Server data from the Official MCP Registry
HL7 v2 / FHIR healthcare bridge — parse, map, validate, govern PHI (HIPAA/MDR).
About
HL7 v2 / FHIR healthcare bridge — parse, map, validate, govern PHI (HIPAA/MDR).
Security Report
The HL7/FHIR bridge server has a clear purpose and reasonable architecture, but contains several security concerns that should be addressed. Key issues include: (1) unauthenticated PHI handling without access controls or encryption requirements, (2) sensitive log file written to disk with predictable location and insufficient protections, (3) incomplete PHI detection that could miss sensitive data, and (4) lack of input validation on potentially malicious HL7/FHIR payloads. The server handles Protected Health Information without any authentication or authorization framework, which is inappropriate for healthcare data. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
5 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-hl7-fhir-bridge-mcp": {
"args": [
"hl7-fhir-bridge-mcp"
],
"command": "uvx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
HL7 / FHIR Bridge MCP
mcp-name: io.github.CSOAI-ORG/hl7-fhir-bridge-mcp
Part of the CSOAI Layer-0 legacy-bridge family (sibling of cobol-bridge-mcp). Bridges healthcare legacy messaging (HL7 v2 pipe-delimited) and modern FHIR to ONE OS / CSOAI, and governs PHI.
Tools
parse_hl7v2(message)— message type + key patient fields from a pipe-delimited HL7 v2 message.hl7_to_fhir(message)— map HL7 v2 → a minimal FHIR R4 message Bundle (Patient + MessageHeader).validate_fhir(resource_json)— well-formed JSON + resourceType + basic shape.govern_phi(message_or_fhir)— detect PHI, surface HIPAA/MDR/GDPR-Art.9 risk + data-minimisation advice; attestable on the CSOAI ledger.
Run
pip install -e .
python server.py # stdio MCP server
The win: legacy HL7 / FHIR clinical data → CSOAI PHI governance/attestation → ONE OS. Pairs with hipaa-compliance-mcp + healthcare-ai-governance-mcp + eu-ai-act-compliance-mcp (Annex I medical devices).
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption