Health Connect MCP server
The HC Sync Health Connect MCP server lets an authorized AI agent read uploaded Android health data through 3 tools: list_users, get_daily_summary and get_records. Your Android app collects permitted data first. Connect a remote HTTP MCP client with the project read key, which can read every user’s data in that project.
Last updated: 2026-11-04. Source for the 2026 service details: HC Sync page details.
How do you connect an MCP client?
{ "mcpServers": { "health": {
"type": "http",
"url": "https://hcsync.dev/mcp",
"headers": { "authorization": "Bearer hcs_read_…" } } } }
Use the read key you get with your project. It can read data but can't change keys, webhooks or delete anything. Treat it like a password all the same: it reads every user's data in the project, so only put it in clients you trust.
Which MCP tools are available?
| Tool | What it does |
|---|---|
list_users | Lists users who have synced |
get_daily_summary | Daily steps, sleep, heart rate, weight for one user, in their time zone |
get_records | Raw records by type and time range |
How does Health Connect data reach the server?
Health Connect lives on the phone, so an app has to read it. Add the HC Sync Android library to your app, ask for permissions, and call HcSync.start(). It uploads about every hour. See the REST API page for the server side.
How is health data handled?
Records are stored in the US, deleted after 13 months, and removed from the database at once with DELETE /v1/users/{id}. Tool descriptions tell agents to treat record contents as data, not instructions; that lowers the risk of prompt injection but can't rule it out. Privacy policy.
What else should you know?
Which tools can agents use?
The tools are list_users, get_daily_summary and get_records.
Which key should a client use?
Use the read key you get with your project. It can read data but can't change keys, webhooks or delete anything.
Does Health Connect need an Android app?
Health Connect lives on the phone, so an app has to read it.