tether-mcp 0.1.0__tar.gz

tether_mcp-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fino-wind (Tether — AI Health Sync)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

tether_mcp-0.1.0/PKG-INFO

@@ -0,0 +1,178 @@
+Metadata-Version: 2.4
+Name: tether-mcp
+Version: 0.1.0
+Summary: Local MCP server for Tether — AI Health Sync: your AI agent reads your end-to-end-encrypted Apple Health data (sleep, cycle, weight, water), decrypted only on your machine
+Author: Fino-wind
+License: MIT License
+        
+        Copyright (c) 2026 Fino-wind (Tether — AI Health Sync)
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Project-URL: Homepage, https://tetherme.app
+Project-URL: Documentation, https://tetherme.app/mcp
+Project-URL: Repository, https://github.com/Fino-wind/tether-mcp
+Project-URL: Issues, https://github.com/Fino-wind/tether-community/issues
+Project-URL: App Store, https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985
+Keywords: mcp,model-context-protocol,apple-health,healthkit,e2ee,claude,ai-agent,sleep,health
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography<47.0.0,>=42.0.0
+Requires-Dist: httpx<1.0.0,>=0.28.0
+Requires-Dist: keyring>=24
+Requires-Dist: mcp<2.0.0,>=1.13.0
+Provides-Extra: dev
+Requires-Dist: pytest<9.0.0,>=8.3.0; extra == "dev"
+Requires-Dist: ruff<1.0.0,>=0.11.0; extra == "dev"
+Requires-Dist: mypy<2.0.0,>=1.13.0; extra == "dev"
+Provides-Extra: qr
+Requires-Dist: qrcode<9.0.0,>=8.0.0; extra == "qr"
+Dynamic: license-file
+
+# Tether MCP Server
+
+**Let your own AI agent read your health data — without the cloud ever seeing it.**
+
+This is the official local [MCP](https://modelcontextprotocol.io) server for [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985), the iOS app that syncs Apple Health data (sleep, heart rate, menstrual cycle, weight, water, symptoms) between partners and to your own AI — end-to-end encrypted.
+
+Tether embeds no AI and runs no model on your phone. Intelligence lives where you control it: Claude Code, Claude Desktop, or any MCP-capable agent running on your own machine. This server is the bridge — it holds a private key that never leaves your computer, pulls ciphertext from the cloud, and decrypts **only locally**.
+
+```
+iPhone (Apple Health) ──E2EE──▶ cloud (ciphertext only) ──E2EE──▶ this server (your machine) ──▶ your AI agent
+```
+
+## Requirements
+
+- [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) on iOS, with a **Pro** subscription (the AI-agent interface is the Pro tier)
+- Python 3.11+ on the machine where your agent runs (macOS / Linux / Windows)
+
+## Quick start
+
+### 1. Install
+
+With [uv](https://docs.astral.sh/uv/) (recommended — no clone needed):
+
+```bash
+uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp status
+```
+
+Or with pip:
+
+```bash
+pip install 'tether-mcp[qr] @ git+https://github.com/Fino-wind/tether-mcp'
+```
+
+### 2. Bind your phone
+
+```bash
+tether-mcp bind
+```
+
+This generates a keypair on your machine and prints a QR code. In the Tether iOS app, open **Settings → Data & AI → MCP Server** and scan it (or import a QR screenshot from Photos). The app authorizes this machine and starts sealing your health envelopes to its public key. The private key stays in `~/.tether/mcp-local/` (owner-only `0600` permissions, OS keychain where available) — it is never uploaded anywhere.
+
+### 3. Connect your agent
+
+**Claude Code** (one line):
+
+```bash
+claude mcp add tether-health -- uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio
+```
+
+**Claude Desktop** (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "tether-health": {
+      "command": "uvx",
+      "args": ["--from", "git+https://github.com/Fino-wind/tether-mcp", "tether-mcp", "serve", "--transport", "stdio"]
+    }
+  }
+}
+```
+
+Any other MCP client: run `tether-mcp serve --transport stdio`, or `serve --transport http` for a loopback streamable-HTTP endpoint with bearer-token auth.
+
+> **Claude Desktop note**: it does not inherit your shell `PATH`. If `uvx` isn't found, use the absolute path (`which uvx`) as `command`.
+
+Debugging: `npx @modelcontextprotocol/inspector uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio`
+
+Then just ask your agent: *“How did we sleep last night?”*
+
+## MCP tools (16)
+
+| Tool | Returns |
+|---|---|
+| `tether_status` | Local binding state (never exposes keys or tokens) |
+| `tether_start_binding` | A fresh QR binding payload for the iOS app to scan |
+| `tether_poll_binding` | One poll for the iOS authorization to complete binding |
+| `tether_sync_sleep` | Recent sleep sessions incl. heart-rate samples, per-day primary-session selection matching the iOS app |
+| `get_sleep_detail` | Per-night heart-rate + respiratory-rate + sleep-stage timeline |
+| `get_water_intake` | Daily water intake + computed daily average |
+| `get_weight_trend` | Daily weights + latest/avg/min/max + weekly trend rate |
+| `get_menstrual_cycle` | Cycle samples + next-period prediction *(sensitive — explicit iOS opt-in required)* |
+| `get_symptoms` | HealthKit symptom days grouped by data owner *(sensitive)* |
+| `get_notes` | Free-text day annotations with their writer *(sensitive)* |
+| `get_activity` | Daily activity rings: steps / energy / exercise minutes / stand hours / distance |
+| `get_resting_hr` | Resting heart-rate records + window mean |
+| `get_workouts` | Workout records: type / duration / calories / distance |
+| `get_mindfulness` | Mindful sessions and minutes per day |
+| `get_hrv` | Heart-rate variability (SDNN) records + window mean |
+| `get_wrist_temp` | Sleeping wrist-temperature baseline deviation |
+
+Every data tool accepts `owner` (a user-ID prefix) to filter to one person — the server may hold both your and your partner's shared records, and omitting `owner` mixes them into one pool, so per-person questions should always pass it. (Earlier releases named some tools `get_partner_*`; they were renamed in the 16-tool release since they return whichever owners' records this server holds, not specifically the partner's.)
+
+Reads are cache-first: decrypted records are cached locally (owner-only files, 600 s TTL, `TETHER_MCP_CACHE_TTL` to override) so repeat queries answer in ~0.2 s with zero network; pass `fresh=true` to force a cloud round trip. The same service layer backs a full CLI (`tether-mcp sleep / water / weight / …` — every data subcommand takes `--owner` too) if you prefer scripts over MCP.
+
+## Privacy & security model
+
+- **End-to-end encryption**: Curve25519 ECDH + HKDF-SHA256 + AES-GCM. Every health record is sealed on-device to each authorized recipient's public key (your partner, and this server once bound).
+- **The cloud only ever holds ciphertext.** Tether's backend cannot read your health data — architecturally, not just by policy.
+- **Decryption happens here**, on hardware you own. The private key and server token are never exposed through any tool result.
+- **Sensitive kinds** (menstrual cycle, symptoms, notes) reach this server only if explicitly opted in inside the iOS app, and are never re-exported by the server.
+- HTTP transport binds to loopback by default and requires a bearer token; binding a non-loopback address fails closed unless explicitly allowed — front it with TLS if you must expose it.
+
+You can audit all of the above in this repository — that is why it is open source.
+
+## Development
+
+```bash
+pip install -e '.[dev,qr]'
+pytest
+```
+
+## License
+
+[MIT](LICENSE). The Tether iOS app and cloud service are separate proprietary components; this repository covers the local MCP server only.
+
+---
+
+*Website: [tetherme.app](https://tetherme.app) · App Store: [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) · Bugs & feedback: [tether-community](https://github.com/Fino-wind/tether-community/issues)*
+
+<!-- mcp-name: io.github.fino-wind/tether -->

tether_mcp-0.1.0/README.md

@@ -0,0 +1,121 @@
+# Tether MCP Server
+
+**Let your own AI agent read your health data — without the cloud ever seeing it.**
+
+This is the official local [MCP](https://modelcontextprotocol.io) server for [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985), the iOS app that syncs Apple Health data (sleep, heart rate, menstrual cycle, weight, water, symptoms) between partners and to your own AI — end-to-end encrypted.
+
+Tether embeds no AI and runs no model on your phone. Intelligence lives where you control it: Claude Code, Claude Desktop, or any MCP-capable agent running on your own machine. This server is the bridge — it holds a private key that never leaves your computer, pulls ciphertext from the cloud, and decrypts **only locally**.
+
+```
+iPhone (Apple Health) ──E2EE──▶ cloud (ciphertext only) ──E2EE──▶ this server (your machine) ──▶ your AI agent
+```
+
+## Requirements
+
+- [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) on iOS, with a **Pro** subscription (the AI-agent interface is the Pro tier)
+- Python 3.11+ on the machine where your agent runs (macOS / Linux / Windows)
+
+## Quick start
+
+### 1. Install
+
+With [uv](https://docs.astral.sh/uv/) (recommended — no clone needed):
+
+```bash
+uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp status
+```
+
+Or with pip:
+
+```bash
+pip install 'tether-mcp[qr] @ git+https://github.com/Fino-wind/tether-mcp'
+```
+
+### 2. Bind your phone
+
+```bash
+tether-mcp bind
+```
+
+This generates a keypair on your machine and prints a QR code. In the Tether iOS app, open **Settings → Data & AI → MCP Server** and scan it (or import a QR screenshot from Photos). The app authorizes this machine and starts sealing your health envelopes to its public key. The private key stays in `~/.tether/mcp-local/` (owner-only `0600` permissions, OS keychain where available) — it is never uploaded anywhere.
+
+### 3. Connect your agent
+
+**Claude Code** (one line):
+
+```bash
+claude mcp add tether-health -- uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio
+```
+
+**Claude Desktop** (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "tether-health": {
+      "command": "uvx",
+      "args": ["--from", "git+https://github.com/Fino-wind/tether-mcp", "tether-mcp", "serve", "--transport", "stdio"]
+    }
+  }
+}
+```
+
+Any other MCP client: run `tether-mcp serve --transport stdio`, or `serve --transport http` for a loopback streamable-HTTP endpoint with bearer-token auth.
+
+> **Claude Desktop note**: it does not inherit your shell `PATH`. If `uvx` isn't found, use the absolute path (`which uvx`) as `command`.
+
+Debugging: `npx @modelcontextprotocol/inspector uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio`
+
+Then just ask your agent: *“How did we sleep last night?”*
+
+## MCP tools (16)
+
+| Tool | Returns |
+|---|---|
+| `tether_status` | Local binding state (never exposes keys or tokens) |
+| `tether_start_binding` | A fresh QR binding payload for the iOS app to scan |
+| `tether_poll_binding` | One poll for the iOS authorization to complete binding |
+| `tether_sync_sleep` | Recent sleep sessions incl. heart-rate samples, per-day primary-session selection matching the iOS app |
+| `get_sleep_detail` | Per-night heart-rate + respiratory-rate + sleep-stage timeline |
+| `get_water_intake` | Daily water intake + computed daily average |
+| `get_weight_trend` | Daily weights + latest/avg/min/max + weekly trend rate |
+| `get_menstrual_cycle` | Cycle samples + next-period prediction *(sensitive — explicit iOS opt-in required)* |
+| `get_symptoms` | HealthKit symptom days grouped by data owner *(sensitive)* |
+| `get_notes` | Free-text day annotations with their writer *(sensitive)* |
+| `get_activity` | Daily activity rings: steps / energy / exercise minutes / stand hours / distance |
+| `get_resting_hr` | Resting heart-rate records + window mean |
+| `get_workouts` | Workout records: type / duration / calories / distance |
+| `get_mindfulness` | Mindful sessions and minutes per day |
+| `get_hrv` | Heart-rate variability (SDNN) records + window mean |
+| `get_wrist_temp` | Sleeping wrist-temperature baseline deviation |
+
+Every data tool accepts `owner` (a user-ID prefix) to filter to one person — the server may hold both your and your partner's shared records, and omitting `owner` mixes them into one pool, so per-person questions should always pass it. (Earlier releases named some tools `get_partner_*`; they were renamed in the 16-tool release since they return whichever owners' records this server holds, not specifically the partner's.)
+
+Reads are cache-first: decrypted records are cached locally (owner-only files, 600 s TTL, `TETHER_MCP_CACHE_TTL` to override) so repeat queries answer in ~0.2 s with zero network; pass `fresh=true` to force a cloud round trip. The same service layer backs a full CLI (`tether-mcp sleep / water / weight / …` — every data subcommand takes `--owner` too) if you prefer scripts over MCP.
+
+## Privacy & security model
+
+- **End-to-end encryption**: Curve25519 ECDH + HKDF-SHA256 + AES-GCM. Every health record is sealed on-device to each authorized recipient's public key (your partner, and this server once bound).
+- **The cloud only ever holds ciphertext.** Tether's backend cannot read your health data — architecturally, not just by policy.
+- **Decryption happens here**, on hardware you own. The private key and server token are never exposed through any tool result.
+- **Sensitive kinds** (menstrual cycle, symptoms, notes) reach this server only if explicitly opted in inside the iOS app, and are never re-exported by the server.
+- HTTP transport binds to loopback by default and requires a bearer token; binding a non-loopback address fails closed unless explicitly allowed — front it with TLS if you must expose it.
+
+You can audit all of the above in this repository — that is why it is open source.
+
+## Development
+
+```bash
+pip install -e '.[dev,qr]'
+pytest
+```
+
+## License
+
+[MIT](LICENSE). The Tether iOS app and cloud service are separate proprietary components; this repository covers the local MCP server only.
+
+---
+
+*Website: [tetherme.app](https://tetherme.app) · App Store: [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) · Bugs & feedback: [tether-community](https://github.com/Fino-wind/tether-community/issues)*
+
+<!-- mcp-name: io.github.fino-wind/tether -->

tether_mcp-0.1.0/pyproject.toml

@@ -0,0 +1,71 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "tether-mcp"
+version = "0.1.0"
+description = "Local MCP server for Tether — AI Health Sync: your AI agent reads your end-to-end-encrypted Apple Health data (sleep, cycle, weight, water), decrypted only on your machine"
+readme = "README.md"
+license = { file = "LICENSE" }
+authors = [{ name = "Fino-wind" }]
+keywords = ["mcp", "model-context-protocol", "apple-health", "healthkit", "e2ee", "claude", "ai-agent", "sleep", "health"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: End Users/Desktop",
+  "License :: OSI Approved :: MIT License",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Topic :: Scientific/Engineering :: Artificial Intelligence",
+  "Topic :: Security :: Cryptography",
+]
+requires-python = ">=3.11"
+dependencies = [
+  "cryptography>=42.0.0,<47.0.0",
+  "httpx>=0.28.0,<1.0.0",
+  "keyring>=24",
+  "mcp>=1.13.0,<2.0.0",
+]
+
+[project.urls]
+Homepage = "https://tetherme.app"
+Documentation = "https://tetherme.app/mcp"
+Repository = "https://github.com/Fino-wind/tether-mcp"
+Issues = "https://github.com/Fino-wind/tether-community/issues"
+"App Store" = "https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985"
+
+[project.optional-dependencies]
+dev = [
+  "pytest>=8.3.0,<9.0.0",
+  "ruff>=0.11.0,<1.0.0",
+  "mypy>=1.13.0,<2.0.0",
+]
+qr = [
+  "qrcode>=8.0.0,<9.0.0",
+]
+
+[project.scripts]
+tether-mcp = "tether_mcp_local.cli:main"
+# Back-compat alias for the original internal name.
+tether-mcp-local = "tether_mcp_local.cli:main"
+
+[tool.pytest.ini_options]
+# src-layout: make tether_mcp_local importable for the test run without depending
+# on an editable install being present. The editable .pth can silently drop out
+# when the venv is rebuilt (e.g. via `uv sync`), which otherwise breaks collection.
+pythonpath = ["src"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py311"
+
+[tool.mypy]
+python_version = "3.11"
+check_untyped_defs = true
+warn_unused_ignores = true
+warn_return_any = true
+
+[tool.setuptools.packages.find]
+where = ["src"]

tether_mcp-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

tether_mcp-0.1.0/src/tether_mcp.egg-info/PKG-INFO

@@ -0,0 +1,178 @@
+Metadata-Version: 2.4
+Name: tether-mcp
+Version: 0.1.0
+Summary: Local MCP server for Tether — AI Health Sync: your AI agent reads your end-to-end-encrypted Apple Health data (sleep, cycle, weight, water), decrypted only on your machine
+Author: Fino-wind
+License: MIT License
+        
+        Copyright (c) 2026 Fino-wind (Tether — AI Health Sync)
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Project-URL: Homepage, https://tetherme.app
+Project-URL: Documentation, https://tetherme.app/mcp
+Project-URL: Repository, https://github.com/Fino-wind/tether-mcp
+Project-URL: Issues, https://github.com/Fino-wind/tether-community/issues
+Project-URL: App Store, https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985
+Keywords: mcp,model-context-protocol,apple-health,healthkit,e2ee,claude,ai-agent,sleep,health
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography<47.0.0,>=42.0.0
+Requires-Dist: httpx<1.0.0,>=0.28.0
+Requires-Dist: keyring>=24
+Requires-Dist: mcp<2.0.0,>=1.13.0
+Provides-Extra: dev
+Requires-Dist: pytest<9.0.0,>=8.3.0; extra == "dev"
+Requires-Dist: ruff<1.0.0,>=0.11.0; extra == "dev"
+Requires-Dist: mypy<2.0.0,>=1.13.0; extra == "dev"
+Provides-Extra: qr
+Requires-Dist: qrcode<9.0.0,>=8.0.0; extra == "qr"
+Dynamic: license-file
+
+# Tether MCP Server
+
+**Let your own AI agent read your health data — without the cloud ever seeing it.**
+
+This is the official local [MCP](https://modelcontextprotocol.io) server for [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985), the iOS app that syncs Apple Health data (sleep, heart rate, menstrual cycle, weight, water, symptoms) between partners and to your own AI — end-to-end encrypted.
+
+Tether embeds no AI and runs no model on your phone. Intelligence lives where you control it: Claude Code, Claude Desktop, or any MCP-capable agent running on your own machine. This server is the bridge — it holds a private key that never leaves your computer, pulls ciphertext from the cloud, and decrypts **only locally**.
+
+```
+iPhone (Apple Health) ──E2EE──▶ cloud (ciphertext only) ──E2EE──▶ this server (your machine) ──▶ your AI agent
+```
+
+## Requirements
+
+- [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) on iOS, with a **Pro** subscription (the AI-agent interface is the Pro tier)
+- Python 3.11+ on the machine where your agent runs (macOS / Linux / Windows)
+
+## Quick start
+
+### 1. Install
+
+With [uv](https://docs.astral.sh/uv/) (recommended — no clone needed):
+
+```bash
+uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp status
+```
+
+Or with pip:
+
+```bash
+pip install 'tether-mcp[qr] @ git+https://github.com/Fino-wind/tether-mcp'
+```
+
+### 2. Bind your phone
+
+```bash
+tether-mcp bind
+```
+
+This generates a keypair on your machine and prints a QR code. In the Tether iOS app, open **Settings → Data & AI → MCP Server** and scan it (or import a QR screenshot from Photos). The app authorizes this machine and starts sealing your health envelopes to its public key. The private key stays in `~/.tether/mcp-local/` (owner-only `0600` permissions, OS keychain where available) — it is never uploaded anywhere.
+
+### 3. Connect your agent
+
+**Claude Code** (one line):
+
+```bash
+claude mcp add tether-health -- uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio
+```
+
+**Claude Desktop** (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "tether-health": {
+      "command": "uvx",
+      "args": ["--from", "git+https://github.com/Fino-wind/tether-mcp", "tether-mcp", "serve", "--transport", "stdio"]
+    }
+  }
+}
+```
+
+Any other MCP client: run `tether-mcp serve --transport stdio`, or `serve --transport http` for a loopback streamable-HTTP endpoint with bearer-token auth.
+
+> **Claude Desktop note**: it does not inherit your shell `PATH`. If `uvx` isn't found, use the absolute path (`which uvx`) as `command`.
+
+Debugging: `npx @modelcontextprotocol/inspector uvx --from 'git+https://github.com/Fino-wind/tether-mcp' tether-mcp serve --transport stdio`
+
+Then just ask your agent: *“How did we sleep last night?”*
+
+## MCP tools (16)
+
+| Tool | Returns |
+|---|---|
+| `tether_status` | Local binding state (never exposes keys or tokens) |
+| `tether_start_binding` | A fresh QR binding payload for the iOS app to scan |
+| `tether_poll_binding` | One poll for the iOS authorization to complete binding |
+| `tether_sync_sleep` | Recent sleep sessions incl. heart-rate samples, per-day primary-session selection matching the iOS app |
+| `get_sleep_detail` | Per-night heart-rate + respiratory-rate + sleep-stage timeline |
+| `get_water_intake` | Daily water intake + computed daily average |
+| `get_weight_trend` | Daily weights + latest/avg/min/max + weekly trend rate |
+| `get_menstrual_cycle` | Cycle samples + next-period prediction *(sensitive — explicit iOS opt-in required)* |
+| `get_symptoms` | HealthKit symptom days grouped by data owner *(sensitive)* |
+| `get_notes` | Free-text day annotations with their writer *(sensitive)* |
+| `get_activity` | Daily activity rings: steps / energy / exercise minutes / stand hours / distance |
+| `get_resting_hr` | Resting heart-rate records + window mean |
+| `get_workouts` | Workout records: type / duration / calories / distance |
+| `get_mindfulness` | Mindful sessions and minutes per day |
+| `get_hrv` | Heart-rate variability (SDNN) records + window mean |
+| `get_wrist_temp` | Sleeping wrist-temperature baseline deviation |
+
+Every data tool accepts `owner` (a user-ID prefix) to filter to one person — the server may hold both your and your partner's shared records, and omitting `owner` mixes them into one pool, so per-person questions should always pass it. (Earlier releases named some tools `get_partner_*`; they were renamed in the 16-tool release since they return whichever owners' records this server holds, not specifically the partner's.)
+
+Reads are cache-first: decrypted records are cached locally (owner-only files, 600 s TTL, `TETHER_MCP_CACHE_TTL` to override) so repeat queries answer in ~0.2 s with zero network; pass `fresh=true` to force a cloud round trip. The same service layer backs a full CLI (`tether-mcp sleep / water / weight / …` — every data subcommand takes `--owner` too) if you prefer scripts over MCP.
+
+## Privacy & security model
+
+- **End-to-end encryption**: Curve25519 ECDH + HKDF-SHA256 + AES-GCM. Every health record is sealed on-device to each authorized recipient's public key (your partner, and this server once bound).
+- **The cloud only ever holds ciphertext.** Tether's backend cannot read your health data — architecturally, not just by policy.
+- **Decryption happens here**, on hardware you own. The private key and server token are never exposed through any tool result.
+- **Sensitive kinds** (menstrual cycle, symptoms, notes) reach this server only if explicitly opted in inside the iOS app, and are never re-exported by the server.
+- HTTP transport binds to loopback by default and requires a bearer token; binding a non-loopback address fails closed unless explicitly allowed — front it with TLS if you must expose it.
+
+You can audit all of the above in this repository — that is why it is open source.
+
+## Development
+
+```bash
+pip install -e '.[dev,qr]'
+pytest
+```
+
+## License
+
+[MIT](LICENSE). The Tether iOS app and cloud service are separate proprietary components; this repository covers the local MCP server only.
+
+---
+
+*Website: [tetherme.app](https://tetherme.app) · App Store: [Tether — AI Health Sync](https://apps.apple.com/us/app/tether-ai-health-sync/id6759241985) · Bugs & feedback: [tether-community](https://github.com/Fino-wind/tether-community/issues)*
+
+<!-- mcp-name: io.github.fino-wind/tether -->

tether_mcp-0.1.0/src/tether_mcp.egg-info/SOURCES.txt

@@ -0,0 +1,23 @@
+LICENSE
+README.md
+pyproject.toml
+src/tether_mcp.egg-info/PKG-INFO
+src/tether_mcp.egg-info/SOURCES.txt
+src/tether_mcp.egg-info/dependency_links.txt
+src/tether_mcp.egg-info/entry_points.txt
+src/tether_mcp.egg-info/requires.txt
+src/tether_mcp.egg-info/top_level.txt
+src/tether_mcp_local/__init__.py
+src/tether_mcp_local/cache.py
+src/tether_mcp_local/cli.py
+src/tether_mcp_local/client.py
+src/tether_mcp_local/crypto.py
+src/tether_mcp_local/mcp_server.py
+src/tether_mcp_local/service.py
+src/tether_mcp_local/store.py
+tests/test_cache.py
+tests/test_cli.py
+tests/test_crypto.py
+tests/test_mcp_server.py
+tests/test_service.py
+tests/test_store.py

tether_mcp-0.1.0/src/tether_mcp.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

tether_mcp-0.1.0/src/tether_mcp.egg-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+tether-mcp = tether_mcp_local.cli:main
+tether-mcp-local = tether_mcp_local.cli:main

tether_mcp-0.1.0/src/tether_mcp.egg-info/requires.txt

@@ -0,0 +1,12 @@
+cryptography<47.0.0,>=42.0.0
+httpx<1.0.0,>=0.28.0
+keyring>=24
+mcp<2.0.0,>=1.13.0
+
+[dev]
+pytest<9.0.0,>=8.3.0
+ruff<1.0.0,>=0.11.0
+mypy<2.0.0,>=1.13.0
+
+[qr]
+qrcode<9.0.0,>=8.0.0

tether_mcp-0.1.0/src/tether_mcp.egg-info/top_level.txt

@@ -0,0 +1 @@
+tether_mcp_local

tether_mcp-0.1.0/src/tether_mcp_local/__init__.py

@@ -0,0 +1,5 @@
+from __future__ import annotations
+
+__all__ = ["__version__"]
+
+__version__ = "0.1.0"