epic-ehr-mcp-server
Verified Safeby pcjx8
Overview
A comprehensive Electronic Health Record (EHR) system for healthcare AI agent development, EHR integration testing, clinical workflow simulation, and medical AI training, mimicking EPIC-style operations.
Installation
python ehr_server.py --websocketEnvironment Variables
- JWT_SECRET_KEY
- DATABASE_URL
- ENVIRONMENT
- LOG_LEVEL
- ALLOWED_ORIGINS
- RATE_LIMIT
- PORT
- HOST
Security Notes
The server implements JWT token-based authentication with HS256, password hashing (SHA-256), access/refresh tokens, and role-based access control. Test user passwords are hardcoded in `auth.py` for demo purposes. Sensitive operations are protected by permission checks. The in-memory storage for refresh tokens and revoked tokens, as well as all mock data, is not persistent and is explicitly noted in documentation as needing a database/Redis for production. Production deployment guides emphasize crucial security measures like environment variables for secrets, HTTPS/WSS, firewalls, and rate limiting. No obvious `eval` or malicious patterns found.
Similar Servers
fhir-mcp-server
The FHIR MCP Server acts as a bridge between AI/LLM tools and FHIR APIs, enabling seamless search, retrieval, and analysis of clinical information.
hm_editor
This MCP server integrates an advanced medical record editor with AI capabilities, enabling structured document content management, data element manipulation, revision tracking, watermarking, and dynamic generation of charts and tabular data. It also provides search functionalities for medical staff, ICD codes, and geographical data, and supports PDF generation.
knowledgebase-mcp
A standardized Model Context Protocol (MCP) server that aggregates and provides AI systems with access to diverse biomedical knowledge bases and analysis tools.
mcp-openehr-assistant
The openEHR Assistant MCP Server helps end-users, especially openEHR modelers and developers, with various openEHR-related tasks and APIs, including archetype exploration, semantic explanation, language translation, syntax correction, and design reviews, by connecting AI assistants to external data sources and tools.