Patient Safety AI MCP
upatientU safetyU aiU mcp
Installation · Dokumentation · Fehler melden
Installation
pip install patient-safety-ai-mcp
# or
npm install -g @meok-ai/patient-safety-ai-mcpRelated MCP server: Risk Assessment AI MCP
Schnellstart
Siehe das Projekt-Repository für die vollständige Dokumentation und Beispiele.
Unternehmenssupport
Lizenz
MIT © CSOAI
Available Tools
5 toolsassess_patient_riskA
Risk scoring based on patient conditions, age, and comorbidities. Conditions and medications as comma-separated strings.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: age (int): The age to analyze or process. conditions (str): The conditions to analyze or process. medications (str): The medications to analyze or process. bmi (float): The bmi to analyze or process. smoker (bool): The smoker to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| age | Yes | ||
| bmi | No | ||
| smoker | No | ||
| api_key | No | ||
| conditions | Yes | ||
| medications | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description comprehensively discloses behavioral traits: read-only, stateless, idempotent, no side effects, authentication needs (none basic, API key for pro), rate limits (10/day free, unlimited pro), structured error handling, and data privacy. Since no annotations were provided, the description fully carries the burden and does so thoroughly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with sections (Behavior, When to use, When NOT to use, Args, Behavioral Transparency), but it is verbose. The 'Behavioral Transparency' section largely repeats the earlier behavior bullet points. Parameter descriptions are padded without added value. Could be more concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 6 parameters (3 required) and an output schema, the description covers behavioral context, usage guidelines, error handling, rate limits, and privacy. Parameter descriptions are weak, but the overall guidance is sufficient for an agent to use the tool effectively. Minor gap in parameter semantics prevents a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 0% schema description coverage, the description's 'Args' section adds almost no meaning beyond parameter names. For each parameter it only says 'The [name] to analyze or process,' which is tautological. Only conditions and medications get the useful hint of being comma-separated strings. Other parameters (age, bmi, smoker, api_key) lack any semantic guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is for 'Risk scoring based on patient conditions, age, and comorbidities.' This specifies the verb (scoring) and resource (patient risk), and distinguishes it from sibling tools like check_drug_interactions or validate_dosage, which target different clinical tasks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, guiding the agent to use it for structured analysis/classification and cautioning against real-time production decisions without human review. This differentiation from siblings is effective.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_allergy_conflictsA
Cross-reference a medication against patient allergies including cross-reactivity. Allergies as comma-separated string.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: medication (str): The medication to analyze or process. allergies (str): The allergies to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| allergies | Yes | ||
| medication | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Comprehensive behavioral transparency section covering side effects, authentication, rate limits, error handling, idempotency, and data privacy. No annotations exist, so description carries full burden and exceeds expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with sections but repetitive (allergies comma-separated mentioned twice). Behavioral transparency is verbose but informative. Could be more concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no schema descriptions and 3 parameters, the description should cover output format and api_key meaning. It lacks explanation of what the output looks like and does not provide examples. Output schema exists but description still incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Description adds little meaning beyond schema: medication and allergies are described generically, api_key has a poor description 'to analyze or process'. Only the comma-separated hint for allergies is useful. Schema coverage 0% makes this inadequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it cross-references a medication against patient allergies including cross-reactivity. However, it does not explicitly differentiate from the sibling tool 'check_drug_interactions', which might be similar.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes 'When to use' and 'When NOT to use' sections, providing context for appropriate usage. However, the when-to-use is generic and does not explicitly compare to siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_drug_interactionsA
Check known drug interaction databases for a list of medications. Pass drugs as comma-separated string.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: drugs (str): The drugs to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| drugs | Yes | ||
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully discloses behavior: read-only, stateless, idempotent, rate limits (free 10/day, pro unlimited), authentication (none for basic usage), error handling (structured errors), and data privacy (no storage). This is comprehensive and addresses all key behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with sections but contains redundancy. The 'Behavioral Transparency' section repeats information from the initial 'Behavior' lines. It could be more concise while retaining key details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, the description does not need to cover return values. It adequately covers inputs, behavior, side effects, rate limits, error handling, and privacy. It is complete for the tool's complexity, though a note about not being medical advice could add completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so description must compensate. The 'Args' section only repeats parameter names and types ('drugs (str)', 'api_key (str)') with vague descriptions ('the drugs to analyze or process'). It does not explain the expected format for drugs beyond the earlier mention of comma-separated, nor the role of api_key beyond what is in the authentication section. This adds little value over the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Check known drug interaction databases for a list of medications. Pass drugs as comma-separated string.' The verb 'check' and resource 'drug interaction databases' are specific, and the comma-separated format is explicitly noted. This distinguishes it from sibling tools like check_allergy_conflicts or validate_dosage.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit 'When to use' and 'When NOT to use' sections. It advises using the tool for structured analysis against frameworks and warns against real-time production use without human review. However, it does not directly compare with sibling tools, which would enhance clarity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_safety_alertA
Create a formatted clinical safety alert. Alert types: interaction, allergy, dosage, contraindication.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: drug (str): The drug to analyze or process. alert_type (str): The alert type to analyze or process. severity (str): The severity to analyze or process. patient_id (str): The patient id to analyze or process. details (str): The details to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| drug | Yes | ||
| api_key | No | ||
| details | No | ||
| severity | No | moderate | |
| alert_type | Yes | ||
| patient_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description extensively covers side effects (read-only, no side effects), authentication (no auth for basic, API key for pro), rate limits (free: 10/day, pro: unlimited), error handling (structured errors), idempotency, and data privacy. This fully compensates for missing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-organized with sections, but somewhat verbose as behavioral transparency details are repeated under both 'Behavior:' and 'Behavioral Transparency:'. Could be more concise without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers behavior, usage, transparency thoroughly. Has output schema, so return format not needed. However, lacks integration context with sibling tools (e.g., whether this tool is meant to be used after specific checks). Still, fairly complete for a generation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must add meaning. However, the 'Args' section only provides generic phrases like 'The drug to analyze or process' for each parameter, adding little beyond the parameter name. Missing specifics like valid alert types or severity levels.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool creates a formatted clinical safety alert and lists specific alert types (interaction, allergy, dosage, contraindication). It distinguishes from sibling tools like check_allergy_conflicts and check_drug_interactions by focusing on generating a formatted alert rather than just checking.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'When to use' and 'When NOT to use' sections provide clear guidance. It recommends use for structured analysis/classification and warns against real-time production use without human review. This helps an AI agent decide when to invoke this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_dosageA
Check dosage against known safe ranges for a medication.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: drug (str): The drug to analyze or process. dose_mg (float): The dose mg to analyze or process. frequency_per_day (int): The frequency per day to analyze or process. patient_age (int): The patient age to analyze or process. patient_weight_kg (float): The patient weight kg to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| drug | Yes | ||
| api_key | No | ||
| dose_mg | Yes | ||
| patient_age | No | ||
| frequency_per_day | No | ||
| patient_weight_kg | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description carries full burden. It explicitly states read-only, stateless, idempotent behavior, authentication requirements, rate limits, error handling, and data privacy. This is comprehensive and exceeds expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections, but it is verbose and contains repetition (e.g., the Behavior section and Behavioral Transparency section overlap). Some sentences could be combined or trimmed without losing value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (6 parameters, no output schema provided), the description covers behavioral aspects thoroughly, usage guidelines, and error handling. However, it lacks parameter-specific details and does not describe the output structure, which the output schema might address.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description's 'Args' section merely repeats parameter names with 'to analyze or process,' adding no meaning beyond the schema. For example, 'drug (str): The drug to analyze or process' is tautological. Critical details like units, formats, or constraints are missing.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with 'Check dosage against known safe ranges for a medication,' which is a specific verb and resource. It clearly identifies the tool's purpose and distinguishes it from sibling tools like assess_patient_risk and check_drug_interactions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes 'When to use' and 'When NOT to use' sections, though the when-to-use description is somewhat generic. It provides a clear exclusion for real-time decision-making without human review. Implicitly differentiates from siblings through the dedicated use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v1.0.0- First observed
assess_patient_risk - First observed
check_allergy_conflicts - First observed
check_drug_interactions - First observed
generate_safety_alert - First observed
validate_dosage
TDQS
Scored across 5 tools
Each tool targets a distinct aspect of patient safety: risk assessment, allergy conflicts, drug interactions, dosage validation, and alert generation. There is no functional overlap, and descriptions clearly differentiate their purposes.
All tool names use snake_case and follow a verb_noun pattern. Two tools start with 'check', while the others use different verbs (assess, generate, validate), which is mostly consistent but not perfectly uniform.
With 5 tools, the server covers essential patient safety checks without being bloated or too sparse. Each tool serves a clear purpose within the domain.
The toolset covers core safety checks (risk, allergies, interactions, dosage) and includes alert generation. Minor gaps exist, such as no dedicated contraindication check, but overall it addresses the main clinical safety concerns.
Maintenance
Related MCP Connectors
HealthGuard - 12-tool health/medical AI safety MCP: PII redaction, HIPAA, GDPR Art.9.
MCP server for medicaid-intelligence
AI governance MCP server for EU AI Act compliance and jurisdiction verification
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceClinical Trials AI - MCP server providing AI-powered tools and automation by MEOK AI Labs7 npm58 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceRisk Assessment AI - MCP server providing AI-powered tools and automation by MEOK AI Labs9 npm44 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceHealth Check AI - MCP server providing AI-powered tools and automation by MEOK AI Labs7 npm46 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceHIPAA Compliance - MCP server providing AI-powered tools and automation by MEOK AI LabsMIT