Microsoft Copilot security directory

Strava (Independent Publisher)

Published by Richard Wierenga

Medium risk

This is a connector for the Strava API, Strava is a service for tracking human exercise which incorporates social network features. It is mostly used for cycling and running using GPS data. The connector gives you the opportunity to get your activities/clubs and other information from Strava.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 14 tools or capabilities.

  • Get Activity
  • Get Athlete Stats
  • Get Authenticated Athlete
  • Get Club
  • Get Segment
  • List Activity Comments
  • List Activity Kudoers
  • List Activity Laps
  • List Athlete Activities
  • List Athlete Clubs
  • List Club Activities
  • List Club Administrators
  • List Club Members
  • List Starred Segments

The interactive security report will load automatically.