Whoop

Recovery Score Guide

• 💚 67-100% Green - Ready to perform
• 💛 34-66% Yellow - Moderate readiness
• ❤️ 0-33% Red - Focus on recovery

Setup

0. Requirements

• Node.js 18+ (this repo uses ESM)
• openssl (only needed for the optional auth.js flow when using https://localhost; Postman auth does not need it)

1. Create WHOOP Developer App

1. Go to https://developer.whoop.com/
2. Sign in with your WHOOP account
3. Create a new App
4. Add these Redirect URIs (exact match; no extra trailing slashes):
   • Postman browser callback (recommended auth path):

     https://oauth.pstmn.io/v1/browser-callback
     

   • Optional local callback (only used by auth.js):

     https://localhost:3000/callback
     

   You can keep both registered at the same time.
5. Copy the Client ID and Client Secret

Team note: this skill does not ship any client credentials. Each user can create their own WHOOP app, or (if you trust each other) a team can share one app's client_id/client_secret and let multiple WHOOP accounts authorize it.

2. Save Credentials (recommended: interactive)

Run:

node src/setup.js

This writes ~/.openclaw/whoop/credentials.json (and optionally token.json if you paste tokens).

3. Authenticate (Recommended: Postman)

Postman is the most reliable bootstrap for many accounts because WHOOP may block browser-like traffic to the OAuth endpoints (or behave differently depending on headers).

Postman checklist (don’t skip these):

• WHOOP dashboard Redirect URIs include:
  • https://oauth.pstmn.io/v1/browser-callback
• Postman OAuth settings:
  • Scopes include offline (or you won’t get a refresh_token)
  • Client Authentication is Send client credentials in body (client_secret_post)

1. In WHOOP dashboard, ensure you registered the Postman callback Redirect URI: