https://status.strava.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T19:32:17.868642472Z" }, "securityTxt": { "url": "https://strava.com/.well-known/security.txt", "state": "expired", "expires": "2026-10-31T00:00:00.000Z", "checkedAt": "2026-11-04T15:53:17.989248718Z" }, "updatedAt": "2026-11-04T19:35:13.488125471Z" } }, "verify": { "accepts": "a page on strava.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/strava.svg", "body": { "slug": "strava", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/strava", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/strava\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/strava.svg\" alt=\"Strava MCP Connector + API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Strava MCP Connector + API on Anchor Terminal](https://www.anchorterminal.com/badges/strava.svg)](https://www.anchorterminal.com/tools/strava)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/strava\"\u003eStrava MCP Connector + API on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/strava", "json": "https://www.anchorterminal.com/tools/strava.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/strava.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/strava#pricing", "reviews": "https://www.anchorterminal.com/tools/strava#reviews", "slim": "https://www.anchorterminal.com/tools/strava.min.md" }, "markdown": "## Overview\n\n**Grade E · 45.8/100 · rank #1125 of 1349 · #1 in Hobbies, sport \u0026 recreation · not agent-ready · confidence medium**\n\n\n## Assessment\n\nThe MCP Connector is the surface Strava sanctions for an AI assistant, read-only, scoped to one subscriber's account, with its own status component. Its tool list and rate limits are not public, the API Agreement and prices sit on a host our reader could not fetch, and apps serving more than 10 athletes need a review that refuses AI tools.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Strava, Inc. (https://www.strava.com) |\n| Kind | MCP server |\n| Category | Hobbies, sport \u0026 recreation (https://www.anchorterminal.com/categories/hobbies) |\n| Transport | Streamable HTTP |\n| Endpoint | `https://mcp.strava.com/mcp` |\n| Auth | OAuth · The MCP Connector needs a Strava subscription. The client opens a browser where the person signs in and approves access, and the connection is read-only and scoped to that account, revocable under Settings, My Apps (https://support.strava.com/en-us/articles/15401531-strava-mcp-connector). The V3 API uses OAuth 2.0 with seven scopes (`read`, `read_all`, `profile:read_all`, `profile:write`, `activity:read`, `activity:read_all`, `activity:write`), 6-hour access tokens and rotating refresh tokens; creating an app at strava.com/settings/api needs a subscription, new apps start in single-player mode, self-upgrade to 10 athletes, and more needs a review (https://developers.strava.com/docs/authentication/). |\n| Pricing | Paid (Paid) · A Strava subscription is required for the MCP Connector and for Standard Tier API apps, with no further fee for API access per the Developer FAQ (https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906). The subscription price is on www.strava.com, which robots.txt disallows for our reader, so no figure is recorded. |\n| x402 | No · No x402, MPP or L402 in the developer docs, the MCP support articles, the Swagger file or the changelog (checked 3 November 2026). Access is by subscription and OAuth. |\n| Licence | Proprietary service under the Strava API Agreement (updated 1 June 2026) and the Strava terms, neither read because www.strava.com disallows our reader |\n| Docs | https://developers.strava.com/docs/ |\n| llms.txt | not found |\n| Last release | 2026-10-28 |\n| Surface listed | The hosted MCP Connector at mcp.strava.com and the V3 REST API, read from developers.strava.com, the Swagger file, support.strava.com, communityhub.strava.com, press.strava.com, status.strava.com and the MCP registry on 3 November 2026. No account, subscription, OAuth session or MCP session was made |\n| MCP Connector | https://mcp.strava.com/mcp, Streamable HTTP, OAuth in the browser. Read-only access to activity history, fitness trends, cross-sport insights, gear, best efforts, activity weather and streaks per the support article; the press release adds per-second heart rate, pace, GPS, power, club and event data. Clients named are Claude (web, desktop, Claude Code) and Google Gemini (US only at launch) |\n| V3 API | https://www.strava.com/api/v3 with 29 paths and 31 operations in the Swagger 2.0 file (26 GET, 3 PUT, 2 POST), covering athlete, activities, streams, segments, segment efforts, routes, clubs, gear and uploads. api-v3.strava.com is available from 4 January 2027 |\n| Developer tiers | Single User (use the MCP), Standard (up to 10 athletes self-service, then up to 9,999 after review, subscription required) and Extended Access (reviewed, higher limits, eligible for Partner APIs). The FAQ's table and text disagree on where 10,000 athletes falls |\n| Rate limits | Default 200 per 15 minutes and 2,000 a day overall, 100 and 1,000 for reads; after upgrade 400 and 4,000 overall, 200 and 2,000 for reads. 15-minute windows reset on the quarter hour, daily at midnight UTC. 429 with a JSON error, no Retry-After. MCP limits per minute and per day are not published |\n| Webhooks | One subscription per app. Events for activity create, update and delete and for athlete deauthorisation. The callback must answer 200 within 2 seconds; delivery is retried up to three times |\n| Removed on 1 September 2026 | Club Activities, Club Members and Club Admins endpoints. Explore Segments is now restricted to Extended Access developers |\n| Status page | status.strava.com on Atlassian Statuspage with Mobile applications, Strava.com, API, Upload, AWS and MCP Connector components |\n| Unread pages | The API Agreement (strava.com/legal/api), terms, privacy policy, subscription prices and any security.txt on www.strava.com, whose robots.txt disallows ClaudeBot and does not name Claude-User |\n| Capabilities | hobbies.activities, hobbies.routes |\n| Tags | hosted, mcp, remote-mcp, oauth, read-only-mode, paid, subscription, approval-required, status-page, openapi, closed-source |\n| JSON | https://www.anchorterminal.com/api/v1/tools/strava.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-03 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 63 | 12.6 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 50 | 8.1 |\n| Agent ergonomics | 13% | 16.2 | 49 | 8.0 |\n| Security \u0026 auth | 14% | 17.5 | 48 | 8.4 |\n| Payments \u0026 pricing | 10% | 12.5 | 0 | 0.0 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 40 | 3.5 |\n| Transparency \u0026 trust (editorial 31, provenance 86) | 7% | 8.8 | 59 | 5.2 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **45.8 → E** |\n\n### Why each score\n\n- Reliability 63 (checked 2026-11-03): Read with the hosted lines on the MCP Connector, the surface Strava sanctions for an assistant, with the V3 API where the connector publishes nothing. status.strava.com on Atlassian Statuspage lists Mobile applications, Strava.com, API, Upload, AWS and MCP Connector components with a history feed (20). From 4 August to 3 November 2026 the feed has 15 resolved incidents. None touches the MCP Connector; the API component had Beacon failures for 48 minutes on 23 October; activity uploads were degraded for 3 hours 7 minutes on 27 September with the mobile app unavailable for most users, and Garmin uploads were delayed twice. For the graded surface that reads as minor incidents only (20). API limits are published with numbers (200 per 15 minutes and 2,000 a day, 100 and 1,000 for reads, doubled after the self-service upgrade); the MCP article says limits per minute and per day exist and gives none (8 of 15). The API returns 429 with a JSON error and X-RateLimit-Usage headers and asks callers to throttle, with no Retry-After, and the connector is read-only, so retries are safe; nothing on MCP overload (5 of 15). No SLA (0). The connector launched on 1 June 2026 and carries no beta label (10). 20 + 20 + 8 + 5 + 0 + 10 = 63.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 50 (checked 2026-11-03): A public Swagger 2.0 file describes the V3 API (29 paths, 31 operations, 7 OAuth scopes). The MCP tool definitions are only visible after OAuth, which we did not run, so the contract line is scored on the API half (15 of 25). No llms.txt on developers.strava.com (404) and no Markdown docs (0). The support article names the data the connector reads (activity history, fitness trends, cross-sport insights, gear, best efforts, weather, streaks) and the Swagger descriptions state each operation's purpose and scope; no when-not-to-use guidance and no tool descriptions read (6 of 20). The Swagger file has enums for upload data_type, stream keys and explore activity_type and marks required parameters; one PUT /athlete parameter is declared in the path with no placeholder; MCP inputs unread (6 of 15). Most 200 responses carry examples, errors return a Fault object, 429 is not in the file, and the rate-limits page documents the 429 body (8 of 15). A dated changelog on developers.strava.com with removals announced three months ahead (15). 15 + 0 + 6 + 6 + 8 + 15 = 50.\n- Agent ergonomics 49 (checked 2026-11-03): The connector's tool count and definition sizes are not public, so context cost is scored as unknown (10 of 25). The API pages with page and per_page up to 200, before and after timestamps on activities and a cursor on comments; stream keys select channels; whether the MCP tools size their output is unread (12 of 20). API errors return a Fault object with a message and a 429 JSON error, with no error codes list; MCP errors unread (8 of 20). The connector is read-only, so every call is safe to repeat, and the API's reads are too; no idempotency key on uploads and no annotations read (12 of 20). Setup is one `claude mcp add` command plus browser consent; the API has sensible defaults but no official SDKs, only Swagger Codegen (7 of 15). 10 + 12 + 8 + 12 + 7 = 49.\n- Security \u0026 auth 48 (checked 2026-11-03): OAuth 2.0 with seven scopes, 6-hour access tokens, rotating refresh tokens that invalidate the previous one, and POST /oauth/revoke with Basic auth; the connector's consent is in the browser and revocable under My Apps. The token endpoint's parameter table lists client_secret, refresh_token and access_token as query parameters, a documented option that costs 10 (20 of 30). The connector is read-only and scoped to one account, and the API splits read, read_all and write scopes by resource; no confirmation step exists for `activity:write` (18 of 20). Activity titles, descriptions, comments and club posts are user text the connector returns, with no guidance on treating them as untrusted (5 of 15). My Apps lists connected apps for revocation and the API dashboard shows rate-limit usage; no per-call log (5 of 15). security.txt, a disclosure policy, a bug bounty and certifications would sit on www.strava.com, which our reader could not fetch, and the support article's \"security and quality guardrails\" is a claim; scored absent and named in openQuestions (0 of 20). 20 + 18 + 5 + 5 + 0 = 48.\n- Payments \u0026 pricing 0 (checked 2026-11-03): Read with the hosted rubric. No x402, MPP or L402 (0). A subscription is required and the FAQ says it carries no extra API fee, but the price is on www.strava.com, which robots.txt disallows for our reader, so the pricing line is scored absent and named in openQuestions (0 of 20). No free tier for the connector or for Standard Tier apps, and any subscription trial sits on the unread host (0 of 20). A person subscribes and completes OAuth in a browser (0). 0 + 0 + 0 + 0 = 0.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 40 (checked 2026-11-03): Read for a closed service. Gemini support for the connector arrived on 28 October 2026, and the API changelog's newest entry is 1 September 2026 (30). In the 90 days to 3 November, dated changes are the 1 September endpoint removals and the 28 October Gemini release; the 18 September FAQ is a document, not a change, so three are not established (0 of 20). A dated changelog, a Developer FAQ on the Community Hub (closed to replies), a developer forum there and a support site (10 of 15). No entry in the official MCP registry under a strava.com namespace and no official SDKs, only Swagger Codegen (0 of 15). No package or CI to assess (0 of 10). 30 + 0 + 10 + 0 + 0 = 40.\n- Transparency \u0026 trust 59 (checked 2026-11-03): Closed service. The API Agreement (updated 1 June 2026) and the terms are on www.strava.com, which our reader could not fetch; the Developer FAQ summarises their restrictions on AI tools and intermediaries (10 of 30). The privacy policy is on the same host. The press release and support article say data stays the user's, the connection is read-only, and Strava chose Anthropic because it would not train on user data without consent; no retention periods or DPA were read (5 of 30). Deprecation notices carry dates, with removals announced on 1 June 2026 for 1 September, the base URL change available from 4 January 2027, and the legacy deauthorise endpoint unsupported from 1 June 2027 (16 of 20). Subprocessors and data locations were not read (0 of 20). 10 + 5 + 16 + 0 = 31.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (17 items). What it covers is at https://www.anchorterminal.com/fixes/strava.md (JSON https://www.anchorterminal.com/fixes/strava.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"strava\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- Judgement call on surface. Graded on the MCP Connector, which Strava's FAQ points single users to and which is the only route an AI assistant can take under the Developer FAQ's refusal of apps that expose athlete data to third-party AI tools. The V3 API fills the lines the connector publishes nothing for, and the notes say which.\n- unchecked: the MCP tool list, tool schemas, annotations and rate-limit numbers, which are visible only after OAuth with a subscribed account. No session was opened.\n- unchecked: the Strava API Agreement (strava.com/legal/api, updated 1 June 2026), the terms of service, the privacy policy, retention periods, subprocessors, the subscription price and any security.txt. www.strava.com/robots.txt disallows ClaudeBot and does not name Claude-User, so nothing on that host was fetched. Payments scores 0 and transparency 31 partly for that reason.\n- firstReleased is 1 June 2026, the connector's launch. The V3 API is older; its changelog's earliest entry is from 2021 and the API's first release date was not found on a readable page.\n- The Developer FAQ's table puts Extended Access at 11 to 9,999 athletes while its text says 10,000 or more; the page does not resolve it.\n- The support article dates Claude support to June 2026 and Gemini to October 2026 but carries no publication date beyond \"Updated this week\".\n- The humans file records the 2020 and 2025 funding rounds from press coverage because press.strava.com carries no funding release; a later pass could confirm them from a first-hand page.\n\n### Sources\n\n- MCP Connector support article: \u003chttps://support.strava.com/en-us/articles/15401531-strava-mcp-connector\u003e (seen 2026-11-03)\n- API and MCP FAQ (18 September 2026): \u003chttps://support.strava.com/en-us/articles/15401526-strava-api-and-mcp-faq\u003e (seen 2026-11-03)\n- Developer FAQ (tiers, AI restriction): \u003chttps://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906\u003e (seen 2026-11-03)\n- press release, MCP Connector launch: \u003chttps://press.strava.com/articles/strava-launches-mcp-connector\u003e (seen 2026-11-03)\n- press release, Gemini integration: \u003chttps://press.strava.com/articles/strava-now-integrated-as-a-connected-app-in-google-gemini-enabling-users-to-get-more-personalized-training-insights\u003e (seen 2026-11-03)\n- press index: \u003chttps://press.strava.com/\u003e (seen 2026-11-03)\n- status page components: \u003chttps://status.strava.com/\u003e (seen 2026-11-03)\n- status history feed: \u003chttps://status.strava.com/history.atom\u003e (seen 2026-11-03)\n- API reference: \u003chttps://developers.strava.com/docs/reference/\u003e (seen 2026-11-03)\n- getting started: \u003chttps://developers.strava.com/docs/getting-started/\u003e (seen 2026-11-03)\n- authentication and scopes: \u003chttps://developers.strava.com/docs/authentication/\u003e (seen 2026-11-03)\n- rate limits: \u003chttps://developers.strava.com/docs/rate-limits/\u003e (seen 2026-11-03)\n- webhooks: \u003chttps://developers.strava.com/docs/webhooks/\u003e (seen 2026-11-03)\n- changelog: \u003chttps://developers.strava.com/docs/changelog/\u003e (seen 2026-11-03)\n- docs overview: \u003chttps://developers.strava.com/docs/\u003e (seen 2026-11-03)\n- Swagger 2.0 file: \u003chttps://developers.strava.com/swagger/swagger.json\u003e (seen 2026-11-03)\n- MCP registry search: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=strava\u003e (seen 2026-11-03)\n- robots.txt, www.strava.com (ClaudeBot disallowed): \u003chttps://www.strava.com/robots.txt\u003e (seen 2026-11-03)\n- robots.txt, status.strava.com: \u003chttps://status.strava.com/robots.txt\u003e (seen 2026-11-03)\n- robots.txt, press.strava.com: \u003chttps://press.strava.com/robots.txt\u003e (seen 2026-11-03)\n- RDAP for strava.com: \u003chttps://rdap.verisign.com/com/v1/domain/strava.com\u003e (seen 2026-11-03)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/strava/history.json\n\n- 2026-11-03: graded 45.8 E (methodology 0.7)\n\n## Who's behind it (provenance 86/100, checked 2026-11-03)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Strava, Inc. | 20/20 |\n| Domain age | strava.com, registered 2003-12-22 (22 years) | 15/15 |\n| Endpoint on the vendor's domain | mcp.strava.com | 15/15 |\n| Terms of service | read, states 6 of the 7 things a reader expects, and has 2 clauses that cost points | 5.1/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | status.strava.com | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | could not be fetched | 0/10 |\n| People named | 4 named with their role, none with a public profile | 7/10 |\n| Support route | help pages, a community | 5/5 |\n\nStrava, Inc. is the name in the footer of press.strava.com. The terms and privacy policy on www.strava.com were not read.\n\nwww.strava.com/robots.txt disallows ClaudeBot (with Google-Extended, GPTBot and Meta-ExternalAgent) for the whole site and does not name Claude-User or Claude-SearchBot; its wildcard group disallows /api/ and athlete, activity and route pages. Nothing on that host was fetched. developers.strava.com has no robots.txt, press.strava.com allows everything, status.strava.com disallows /api/ and /embed/, support.strava.com and communityhub.strava.com allow the pages read.\n\nThe API Agreement link in the docs is strava.com/legal/api, which the rate-limits page says was updated on 1 June 2026. Not read.\n\nsecurity.txt on www.strava.com could not be requested, so its state is unknown. developers.strava.com/llms.txt returns 404.\n\nRDAP (Verisign) gives strava.com a creation date of 22 December 2003.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.strava.com/legal/api), read 2026-11-03, dated 2026-06-01, states 6 of the 7 things a reader expects.\n\n- To know. Restricts benchmarking or competitive use (costs points). \"You may not create applications that compete with or replicate Strava functionality.\"\n- To know. Says the terms or the service can change without notice (costs points). \"Strava reserves the right at any time (and for any reason) to modify or discontinue, temporarily or permanently, the Strava API Materials, your use of the Strava API Materials, or any portion thereof with or without notice to you and without any form of compensation or consideration to you, regardless of the status of…\"\n- To know. Says access can be ended without notice or for any reason. \"Strava reserves the right at any time (and for any reason) to modify or discontinue, temporarily or permanently, the Strava API Materials, your use of the Strava API Materials, or any portion thereof with or without notice to you and without any form of compensation or consideration to you\"\n- Gives the date it was last updated. Last updated 2026-06-01.\n- Names the governing law or courts. Disputes go to the courts of San Francisco County, California.\n- States a limit on its liability. Capped at the greater of $100 and the fees paid in the year before the claim.\n- Says how changes to the terms are announced. Changes are posted, with no other notice named.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-11-03). Liability is capped at the greater of fees paid in the last year or 100 US dollars, and API access is currently free of charge. \"STRAVA’S AGGREGATE LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (i) THE FEES YOU PAID TO STRAVA FOR USE OF THE STRAVA API MATERIALS IN THE LAST YEAR OR (ii) ONE HUNDRED DOLLARS ($100).\"\n- Also in the text (2026-11-03). Strava Data from a user may only be displayed or disclosed in the application to that same user, and other users' data may not be shown even when public on Strava. \"Strava Data provided by a specific user can only be displayed or disclosed in your Developer Application to that user.\"\n- Also in the text (2026-11-03). The developer grants Strava a transferable, sublicensable licence to display the application and use the developer's name, likeness and brand for Strava's marketing. \"You hereby grant to Strava a paid-up, royalty-free, non-exclusive, worldwide, transferable, sublicenseable, right and license, under all applicable intellectual property rights, for Strava’s marketing and promotional purposes\"\n\n**Privacy policy** (https://www.strava.com/legal/privacy), read 2026-11-03, dated 2026-01-01, states 8 of the 8 things a reader expects.\n\n- To know. Says it may use customer content to train or improve models, and gives an opt-out. \"AI Development: We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers.\"\n- To know. Says it sells personal data or shares it for advertising. \"We may also disclose information to marketing partners or third-party advertising networks to promote our services (with your consent, where required).\"\n- Gives the date it was last updated. Last updated 2026-01-01.\n- Says how long data is kept. For as long as needed, with no period named.\n- Gives a privacy contact. Names a data protection officer.\n- Says where data is transferred or stored. Relies on standard contractual clauses.\n- Also in the text (2026-11-03). Profiles and activities of users aged 18 or over are viewable by everyone, including the public and search engines, by default. \"If you are 18 years or older, certain information, including your profile and your activities, is set by default to be viewable by “Everyone.”\"\n\n## Humans behind the project (researched 2026-11-03 from public pages, not part of the grade)\n\n### Key people\n\n- Mark Gainey, Co-founder\n- Michael Horvath, Co-founder, former CEO\n- Michael Martin, Chief Executive Officer\n- Ryan Dixon, VP, Partnerships and Developer Relations\n- Note: Founders and the CEO are taken from Strava's press release of 11 December 2023 on press.strava.com, and Ryan Dixon from the MCP Connector release of 1 June 2026. Strava's about and leadership pages are on www.strava.com, whose robots.txt disallows ClaudeBot without naming Claude-User, so they were not read and the roster may be incomplete. No first-hand page linked a personal LinkedIn, X or GitHub account, so none is recorded. Investors were looked for on press.strava.com (no funding release found), the press release boilerplates and web searches; the 2020 and 2025 rounds rest on press coverage of Strava's announcements, named in the sources.\n\n### Ownership and investors\n\n- Valuation: $2.2 billion as announced (the source doesn't say pre- or post-money), 2025 round led by Sequoia Capital, May 2025 (source https://sgbonline.com/strava-nets-2-2-billion-valuation-in-funding-round/)\n- Backed by: Sequoia Capital, TCV, Dragoneer Investment Group, Madrone Capital Partners, Jackson Square Ventures, Go4it Capital\n\n### Getting support\n\n- Help: https://support.strava.com/\n- Help: https://communityhub.strava.com/developers-knowledge-base-14\n- Community (Strava Community Hub, developers forum): https://communityhub.strava.com/developers-knowledge-base-14\n- Sources: https://press.strava.com/articles/strava-appoints-google-executive-michael-martin-as-ceo, https://press.strava.com/articles/strava-launches-mcp-connector, https://press.strava.com/articles/strava-now-integrated-as-a-connected-app-in-google-gemini-enabling-users-to-get-more-personalized-training-insights, https://press.strava.com/, https://support.strava.com/en-us/articles/15401531-strava-mcp-connector, https://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906, https://omm.com/news/press-releases/o-melveny-advises-strava-on-us-110-million-financing-led-by-tcv-and-sequoia, https://sgbonline.com/strava-nets-2-2-billion-valuation-in-funding-round/, https://www.builtinsf.com/articles/strava-achieves-2b-valuation-20250523\n\n## Live (updated 2026-11-04 19:35 UTC)\n\n- Right now: up, HTTP 401, 346 ms, checked 2026-11-04 19:35 UTC (mcp-initialize on `https://mcp.strava.com/mcp`, asks for auth)\n- Uptime 24h 100.0% (43 probes) · 30 days 100.0% (43 probes) · p50 396 ms · p95 492 ms\n- Vendor status page: none, All Systems Operational\n- security.txt: expired, expires 2026-10-31T00:00:00.000Z\n- Always current: https://www.anchorterminal.com/api/v1/live/strava.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- Official hosted MCP server at https://mcp.strava.com/mcp, read-only, scoped to the subscriber's own account and revocable under Settings, My Apps\n- status.strava.com has separate API and MCP Connector components, and no MCP incident appears between 4 August and 3 November 2026\n- V3 API with a public Swagger 2.0 file, seven OAuth scopes, 6-hour access tokens and documented rate-limit headers\n- Dated API changelog with notice periods, such as the 1 June 2026 announcement of the 1 September 2026 endpoint removals\n- Webhooks for activity and deauthorisation events, so an app need not poll\n\n## Weaknesses\n\n- The MCP tool list, schemas and rate-limit numbers are not published; they are only visible after OAuth, which we did not run\n- A Strava subscription is needed for the connector and for Standard Tier API apps, and the price is on a page our reader could not fetch\n- API apps that expose athlete data to third-party AI tools are not approved beyond 10 athletes, and intermediary platforms are non-compliant\n- The API Agreement, terms, privacy policy and any security.txt are on www.strava.com, which disallows our reader, so none was read\n- No official SDKs, no llms.txt and no entry in the official MCP registry\n\n\n\n## Before you call it (notes for agents)\n\n1. Connect with `claude mcp add --transport http strava-mcp https://mcp.strava.com/mcp` and have the subscriber complete the OAuth consent in the browser; a free account is refused\n2. Expect reads only. The connector cannot create, edit or delete activities, so hand uploads to the person or to an app with the `activity:write` scope\n3. On the V3 API, watch X-RateLimit-Usage against 200 per 15 minutes and 2,000 a day, and use webhooks rather than polling; a 429 carries no Retry-After\n4. Do not route Strava API data through another AI tool for an app serving more than 10 athletes; the Developer FAQ says such apps are not approved\n5. Move V3 calls to https://api-v3.strava.com after 4 January 2027 and use POST /oauth/revoke, since the legacy deauthorise endpoint ends on 1 June 2027\n\n## Connect\n\nFirst request:\n\n```bash\ncurl -H \"Authorization: Bearer \u003cACCESS_TOKEN\u003e\" \"https://www.strava.com/api/v3/athlete/activities?per_page=30\"\n```\n\nClaude Code:\n\n```bash\nclaude mcp add --transport http strava-mcp https://mcp.strava.com/mcp\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"strava\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.strava.com/mcp\"\n }\n }\n}\n```\n\nThrough letme: https://letme.dev/strava (letme picks it for hobbies.activities, the top-graded tool for the job, letme picks it for hobbies.routes, the top-graded tool for the job). letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Ride with GPS API | E | 45.2 | 1139 | hobbies.routes, hobbies.activities | no | https://www.anchorterminal.com/tools/ride-with-gps.md |\n| Ticketmaster Discovery API | E | 42.9 | 1176 | same category (Hobbies, sport \u0026 recreation) | no | https://www.anchorterminal.com/tools/ticketmaster.md |\n| Chess.com Published-Data API | E | 40.8 | 1207 | same category (Hobbies, sport \u0026 recreation) | no | https://www.anchorterminal.com/tools/chess-com.md |\n| Rebrickable | F | 34.7 | 1255 | same category (Hobbies, sport \u0026 recreation) | no | https://www.anchorterminal.com/tools/rebrickable.md |\n| Ravelry | F | 16.5 | 1311 | same category (Hobbies, sport \u0026 recreation) | no | https://www.anchorterminal.com/tools/ravelry.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- The MCP Connector launched on 1 June 2026 with Claude and reached Google Gemini in the US on 28 October 2026. Strava says it is read-only, scoped to the subscriber's own account and revocable from Strava settings (source: \u003chttps://press.strava.com/articles/strava-launches-mcp-connector\u003e)\n- Strava's API and MCP FAQ of 18 September 2026 says it launched with Anthropic because it believes Anthropic will honour terms not to use user data for model training without consent, and that a subscription deters exploitation of the API (source: \u003chttps://support.strava.com/en-us/articles/15401526-strava-api-and-mcp-faq\u003e)\n- The Developer FAQ says apps that expose athlete data to third-party AI tools will not be approved for more than 10 athletes, and that entering app credentials on an intermediary platform that makes API requests for you is non-compliant (source: \u003chttps://communityhub.strava.com/developers-knowledge-base-14/strava-api-faq-12906\u003e)\n- On 1 September 2026 the Club Activities, Club Members and Club Admins endpoints were removed and Explore Segments was restricted to Extended Access developers, announced on 1 June 2026. A new base URL, api-v3.strava.com, is available from 4 January 2027 (source: \u003chttps://developers.strava.com/docs/changelog/\u003e)\n- Rate limits for API apps are 200 requests per 15 minutes and 2,000 a day overall, 100 and 1,000 for reads, doubling after the self-service upgrade, with X-RateLimit-Limit and X-RateLimit-Usage headers and a 429 JSON error. The MCP article says limits per minute and per day exist without numbers (source: \u003chttps://developers.strava.com/docs/rate-limits/\u003e)\n- status.strava.com (Atlassian Statuspage) lists API and MCP Connector components. From 4 August to 3 November 2026 the feed shows 15 incidents, one on the API (Beacon failures, 48 minutes on 23 October) and none on the MCP Connector (source: \u003chttps://status.strava.com/history.atom\u003e)\n- The official MCP registry has no entry under a strava.com namespace; the 25 strava results are third-party servers (source: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=strava\u003e)\n- www.strava.com/robots.txt disallows ClaudeBot for the whole site and does not name Claude-User, so the API Agreement, terms, privacy policy and subscription page there were not read\n\n- #1 of 6 in Best hobby, sport and recreation APIs for AI agents: https://www.anchorterminal.com/best/hobbies/index.md\n- All 3 hobbies comparisons: https://www.anchorterminal.com/compare/hobbies/index.md\n\n## Compare\n\n- [Ride with GPS API vs Strava MCP Connector + API](https://www.anchorterminal.com/compare/ride-with-gps-vs-strava.md): E 45.2 vs E 45.8\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on strava.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"strava\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/strava\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/strava.svg\" alt=\"Strava MCP Connector + API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Strava MCP Connector + API on Anchor Terminal](https://www.anchorterminal.com/badges/strava.svg)](https://www.anchorterminal.com/tools/strava)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/strava\"\u003eStrava MCP Connector + API on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Strava MCP Connector + API is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/strava-dark.png\n- Light: https://www.anchorterminal.com/assets/share/strava-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Hobbies, sport \u0026 recreation", "url": "https://www.anchorterminal.com/categories/hobbies" }, { "name": "Strava MCP Connector + API", "url": "" } ], "description": "Strava's MCP Connector is a hosted, read-only MCP server that gives a Strava subscriber's AI assistant access to their own activity history, fitness trends, gear and best efforts. The V3 REST API reaches the same data for registered developer apps.", "facts": [ "rank #1125 of 1349", "OAuth auth", "0 desk reviews" ], "h1": "Strava MCP Connector + API", "image": "https://www.anchorterminal.com/assets/og/tools-strava.png", "path": "/tools/strava", "published": "2026-10-01", "section": "tools", "title": "Strava MCP Connector + review: pricing, alternatives, grade E", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/tools/strava" }, "tokens": { "markdown": 8800, "slim": 1780 }, "version": 1 }