← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionEmilia Protocol MCP ServerExact-action approval and verifiable signed receipts for consequential agent actions.Hevy MCPManage your Hevy workout data from AI assistants via MCP.
FMRS49 / 100 · D77 / 100 · B
Reliability8 / 2012 / 20
Security and permissions9 / 2016 / 20
Maintenance11 / 2016 / 20
Documentation12 / 2018 / 20
Setup experience9 / 2015 / 20
Best for
  • Teams building autonomous agents on MCP that need an authority control plane
  • Security and platform engineering teams that need exact-action approval and verifiable evidence
  • Enterprise deployments that bind human or institutional authorization to one exact executable action
  • Hevy PRO users who want AI assistants to directly access their workout data
  • People who prefer using MCP clients like Claude, Cursor, Codex for fitness tracking
  • Anyone needing summaries and insights from their training data
Not for
  • Projects expecting a replacement for OAuth/OIDC, workload identity, or policy engines
  • Users expecting the server itself to be an auditor, accredited certifier, or settlement rail
  • Deployments that do not place Gate on the credential-owning path yet expect preventive control
  • Users without a Hevy PRO subscription (API key required)
  • Users who want to use the server without an API key
  • Those needing delete workflows (Hevy API does not expose delete endpoints)
Required permissions
  • EP_API_KEY is the key needed for write and live action-guard operations (optional; public receipt lookup may work without it)
  • The server runs as a local stdio process and can read the environment variables configured for it
  • Enabling EP_INCLUDE_REGISTRY_TOOLS exposes additional registry and reputation tool interfaces
  • Requires HEVY_API_KEY environment variable for Hevy API authentication
  • Can create, update, and replace workouts, routines, folders, templates, and body measurements via tools
  • Read operations can fetch workouts, routines, folders, templates, history, and user info
Risks and side effects
  • Preventive control holds only under complete mediation; paths that bypass the enforcement point are unconstrained
  • Without EP_API_KEY, write operations and live action guarding may be unavailable
  • Admission is not execution and execution is not effect; unknown results must be reconciled, not blindly retried
  • Environment switches that broaden the advertised tool set widen the exposed surface
  • The referenced IETF documents are individual Internet-Drafts, not RFCs or IETF endorsement
  • API key can be misused if leaked; do not expose in URLs, logs, or screenshots
  • Create operations may produce duplicates on retry; update operations replace existing records
  • The server sends data to the Hevy API and may send telemetry to external services unless disabled
Supported clientsClaude DesktopClaude Desktop, Cursor, Codex, Antigravity
Tools026