All API calls go through the okoro proxy, which signs requests, enforces permission scopes, and writes an audit trail for every action your agent takes.

Requirements

VariableDescription
OKORO_SERVICE_TOKENService token from the okoro dashboard (svc_...)

How to get your token →

How it works

Rather than giving your agent raw Withings credentials, you configure a service token once. When the skill runs, it exchanges that token for a short-lived operation token scoped to exactly the action being performed. The okoro proxy signs the request, forwards it to Withings, and records the intent in an audit log.

Learn more about how okoro works →

What your agent can do

  • Weight & body composition — weight, fat ratio, fat-free mass, muscle mass, hydration, bone mass
  • Blood pressure — systolic, diastolic, pulse
  • Heart rate & ECG — resting heart rate, ECG recordings, atrial fibrillation detection
  • Activity — daily steps, distance, calories burned, workout sessions
  • Sleep — total sleep time, efficiency, deep/REM/light breakdown, sleep score, snoring
  • SpO2 & temperature — blood oxygen saturation, skin and body temperature
  • User info — linked devices, account details

License

MIT — see LICENSE.