Strava API

Direct integration with Strava API v3 for fitness data management.

Security Model

IMPORTANT: All secrets are stored in system keychain (macOS Keychain / Linux Secret Service).

• AI agents CANNOT read secrets from keychain
• Only the Python scripts can access credentials at runtime
• Non-secret metadata (athlete name, token expiry) stored in ~/.strava/metadata.json

This design ensures your API credentials are never exposed to AI agents.

First-Time Setup Workflow

When user requests Strava data for the first time: