Healthclaw Guardrails MCP Server

FHIR standardized how health data is structured. MCP standardized how AI connects to tools. Nobody standardized the guardrails in between. This project does. It is available as a remote MCP endpoint.

Teams that want a hosted security endpoint instead of running a local process. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-20 · ★ 30 · #112 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · Python servers · how we verify → /methodology

01 · Install Healthclaw Guardrails

before you install - you'll need

Set STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL, FASTEN_PUBLIC_KEY, FASTEN_PRIVATE_KEY, FASTEN_WEBHOOK_SECRET, FASTEN_CURATR_SCAN, TELEGRAM_BOT_TOKEN, FHIR_BASE_URL, MEDPLUM_BASE_URL, MEDPLUM_CLIENT_ID, MEDPLUM_CLIENT_SECRET before connecting.

Claude Code

claude mcp add aks129-healthclawguardrails --transport http https://mcp-server-production-5112.up.railway.app/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "aks129-healthclawguardrails": {
      "url": "https://mcp-server-production-5112.up.railway.app/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://mcp-server-production-5112.up.railway.app/mcp

transport: streamable-http

endpoint alive - authentication required · probed 2026-08-25

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to mcp-server-production-5112.up.railway.app

endpoint auth requires authentication - rejected our unauthenticated MCP initialize

license MIT - declared in the repository

registry namespace io.github.aks129 is GitHub-verified and matches the repo owner

03 · What Healthclaw Guardrails can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.9.0 · 2026-07-19

This release makes the project usable by someone who has never opened a terminal. CareAgents - the hosted consumer experience - shipped end to end: sign up with a passkey, connect records through a connector…

v1.8.0 · 2026-07-12

The foundation for real-world actions: an AI agent can now propose an action on a patient's behalf (phone call, SMS, form), but nothing executes until a human approves it out of band - through a path the agent's own…

v1.7.0 · 2026-07-08

Highlights · Your own records in your own AI agent, no portal account. The identity-verified Fasten Connect flow (CLEAR/ID.me via TEFCA) now ends with a one-time "Connect your AI assistant" card: a read-scoped, 30-day…

04 · Who maintains Healthclaw Guardrails

healthclaw-guardrails is maintained by aks129. It's the only MCP server we track from this author; the repo dates to Mar 2025.

05 · Facts

repository: github.com/aks129/healthclawguardrails
website: https://healthclaw.io/
category: security - ranked #112 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 6 releases in the last 90 days (latest 2026-07-19)
registry: io.github.aks129/healthclaw-guardrails (active, first published 2026-07-04)

06 · Healthclaw Guardrails FAQ

What is Healthclaw Guardrails?

FHIR standardized how health data is structured. MCP standardized how AI connects to tools. Nobody standardized the guardrails in between. This project does. It is available as a remote MCP endpoint.

Is Healthclaw Guardrails still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-20 and it shipped 6 releases in the last 90 days. We re-verify nightly.

How do I install Healthclaw Guardrails?

Run `claude mcp add aks129-healthclawguardrails --transport http https://mcp-server-production-5112.up.railway.app/mcp`. The README documents 12 environment variables (STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL…) to set first. Set STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL, FASTEN_PUBLIC_KEY, FASTEN_PRIVATE_KEY, FASTEN_WEBHOOK_SECRET, FASTEN_CURATR_SCAN, TELEGRAM_BOT_TOKEN, FHIR_BASE_URL, MEDPLUM_BASE_URL, MEDPLUM_CLIENT_ID, MEDPLUM_CLIENT_SECRET before connecting. You can also paste the ready-made client config above.

Does Healthclaw Guardrails require authentication?

Yes - when we probed the endpoint on 2026-08-25, it rejected an unauthenticated MCP initialize; you'll need credentials to connect.

07 · Alternatives to Healthclaw Guardrails

Alternatives to Healthclaw Guardrails

Maintained security servers if Healthclaw Guardrails isn't the fit.

Pairs well with

Servers that cover what Healthclaw Guardrails doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Linkedctl · Scope Gate · npm MCP · Anaconda MCP

More Python MCP servers · Google News & Trends MCP · Kasbah MCP · Docvet · Datos Gob Do MCP Server · Context Server · see all