health-export-mcp v1.5.0 shipped encrypted exports and rebuilt-day provenance.
Two things changed for anyone piping Apple Health data into an AI agent.
Encrypted exports. The MetricBridge iOS app can encrypt each destination with a passphrase. The server gets the same passphrase through HEALTH_EXPORT_PASSPHRASE (or a file), and decrypts in memory on your machine. A tampered or wrong-passphrase file returns a named reason instead of pretending there is no data. The LAN receiver decrypts pushes too and answers machine-readable 422 reasons. Set HEALTH_REQUIRE_ENCRYPTED=1 to refuse plaintext once the app encrypts that leg.
Rebuilt-day provenance. Apple Health backfills. When the app recomputes a past day, the tool answer now carries recomputed_at and backfilled_days plus rebuild-cap markers. An agent can then say which averages are rebuilt instead of presenting a recomputed number as untouched history.
Install with npx -y health-export-mcp. Full notes: https://github.com/PhilipAD/health-export-mcp/releases/tag/v1.5.0?utm_source=devto&utm_medium=social&utm_campaign=exp-20261002-hea172-v150