# healthclaw-guardrails

Security layer between AI agents and clinical FHIR servers. It redacts personal health identifiers, keeps audit trails, and isolates tenants.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 31
- Author: aks129
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/aks129/HealthClawGuardrails
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/mcp/healthclaw-guardrails

## What it does

This server places defensive boundaries between reasoning models and healthcare databases. It scrubs protected health information on the fly, isolates multi-tenant environments, and forces step-up authentication before sensitive actions execute. Both FHIR R4 US Core v9 and R6 specifications receive support.

Inside are 29 distinct MCP tools. The package includes `$interpret` for explaining lab results, `$care-gaps` for preventive screening alerts, and structured questionnaire extraction. The codebase targets Python 3.11+ and provides Docker Compose configurations for local hosting.

Live deployments reject unauthenticated connections. A deployment-scoped bearer token in the `Authorization` header is mandatory for the production URL. For preliminary evaluations, a public demo server runs synthetic test records without credential checks.

## Requirements
- Needs: Python and uv (commands run via uvx)
- Remote server: `https://mcp-server-production-5112.up.railway.app/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http healthclaw-guardrails https://mcp-server-production-5112.up.railway.app/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add healthclaw-guardrails --url https://mcp-server-production-5112.up.railway.app/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "healthclaw-guardrails": {
            "url": "https://mcp-server-production-5112.up.railway.app/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "healthclaw-guardrails": {
            "type": "http",
            "url": "https://mcp-server-production-5112.up.railway.app/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http healthclaw-guardrails https://mcp-server-production-5112.up.railway.app/mcp
```

## When to use it
- strip personal health information before passing clinical records to an LLM
- query FHIR servers safely through MCP clients
- explain laboratory tests via the `$interpret` operation
- track treatment gaps using `$care-gaps` endpoints

## Example prompts
- Search my medical records for recent lab results and explain what they mean.
- Check for missing screenings and appointments using the `$care-gaps` tool.
- Populate the clinical questionnaire using `$populate` and show the draft.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md