Musclesworked Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Musclesworked Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for the musclesworked.com exercise-to-muscle mapping API.
Connects Claude Desktop, Claude Code, Cursor, and other MCP clients to 856 exercises and 65 muscles with detailed primary/secondary/stabilizer activation data across 14 muscle groups.
Get an API key at musclesworked.com/dashboard.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp"],
"env": {
"MUSCLESWORKED_API_KEY": "mw_live_..."
}
}
}
}claude mcp add musclesworked -- npx -y musclesworked-mcp --api-key mw_live_...Or add to .mcp.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp", "--api-key", "mw_live_..."]
}
}
}Add to .cursor/mcp.json:
{
"mcpServers": {
"musclesworked": {
"command": "npx",
"args": ["-y", "musclesworked-mcp"],
"env": {
"MUSCLESWORKED_API_KEY": "mw_live_..."
}
}
}
}| Tool | Description |
|---|---|
get_muscles_worked | Get primary, secondary, and stabilizer muscles for an exercise |
find_exercises | Find exercises targeting a specific muscle with optional filters |
analyze_workout | Analyze a workout for coverage, gaps, and imbalances |
get_alternatives | Find alternative exercises ranked by muscle overlap |
search_exercises | Search exercises by name to discover IDs |
search_muscles | Search muscles by name to discover IDs |
| Option | Description |
|---|---|
--api-key <key> | API key (or set MUSCLESWORKED_API_KEY env var) |
MUSCLESWORKED_API_URL | Override base URL (default: https://musclesworked.com) |
git clone https://github.com/csjoblom/musclesworked-mcp.git
cd musclesworked-mcp
npm install
npm run build
# Test with MCP Inspector
MUSCLESWORKED_API_KEY=mw_live_... npx @modelcontextprotocol/inspector node dist/index.jsMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.