Healthclaw Guardrails MCP Server

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation. This MCP entry surfaces a curated ranking/list from the project README rather than a classic multi-tool integration surface. It is available as a remote MCP endpoint.

Teams that work with healthai, healthcare and fhir and want a hosted endpoint instead of running a local process. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-30 · ★ 30 · #134 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

MIT · Python servers · how we verify → /methodology

01 · Install Healthclaw Guardrails

before you install - you'll need

Set STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL, FASTEN_PUBLIC_KEY, FASTEN_PRIVATE_KEY, FASTEN_WEBHOOK_SECRET, FASTEN_CURATR_SCAN, TELEGRAM_BOT_TOKEN, FHIR_BASE_URL, MEDPLUM_BASE_URL, MEDPLUM_CLIENT_ID, MEDPLUM_CLIENT_SECRET before connecting.

Claude Code

claude mcp add aks129-healthclawguardrails --transport http https://mcp-server-production-5112.up.railway.app/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "aks129-healthclawguardrails": {
      "url": "https://mcp-server-production-5112.up.railway.app/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://mcp-server-production-5112.up.railway.app/mcp

transport: streamable-http

endpoint alive - authentication required · probed 2026-09-30

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to mcp-server-production-5112.up.railway.app

endpoint auth requires authentication - rejected our unauthenticated MCP initialize

license MIT - declared in the repository

registry namespace io.github.aks129 is GitHub-verified and matches the repo owner

03 · What Healthclaw Guardrails can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v2.0.0 · 2026-09-24

HealthClaw Guardrails 2.0.0 - the synthetic-beta release · 2.0 is the release a beta tester can use on synthetic records. It is not the · end of the refactor. The ratchets that measure that work continue as 2.x, · and…

v1.9.0 · 2026-07-19

This release makes the project usable by someone who has never opened a terminal. CareAgents - the hosted consumer experience - shipped end to end: sign up with a passkey, connect records through a connector…

v1.8.0 · 2026-07-12

The foundation for real-world actions: an AI agent can now propose an action on a patient's behalf (phone call, SMS, form), but nothing executes until a human approves it out of band - through a path the agent's own…

04 · Who maintains Healthclaw Guardrails

healthclaw-guardrails is maintained by aks129. It's the only MCP server we track from this author; the repo dates to Mar 2025.

05 · Facts

repository: github.com/aks129/healthclawguardrails
website: https://healthclaw.io/
category: security - ranked #134 of 216 actively-maintained security servers as of 2026-09-30.
release cadence: 5 releases in the last 90 days (latest 2026-09-24)
registry: io.github.aks129/healthclaw-guardrails (active, first published 2026-07-04)

06 · Healthclaw Guardrails FAQ

What is Healthclaw Guardrails?

Is Healthclaw Guardrails still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-30 and it shipped 5 releases in the last 90 days. We re-verify nightly.

How do I install Healthclaw Guardrails?

Run `claude mcp add aks129-healthclawguardrails --transport http https://mcp-server-production-5112.up.railway.app/mcp`. The README documents 12 environment variables (STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL…) to set first. Set STEP_UP_SECRET, FHIR_UPSTREAM_URL, SHL_SERVER_URL, FASTEN_PUBLIC_KEY, FASTEN_PRIVATE_KEY, FASTEN_WEBHOOK_SECRET, FASTEN_CURATR_SCAN, TELEGRAM_BOT_TOKEN, FHIR_BASE_URL, MEDPLUM_BASE_URL, MEDPLUM_CLIENT_ID, MEDPLUM_CLIENT_SECRET before connecting. You can also paste the ready-made client config above.

Does Healthclaw Guardrails require authentication?

Yes - when we probed the endpoint on 2026-09-30, it rejected an unauthenticated MCP initialize; you'll need credentials to connect.

07 · Alternatives to Healthclaw Guardrails

Alternatives to Healthclaw Guardrails

Maintained security servers if Healthclaw Guardrails isn't the fit.

Pairs well with

Servers that cover what Healthclaw Guardrails doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Linkedctl · Scope Gate · npm MCP · Anaconda MCP · Emisar

More Python MCP servers · Google News & Trends MCP · Kasbah MCP · Docvet · Datos Gob Do MCP Server · Archicad · see all