Open-source guardrails between AI agents and FHIR clinical data — PHI redaction, immutable audit, step-up auth, tenant isolation. MCP server + OpenAI/Gemini adapters. A healthclaw.io project.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.ALLOWED_ORIGINSFHIR_BASE_URLINTERNAL_TOKEN_MINT_SECRETMCP_PORTPORTRATE_LIMIT_MAXREAD_TOKEN_AUTOMINTSHL_SERVER_URL— export =http://localhost:8000TENANT_ID— TELEGRAM_BOT_TOKEN=<token> =my-patient \ALLOW_INDEXINGFASTEN_PUBLIC_KEYFASTEN_TEFCA_MODERESEND_API_KEYRESEND_AUDIENCE_IDLOG_LEVELFLASK_ENVLOG_FORMATSESSION_SECRET— No (dev key) Flask session secretSQLALCHEMY_DATABASE_URI— Production sqlite:///mcp_server.db Database connectionVERCELDB_POOL_SIZESTEP_UP_SECRET— your-secret python main.pySEED_DEMO_TENANTDEMO_TENANT_IDDISABLE_COMMAND_CENTERFHIR_UPSTREAM_URL— No — Upstream FHIR server (enables proxy mode)FLASK_DEBUGTELEGRAM_BOT_TOKEN— token> TENANT_ID=my-patient \MCP_BASE_URLDASHBOARD_BASE_URLHBO_AUTHORIZATION_ENDPOINTHBO_CLIENT_IDHBO_SCOPESPUBLIC_BASE_URLACTIONS_WEBHOOK_SECRETBLAND_AI_API_KEYBLAND_API_KEYTWILIO_ACCOUNT_SIDTWILIO_AUTH_TOKENTWILIO_FROM_NUMBERANTHROPIC_API_KEYMCP_SERVER_URLPUBLIC_TENANTSDASHBOARD_TOKEN_TTL_HOURSOPENCLAW_GATEWAY_URLOPENCLAW_GATEWAY_TIMEOUTOPENCLAW_SESSIONS_URLOPENCLAW_GATEWAY_TOKENOPEN_WEARABLES_URLMCP_HEALTH_URLREDIS_URLSUPPORT_FORWARD_TORESEND_INBOUND_WEBHOOK_SECRETFASTEN_CURATR_SCAN— true # auto-run Curatr after each importFASTEN_WEBHOOK_SECRETFHIR_UPSTREAM_TIMEOUT— No 15 Upstream request timeout (seconds)FHIR_LOCAL_BASE_URL— No — Local URL for response URL rewritingMEDPLUM_BASE_URLMEDPLUM_CLIENT_IDMEDPLUM_CLIENT_SECRETFHIR_UPSTREAM_ALLOWED_HOSTSOAUTH_ISSUEROAUTH_SECRETOAUTH_TOKEN_TTLREAD_AUTH_ENABLEDSHC_WEBHOOK_SECRETFHIR_VALIDATOR_URLOPEN_WEARABLES_API_KEYOPEN_WEARABLES_TIMEOUTWEARABLES_POLL_INTERVALWEARABLES_BATCH_LIMITWEARABLES_OAUTH_STATE_SECRETDEFAULT_TENANTHEALTHEX_AUTH_TOKENSHC_BASE_URLFLEXPA_PUBLISHABLE_KEYHEALTH_SKILLZ_URLMEDENT_PRACTICE_IDHBO_ACCESS_TOKENHBO_TOKEN_ENDPOINTHBO_CLIENT_SECRETHEALTHEX_MCP_URLMEDENT_CLIENT_IDHBO_REDIRECT_URIHEALTHCLAW_REDACT_SALTFAMILY_ALLOWED_DAYSFAMILY_ICAL_URLSFAMILY_HORIZON_DAYSKRISTY_AGENT_IDDRY_RUNMEDENT_CLIENT_SECRETMEDENT_REDIRECT_URIMEDENT_SCOPESHEALTHCLAW_URL[](https://m8ven.ai/mcp/aks129-healthclawguardrails-di8pra)