HealthClawGuardrails MCP Server

HealthClaw Guardrails is a well-intentioned open-source FHIR security proxy with solid guardrail patterns (audit, redaction, step-up auth, tenant isolation). However, several design and implementation choices create moderate security concerns: the human-in-the-loop enforcement relies on an unverified HTTP header rather than cryptographic proof, step-up tokens are reusable within their TTL (not single-use), read authentication is flag-gated and defaults to off, and the code uses broad exception handling in critical paths. Permissions are appropriate for the stated purpose (healthcare data proxying), but the architectural limitations documented in the README—particularly around human confirmation and token reuse—should be clearly communicated to users. Not production-ready without additional hardening. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity).

4 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.