openehr-assistant-mcp
Verified Safeby Cadasto
Overview
The openEHR Assistant MCP Server helps AI assistants integrate with openEHR resources, terminology services, and CKM APIs to assist healthcare informaticians with tasks such as archetype exploration, semantic explanation, language translation, syntax correction, and design reviews.
Installation
docker run --rm -i ghcr.io/cadasto/openehr-assistant-mcp:latest php public/index.php --transport=stdioEnvironment Variables
- CKM_API_BASE_URL
- LOG_LEVEL
- HTTP_TIMEOUT
- HTTP_SSL_VERIFY
- DOMAIN
Security Notes
The codebase avoids obvious 'eval' or direct execution of untrusted input. `SimpleXMLElement` is used to parse a local, trusted XML file (`openehr_terminology.xml`), minimizing XXE risk. Dynamic regex construction for search patterns uses `preg_quote` to prevent regex injection. Network calls use Guzzle, with SSL verification configurable via the `HTTP_SSL_VERIFY` environment variable (setting this to 'false' in production would be a risk, but it is a configurable choice). No hardcoded secrets are apparent; sensitive configurations are handled via environment variables. Overall, the implementation appears to follow good security practices within the analyzed scope.
Similar Servers
opensearch-mcp-server-py
Enables AI assistants and LLMs to interact with OpenSearch clusters by providing a standardized Model Context Protocol (MCP) interface through built-in and dynamic tools.
php-mcp
Facilitates communication and integration between LLM applications and external data sources or tools by implementing the Model Context Protocol (MCP).
php-mcp-sdk
A PHP SDK for building Model Context Protocol (MCP) servers that expose AI capabilities (tools, prompts, sampling) and data resources to clients, facilitating AI agent orchestration and structured human-AI interaction.
knowledgebase-mcp
A standardized Model Context Protocol (MCP) server that aggregates and provides AI systems with access to diverse biomedical knowledge bases and analysis tools.