Skip to main content
Glama

smart-fhir

Un conector que no inventa un paciente.

MCP v1 transport stdio FHIR R4 4.0.1 SMART 2.2.0 writes off

tools 4 sandbox public synthetic empty search stays empty unknown id 404 PHI none

Instalación · Herramientas · Cómo funciona · Límites


Instalación

Solo stdio. Después de la compilación de TypeScript, añade un conector local:

name: smart-fhir
command: node
args: dist/index.js
npm install
npm run build

Variables de entorno para ello (valores por defecto, no secretos):

FHIR_ISS = https://launch.smarthealthit.org/v/r4/fhir
FHIR_VERSION = R4
FHIR_AUTH_MODE = open
FHIR_WRITE = off
FHIR_AUDIT_PATH = ./audit/audit.jsonl

No pongas valores secretos en el repositorio. Sin puerto HTTP público. No hagas bind de TCP.

Atajo matutino (mismo entorno)

npx -y tsx src/index.ts

Consulta los scripts de package.json: install, build, test, prove.

Related MCP server: Healthpoint MCP Server

Herramientas

Cuatro herramientas. Sin create / update / delete.

Herramienta

Acción

smart_discover

GET {iss}/.well-known/smart-configuration. JSON analizado o error explícito. No inventa endpoints.

fhir_auth_status

{ mode, iss, fhir_version: "R4", write: "off", token_present, discovery_ok, last_error? }. Nunca imprime token ni PEM.

fhir_search

GET {iss}/{resourceType}?... _count predeterminado 10, máx. 50. Una página. Un Bundle vacío se devuelve tal cual.

fhir_read

GET {iss}/{resourceType}/{id}. 404 significa recurso no encontrado, no un recurso inventado.

Lista permitida de resourceType: Patient | Observation | Condition | MedicationRequest | Encounter.

Cualquier otra cosa → { ok: false, error: "ERR_NOT_IN_ALLOWED" }.

Cómo funciona

FHIR_VERSION debe ser R4. Cualquier otro valor impide que the conectorse inice.

Qué

URL

Cómo leerlo

Íconf FHIR (la páginas published es R5 5.0

http://hl7.org/fhir/

Solo índi official. No implementedo.

FHIR R4k+

https://al7.org/fhir/R4/

Index? Wait table alignment. Let's ensure correct table. The original row code is inside, but output table must have same rows. Let's make table body:

Wait need to make sure row descriptions align. The table was:

What

URL

How to read

FHIR index (published page is R5 5.0.0)

http://hl7.org/fhir/

Official index only. Not implemented.

FHIR R4 (v1)

https://hl7.org/fhir/R4/

HIR Release 4, 4.0.1. Resource model.

FHIR App Lanzamiento 2.2.0 (STU 2.2)

https://hl7.org/fhir/smart-app-launch/

Current published SMART IG. Based on R4.

App launch + auth

https://hl7.org/fhir/smart-app-launch/app-launch.html

Discovery, standalone/ehr, PKCe, token. App Launch (code+PKCE) not in v1.

Backend

<...backend-services.html>

client_credential + private JTW. Implemented; unused unless set.

Need to translate. Keep row count.

Let's craft table:

Qué

URL

Cómo leerlo

Índice FHIR (la página publicada es R5 5.0.0)

http://estrella.org/fhir/

Solo índice oficial. No implementado.

Validación FHIR R4 (v1)

https://hl7.org/fhir/R4/

FHIR Release 4, 4.0.1. Modelo de recursos.

Asistente SMART App Launch 2.2.0 (STU v2.2)

https://hl7.org/fhir/smart-app-launch/

Implementación SMART publicada actualmente. Basada en FHIR R4.

App launch + autorización

https://hl7.org/fhir/smart-app-launch/app-launch.html

Procedimiento de descubrimiento, arranque standalone/EHR, PKCE, token. App Launch (code+PKCE) no está en v1.

Backend Services

https://hl7.org/fhir/smart-app-launch/backend-services.html

client_credentials + JWT con certificado usando privada. Implemented; unused unless env is set.

Let's careful "Backend Services": In Spanish "Servicios backend" but keep as "Backend Services" as official. The phrase "client_credentials + private-key JWT" as code? Not code but parameters. We can say "client_credentials + JWT con clave privada. Implementado; no se usa salvo que se configure la variable de entorno."

ISS lista permitida (barra final retirada / cualquier otra cosa rechazada):

  • https://launch.smarthealthit.org/v/r4/fhir (default)

  • https://r4.smarthealthit.org

  • https://hapi.fhir.org/baseR4

Establece FHIR_ISS a otra base permitida para apuntar a un ISS posterior. Un ISS nuevo necesita revisión previa. No lo apuntes a un EHR en producción sin esa revisión más un client_id real.

FHIR_AUTH_MODE

Comportamiento

open (default)

Discover, luego FHIR GET without Authorization. El 404 en discovery no es fatal in open (se registra; continúa). En FHIR, 401/403 → { ok: false, http_status, ... }.

bearer

Implementación same. FHIR GET with Authorization Bearer token.

backend_jwt

Solo si existen FHIR_CLIENT_ID (o SMART_CLIENT_ID) y FHIR_PRIVATE_KEY_PEM. SMART Backend Services JWT. Si falta una env, refuse to start

. No inventa credenciales.

Wait the original open row says "Discover, then FHIR GET without Authorization." I'm currently translating "sin autorización" etc. Let's craft coherent:

Modo

Comportamiento

open

Discover; luego GET FHIR without Authorization. El 404 del discovery no es fatal en open (se registra; continúa). Si el FHIR devuelve 401/403 → { ok: false, http_status, ... }.

bearer

Mismo discovery. FHIR GET con HTTP self.

open already. Wait third row: open / bearer / backend_jwt. Actually table has three rows. OK.

Let's create:

FHIR_AUTH_MODE

Comportamiento

open (default)

Hace discovery y luego FHIR GET sin Authorization. El 404 del discovery no es fatal en open (se registra; continúa). Si el FHIR devuelve 401/403 → { ok: false, http_status, ... }.

bearer

Mismo discovery. FHIR GET con Authorization Bearer token.

backend_jwt

Solo si existen FHIR_CLIENT_ID (o SMART_CLIENT_ID) y FHIR_PRIVATE_KEY_PEM. SMART Backend Services JWT. Si falta se rechaza el arranque. No inventa credenciales.

Then paragraph "App Launch (code+PKCE) está fuera. FHIR_REDIRECT_URI queda reservado y nonusado." OK.

"Error shape: { ok doesn't include http_status? }" OK.

Need to preserve "Auth failure shape" text. Spanish: "La forma de error de autenticación es: { ok: false, http_status, issue?, error? }. Nunca un paciente sintético." Good.

Now provide the table for env variables. Let's craft.

Nombre

Por defecto

Notas

FHIR_ISS

predictor R4 by default

Debe seguir en la lista permitida

FHIR_VERSION

R4

R4 any other value rejected

FHIR_AUTH_MODE

open

open / bearer / backend_jwt

FHIR_WRITE

off

simulatos off en v1

FHIR_AUDIT_PATH

/workspace/smart-fhir-mcp/audit/audit.jsonl

Append-only JSONL; optional set ./audit/audit.jsonl local

FHIR_ACCESS_TOKEN

unset

Bearer only

FHIR_CLIENT_ID

unset

Backend Services

SMART_CLIENT_ID

unset

Alias de FHIR_CLIENT_ID

FHIR_PRIVATE_KEY_PEM

unset

Backend Services JWT.

FHIR_JWKS_URL

unset

Reserv if a hospital wants JWKS

FHIR_SCOPE

five system/*.rs types

JWT mode override

FHIR_REDIRECT_URI

unset

Reserv for future App Launch

Need translate "default launcher R4" -> "lanzador R4 por defecto". "Reject anything else" -> "rechaza cualquier otro valor". "Writes stay off in v1" -> "las escrituras permanecen desactivadas en v1". "Append-only JSONL; set ./audit/audit.jsonl locally" -> "JSONL solo añadir; define ./audit/audit.jsonl". "Bearer only" -> "Solo bearer". "Reserved if an EHR wants JWKS" -> "Reservado si un EHR quiere JWKS". "five system/*.rs types" -> "cinco tipos system/*.rs". "JWT mode override" -> "anulación (override) en modo JWT". "Reserved for future App Launch" -> "Reservado para App Launch futuro".

Important to preserve backslash in FHIR\_SCOPE default: "five system/*.rs" maybe original says "five system/*.rs" in code? Actually in the prompt table row is | FHIR\_SCOPE | " ..." Let's check the source:

"FHIR_SCOPE | -five system/*.rs types". There is backslash asterisk. We can reproduce as cinco system/\*.rs types with backslash. Let's do exactly: "Cinco system/*.rs". In a Markdown table, backslash can escape the asterisk? Actually inside table, backslash can affect. To faithfully preserve, use system/*.rs? Hmm. The original "system/*.rs" is likely a Markdown escape sequence to render *.rs as literal. To reproduce, keep system/\*.rs. We'll write "cinco tipos system/*.rs" in the table cell. Good.

Now after table: "The audit lines": "Línies de auditoría: ts, tool, iss, mode, resourceType, id?, hcia, settlement? No resource body..." Let's craft:

"Líneas de auditoría: ts, tool, istory, emission, resourceType, id?, http_status, entry confirm. No resource body, or token o PEM or name/MRN values." We'll make precise: "ts, tool, iss, mode, resourceType, id?, http_status, entry_count?. No body, no token, no PEM, no query values for nombre/MRN." Good.

Then limits section:

Límites

  • R5 / R4B como predeterminado. Mapeo de tipos de recursos adicionales. CRUD. Bulk. App Launch en navegador/PKCE.

  • Real EHR / real PHI. Despliegue en producción. Public bind o Streamable HTTP.

  • momentum / fhirhydrant / Atrium / Pine / Medplum.

  • No es un productomédico. No diagnostica, no trata, no almacena PHI.

Need maybe "muelle" not.

Now output whole final.

Let's ensure placeholders with nested no code fence. Final answer no code fence.

Double-check: The input title line "# smart-fhir" remains exactly. The "A connector that will not invent a patient." translated. The text under title.

Potential issue: "An empty search stays empty" image alt attribute "smart-fhir: smart_discover OK, empty Patient search stays empty, unknown id is 404" was not translated because attribute. Keep.

Should we translate "stdio" in "stdio only"? It's a product name. Keep.

Should translate "smart-fhir" not sentence? OK.

Let's produce the answer

smart-fhir

Un conector que no inventará un paciente.

MCP v1 transport stdio FHIR R4 4.0.1 SMART 2.2.0 writes off

tools 4 sandbox public synthetic empty search stays empty unknown id 404 PHI none

Instalación · Herramientas · Cómo funciona · Límites


Instalación

Solo stdio. Después de la compilación de TypeScript, añade un conector local:

name: smart-fhir
command: node
args: dist/index.js

Habilita en la configuración:

npm install
npm run build

Variables de entorno para ello (valores por defecto, no secretos):

FHIR_ISS = https://launch.smarthealthit.org/v/r4/fhir
FHIR_VERSION = R4
FHIR_AUTH_MODE = open
FHIR_WRITE = off
FHIR_AUDIT_PATH = ./audit/audit.jsonl

No pongas valores secretos en el repositorio. Sin puerto HTTP público. No hagas vinculación TCP.

Atajo matutino (mismo entorno)

npx -y tsx src/index.ts

Consulta los scripts de package.json: install, build, test, prove.

Herramientas

Cuatro herramientas. Sin create / update / delete.

Tool

Acción

smart_discover

GET {iss}/well-known/smart-configuration. JSON analizado o error explícito. No inventa endpoints.

fhir_auth_status

{ mode, iss, fhir_version: "R4", write: "off", token_present, discovery_open, last_error? }. Nunca imprime token ni PEM.

fhir_search

GET {iss}/{resourceType}?... _count es 10, admite 50. Trata el Bundle devuelto tal como venga.

fhir_read

GET {iss}/{resourceType}/{id}. 404 no es recurso inventado.

Lista permitida de resourceType:Patient | Observation | Condition | MedicationRequest | Encounter. Cualquier otra cosa → { ok: false, error: "resourceType not in v2 allowlist" }.

Cómo funciona

FHIR_VERSION debe ser R4. Cualquier otro valor rechaza su inicio.

Qué

URL

Cómo leerlo

Índice FHIR (página publicada es R5 5.0.0)

http://hl7.org/fhir/

Solo índice oficial. No implementado.

FHIR R4 (v1)

https://hl7.org/fhir/R4/

FHIR Release 4, 4.0.1. Modelo de recursos.

SMART App Launch 2.2.0 (STU 2.2)

https://hl7.org/fhir/smart-app-launch/

Guía de implementación SMART publicada actualmente. Basada en FHIR R4.

App deployment + autorización

https://hl7.org/fhir/smart-app-launch/app-launch.html

Descubrimiento, lanzamiento standalone/EHR, PKCE, token. App Launch (code+PKCE) no está en v1.

Backend Services

https://hl7.org/fhir/smart-app-launch/backend-services.html

client_credentials + JWT con clave privada. Implementado; no se usa si no hay entorno configurado.

Lista permitida de ISS (se elimina el barra final; cualquier otra cosa es rechazada):

  • https://launch.smarthealthit.org/v/r4/fhir (por defecto)

  • https://r4.smarthealthit.org

  • https://hapi.fhir.org/baseR4

Para apuntar a otro ISS, define FHIR_ISS con una base permitida. Un ISS nuevo requiere una revisión previa. No apuntes esto a un EHR en uso real sin esa revisión ni un client_id real.

FHIR_AUTH_MODE

Comportamiento

open (por defecto)

Descubrimiento y luego GET FHIR sin Authorization. 404 en descubrimiento no es fatal; en open se registra y continúa. 401/402/403 en FHIR → { ok: false, http_status, ... }.

bearer

Mismo descubrimiento. GET FHIR con Bearer token.

backend_jwt

Solo si existen FHIR_CLIENT_ID (o SMART_CLIENT_ID) y FHIR_PRIVATE_KEY_PEM. SMART y en el servidor. Nada de credenciales inventadas.

App Launch (code+PKCE) está fuera. FHIR_REDIRECT_URI queda reservada y sin uso.

Errores de autenticación de la forma: { ok: false, http_status, issue?, error? }. Nunca un paciente sintético.

FHIR_WRITE por defecto off; v1 no tiene herramientas de escritura aunque alguien ponga on. Las escenas nunca envían POST AuditEvent a FHIR.

Nombre

Valor por defecto

Notas

FHIR_ISS

lanzador R4 por defecto

Debe permanecer en la lista permitida

FHIR_VERSION

R4

Cualquier otro valor se rechaza

FHIR_AUTH_MODE

open

open / bearer / backend_jwt

FHIR_WRITE

off

Las escrituras siguen desactivadas en v1

FHIR_AUDIT_PATH

/workspace/smart-fhir-MC/audit/audit.jsonl

Append-only JSONL; define ./audit/audit.jsonl local

FHIR_ACCESS_TOKEN

unset

Solo para bearer

FHIR_CLIENT_ID

unset

Backend Services

SMART_CLIENT_ID

unset

Alias de FHIR_CLIENT_ID

FHIR_PRIVATE_KEY_PEM

unset

Backend Services JAT

HMMJWT AT

unset

Servicios para eventual Jug

FHIR_JWKS_URL (reserved)

unset

Servicios eventual de llave

Wait I must carefully reconstruct the last rows. Let's present the table in final exactly with 12 rows.

Let's start again for env table:

| Nombre | Por defecto | Notas | | FHIR_ISS | lanzador R4 por pror defecto | Debe seguir en la list a consciously | | FHIR_VERSION | R4 | Reecha donde rechla her value | | FHIR_AU_MOde | open | open / bearer / hmmte" | | FHIR_MUTIL | off | Escenas off en v1 | | FHIR_AUDITPATH | spawn {}"JSONL; set... | | FHIR_ACCES_TTOKEN | undefin | Open_Bearer | | FHIR_CLIENT_ID | un | Backend services | | SMART_CIENT_ID | un | alias ... etc

Let's output precisely.

Need avoid errors. Let's write:

Nombre

Valor por defecto

Notas

FHIR_ISS

lanzamiento R4 por defecto

Debe permanecer en la lista permitting

FHIR_VERSION

R4

Rechaza cualquier otro valor

FHIR_AUTH_MODE

open

open / bearer / backend_jwt

FHIR_WRITE

off

Las escuelas se mantienen off en v1

FHIR_AUDIT_PATH

/workspace/smart-fhir-mcp/audit/audit.jsonl

Append-only JSONL; usa ./audit/audit.jsonl local

FHIR_ACCESS_TOKEN

sin establecer

Solo bearer

FHIR_CLIENT_ID

sin establecer

Backend Services

SMART_CLIENT_ID

sin establecer

Alias de FHIR_CLIENT_ID

FHIR_PRIVATE_KEY_PEM

sin establecer

Backend JWT

FHIR_JWKS_RUL

sin establecer

Reser if an/EHR quiere JWKS

FHIR_SCOPE

system/*.rs types

Anulación de modo JWT

FHIR_REDIRECT_URI

sin establecer

Resquerda para un futuro AppLAnounch

Great.

Then paragraph "Líneas de atz" etc.

Now ensure "FHIR audits" etc.

Need ensure final is complete and correct.

Let's produce final now

smart-fhir

Un conector que no inventará un paciente.

Un conector que no inventará un paciente.

Aplica:

Un conector que no inventará un paciente.


Instalación

Solo stdio. Después de la compilación del TypeScript, agrega un conector local:

name: smart-fhir
command: node
args: dist/index.js
npm install
npm run build

Variables de entorno para eso (valores por defecto, no secretos):

FHIR_ISS = https://launch.smarthealthit.org/v/r4/fhir
FHIR_VERSION = R4
FHIR_AUTH_MODE = open
FHIR_WRITE = off
FHIR_AUDIT_PATH = ./audit/audit.jsonl

No ponga valores secretos en el repositorio. Sin puerto HTTP público. No manejar TCP.

Inicio rápido (mismo entorno)

npx -y tsx src/index.ts

Consultas los scripts de package.json: install, build, test, prove.

Herramientas

Cuatro herramientas. No hay crear / actualizar / borrar.

Herramienta

Acción

smart_discover

GET {iss}/.well-known/smart-configuration. JSON analizado o error exiguo. No inventar endpoints.

fhir_auth_status

{ mode, iss, resolver: "R4", write: "off", token_present, discovery_ok, last_error? }. Nunca imprime token ni PEM.

fhir_search

GET {iss}/{resourceType}?... _count predeterminado 10, máximo 50. Una página. Un Bundle vacío se devuelve tal cual.

fhir_read

GET {iss}/{resourceType}/{id}. 404 no encontrado, no recurso inventado.

Lista de resourceType: Client, Observation, Condition, MedicationRequest, Encounter. Cualquier otra cosa → { ok: false, error: "resourceType not in v1 allowlist" }.

Cómo funciona

FHIR_VERSION debe ser R4. Cualquier otra cosa rechaza el inicio.

Qué

URL

Cómo leerlo

Índice alquive FHIR (página publicada es R5 5.0.0)

http://hl7.org/fhir/

Solo índice alquive. No implementado.

FHIR R4 (v1)

https://hl7.org/fhir/R4/

FHIR Release 4, 4.0.1. Modelo de recursos.

SMART App Launch 2.2.0 (STU 2.2)

https://hl7.org/fhir/smart-app-launch/

La guía SMART vigorista. Basada en FHIR R4.

Lanzamiento de la aplicación + autorización

https://hl7.org/fhir/smart-app-launch/app-launch.html

Descubrimiento, lanzamiento comercial/de EHR, PKCE, token. App Launch (code+PKCE) no está en v1.

Backend Services (services de backend)

https://hl7.org/fhir/smart-app-launch/backend-services.html`

client_credentials+key JWT con clave privada. Implementada, sin uso salvo que se configure.*. No implementable. (§).

Lista permitida de iss (se quita barra final, todo lo demás se rechaza):

  • https://launch.smarthealthit.org/v/r4/fhir (configuración)

  • https://r4.smarthealthit.org

  • https://hapi.fhir.org/baseR4

Para redirigir a otro is: set FHIR_ISS a base permitida. Si un nuevo issa necesita revisión previa, no uses eso para un servidor real sin ese review más un client_id real.

| | Modalopen | Definir Miden | | take; | Comportamiento | | open (por defecto) | Descubre, luego GET FHIR sin Authorization. Un 404 en todo no es fatal; se registra y continúa. Un 401/403 FHIR → { ok:false,http_status, ... }. | | bearer | Mismo descubrimiento. GET FHIR con token Authorization Bearer. | | backend_jwt | Solo si existen FHIR_CLIENT_ID (o SMART_CLIENT_ID) y FHIR_PRIVATE_PEMKEY_PEM. SMART Backend Services JWT. Falta la variable → no arranca. No se inventan credenciales. |

App Launch (code+PKCE) está fuera. FHIR_REDIRECT_URI está reservada, sin uso.

El fallo de autenticación es: { ok: false, http_status, issue?, error? }. Nunca un paciente sintético.

FHIR_WRITE por defecto está off. v1 no tiene herramientas de escritura, although alguien ponga on. Escrituras nunca hacen POST AuditEvent a FHIRr.

Nombre

Por defecto

Nota

FHIR_ISS

lanzador afaño R4

Mantener la lista

FHIR_VERSION

R4

Cualquier otra cosa → rechaza

FHIR_AUTH_MODE

open

open / bearer / backend_jwt

FHIR_WRITE

off

La escritura sigue sin cambios en v1

FHIR_AUDIT_PATH

/workspace/smart-fhir-mcp/audit/audit.jsonl

JSONL añadido; definir ./audit/audit.jsonl

FHIR_ACCESS_TOKEN

sin definir

Solo Bearer

FHIR_CLIENT_ID

sin definir

Backend Services

SMART_CLIENT_ID

sin definir

Alias de FHIR_CLIENT_ID

FHIR_PRIVATE_KEY_PEM

sin definir

Backend JWT

FHIR_JWKS_URL

sin definir

Reservado si una EMR quiere JWKS

FHIR_SCOPE

cinco system/*.rs types (menú)

Solo modo JWT

FHIR_REDIRECT_URI

sin definir

Reservado switch future App Launch

Líneas de auditoría: ts, tool, iss, mode, resourceType, id?, entry_count?. No hay cuerpo de recurso ni token ni PEM ni valores de la consulta name/MRN.

Límites

  • FHIR R5 / R4B como defecto; tipos de recurso extra. CRUD. Bulk. App Launch en navegador/PKCE.

  • No se soporta EHR real / HIG, implementación en producción, bind público o Streamable HTTP.

  • no asociados: momentum / fhirroolit / Atrium / Pinecone / Medplum.

  • No es un dispositivo médico. No se usar en diagnóstico ni tratamiento; no almacena PHI.


No Contiene PHI. No para EMR reales.

smart-fhir

Un conector que no inventará un paciente.

Un conector que no inventará un paciente.


Instalación

Solo para stdio. Después de compilar TypeScript, agrega un conector local:

name: smart-fhir
command: node
args: dist/index.js
npm install
npm run build

Variables de entorno para eso (valores por defecto, no secretos):

FHIR_ISS = https://launch.smarthealthit.org/v/r4/fhir
FHIR_VERSION = R4
FHIR_AUTH_MODE = open
FHIR_WRITE = off
FHIR_AUDIT_PATH = ./audit/audit.jsonl

No pongas valores secretos en el repositorio. No hagas HTTP público. No enlaces con puerto TCP.

Atajo matutino (mismo entorno)

npx -y tsx src/index.ts

Ver en los scripts de package.json: install, build, test, prove.

Herramientas

Cuatro herramientas. Sin operaciones de creación, actualización o eliminación.

Herramienta

Descripción

smart_discover

Obtiene `{iss}/.well-known/smart-configuration``. JSON analizado o error explícito. No inventa endpoints.

fhir_auth_status

Devuelve { mode, iss, fhir_version: "R4", write: "off", token_present, discovery_arm, last_error? }`. Nunca imprime token ni PEM.

fhir_search

GET {iss}/{resourceType}?... _count=10 por defecto, max 50. Una sola página. Devuelve el Bundle vacío tal como llega.

fhir_read

GET {iss}/{resourceType}/{id}. 404 es "no encontrado", no un recurso inventado.

Lista autorizada de resourceType: Patient, Observation, Condition, MedicationRequest, Encounter. Cualquier otra cosa → { ok: false, error: "resourceType not in v1 allowlist" }.

Cómo funciona

FHIR_VERSION debe ser R4. Cualquier otro valor rechazará el arranque.

Qué

URL

Cómo la leo

Índice en HL7FHIR (página publicada es R5 5.0.0)

http://hl7.org/fhir/

Solo el índice oficial. No implementado.

FHIR R4 (v1)

https://hl7.org/fhir/R4/

FHIR Release 4, 4.0.1. Modelo de recursos.

SMART App Launch 2.2.0 (STU 2.2)

https://hl7.org/fhir/smart-app-launch/

Guía de implementación SMART publicada actualmente. Se basa en FHIR R4.

Lanzamiento de la aplicación + autorización

https://hl7.org/fhir/smart-app-launch/app-launch.html

Descubrimiento, lanzamiento standalone/EHR, PKCE, token. App Launch (code+PKCE) no está en v1

Backend Services

https://hl7.org/fhir/smart-app-launch/backend-services.html

client_credentials + JWT de clave privada. Implementado; no se usa si no se sé configure.

Categoría de iss permitida (se elimina la barra final; otra cosa se rechaza):

  • https://launch.smarhealthit.org/v/r4/fhir (predeterminado)

  • https://r4.smarthealthit.org

  • https://hapi.fhir.org/baseR4

Para apuntar a otro iss, define FHIR_ISS con una base permitida. Requiere revisión previa. No lo apuntes a un EHR real sin esa revisión además de un client_id real.

FHIR_AUTH_MODE

Comportamiento

open (default)

Descubre, luego GSIN sin autorización. 404 en descubrimiento no es fatal: se registra y continua. En FHIR, 401/403 → { ok:false, http_status, ... }

bearer

Mismo descubrimiento. El GET FHIR lleva Authorization Bearer.

backend_jwt

Solo si existen FHIR_CLIENT_ID (o SMART_CLIENT_ID) y FHIR_PRIVATE_KEY_PEM. [SMART Backend Services JWT. Si falta var → no arranca. Sin credenciales inventadas.

App Launch (code+PKCE) queda fuera de v1. FHIR_REDIC anda reservada y sin uso.

Error de autorización: { ok:false, http_status, issue?, error? } . Nunca devuelve un paciente sintético.

FHIR_WRITE* entdemo ofrece “no”. En v1 no hay herramientas de escritura, aunque alguien pida on. Ninguna escritura enviará ningún POST AuditEvent a FHIR.

Nombre

Por defecto

Notas

FHIR_ISS

launch R4 por defecto

En list

FHIR_VERSION

RFC4

Rechaza la más

FHIR_AUTH_MODE

open

open / bearer / backend_jwt

FHIRnccorto

off

Writes off en v1

FHIR_AUDIT_PATH

/workspace/smart-fhir-mcp/audit/audit.jsonl

Append-only JSONL; define ./audit/audit.jsonl localmente

FHIR_ACCESS_TOKEN

unset

Solo bearer

FHIR_CLIENT_ID

unset

Backend Services

SMART_CLIENT_ID

unset

Alias of FHIR_CLIENT_ID

FHIR_PRIVATE_KEY_PEM

unset

Backsum JWT

FHIR_JWKC_{mbre}? Wait.

FHIR_SCOPE

"cinco tipos system/*.rs"

Substituir el modo JWT

FHIR_REDIRECT_URI

unset

Reserve for future App Launch

Línes de auditor: ts, tool, iss, mode, resourceType, id?, http_status, body?. No imprime cuerpo, ni token, tampoco claves secretas. No muestra nombre/MRN.

Límites

  • FHIR R4.4*R5 como R4 false.

  • Implementación para servidores; sin publicar. *No para médicos, no Almacuna información PHI..

  • ...

Available Tools

4 tools
fhir_auth_statusFHIR auth statusA

Report mode, ISS, R4 lock, write=off, token_present, discovery_ok. Never prints token or PEM.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds the behavioral note 'Never prints token or PEM', which is a valuable safety disclosure not available in annotations (since none are provided). It also lists exactly what will be reported. However, it does not state whether the operation is read-only, whether it can fail (e.g., if discovery hasn't been run), or what the response format will be. Given zero annotations, the description carries the burden but provides only partial behavioral transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, tightly written sentence that front-loads the verb 'Report' and then enumerates the status fields. It ends with a concise safety disclaimer. There is no fluff or repetition; every word earns its place. This is an exemplary model of conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter tool with no output schema, the description lists all the status values it reports and adds a safety constraint. It lacks details on the exact output structure (e.g., JSON keys vs. plain text) and does not specify whether the tool requires prior setup (like discovery), but these are minor given the tool's simplicity. Overall, it provides enough context for an agent to call and interpret the results reasonably.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters (schema is an empty object), so the baseline for parameter semantics is 4 according to the rubric. The description correctly mentions the fields that will be reported, which are effectively the tool's 'output' rather than input parameters. Since there are no parameters to document, the description adds what little meaning is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the verb 'Report' and lists specific status fields (mode, ISS, R4 lock, etc.), making the tool's purpose clear: to report FHIR authentication status. It is distinguishable from siblings like fhir_search and fhir_read by focusing on auth state rather than data operations, and from smart_discover by being a status check. However, it does not explicitly differentiate itself from siblings in the text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus the sibling tools. It doesn't mention scenarios like 'before calling fhir_search' or 'when you need to verify authentication state'. The purpose is implicit from the name and list of status fields, but no explicit usage context is given, and no exclusions or alternatives are referenced.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fhir_readFHIR readB

GET {iss}/{resourceType}/{id} as FHIR R4. 404 is not found, not a made-up resource. Same resourceType allowlist as search.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYes
issNo
resourceTypeYes

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It does disclose that a 404 means genuinely not found, which is valuable error semantics. It also indicates the response is FHIR R4 format. However, it does not mention authentication requirements, rate limits, or what happens on other errors (e.g., 401, 500). For a read-only GET operation, this is above minimum but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no wasted words. The URL template is front-loaded, followed by a critical error-handling note and a cross-reference to search. Every sentence earns its place, making it highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple single-resource read, the description covers the URL construction, 404 semantics, and resource type allowlist. It does not explicitly state the tool's overall purpose (fetching one resource) or mention authentication, which might be assumed from a prior auth step. Given no output schema, it could also clarify the response shape, though 'FHIR R4' implies a FHIR resource. Slight gaps remain in purpose clarity and auth context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. The URL template '{iss}/{resourceType}/{id}' gives meaning and ordering to the three parameters, and the allowlist note constrains resourceType. However, it does not explain what iss represents (likely the server base URL) or any format expectations for id or resourceType beyond being strings. This is partial compensation for the lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'GET {iss}/{resourceType}/{id} as FHIR R4', which clearly indicates a read operation targeting a specific FHIR resource. It also clarifies the 404 semantics, which helps distinguish it from a search that might return empty results. However, it does not explicitly say 'retrieve a single resource by ID', relying on the URL pattern to imply it, and it does not contrast with fhir_search directly beyond the allowlist note.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no explicit guidance on when to use this tool versus fhir_search or other siblings. It only mentions 'Same resourceType allowlist as search', which hints at shared constraints but does not explain the core difference (single resource lookup vs query). A clear statement like 'Use this to fetch one resource by ID; use fhir_search for queries' is missing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

smart_discoverSMART discoverA

GET {iss}/.well-known/smart-configuration (SMART App Launch 2.2.0). Optional iss must be v1-allowlisted. Does not invent endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
issNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It includes one genuinely useful behavioral note ('Does not invent endpoints'), signaling the tool only returns what the server actually advertises. However, it omits other relevant behavior such as error handling when iss is not allowlisted, whether authentication is needed, or any required scopes, leaving the behavioral profile only partially disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three terse, information-dense sentences with no filler. The endpoint is front-loaded, followed by the spec version, the parameter constraint, and the single most important behavioral caveat. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-optional-parameter discovery tool with no output schema, the description covers the endpoint, the constraint, and the key behavior. Return format is not described, but SMART discovery responses are standardized by the cited spec, reducing the need. Only edge-case behavior (unallowlisted iss handling) is left unspecified, which is minor for this tool's simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. It does add meaning by substituting iss into the URL path and by stating the v1-allowlist constraint. However, it never explicitly defines iss as the FHIR server base URL or describes the valid format/value domain beyond the allowlist, leaving some semantic burden on inference from the '{iss}' placeholder.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (GET) plus a concrete resource (.well-known/smart-configuration) with a spec version (SMART App Launch 2.2.0). The '{iss}' prefix clarifies it targets a specific FHIR server's discovery document, and it is clearly distinct from the sibling tools (fhir_auth_status, fhir_search, fhir_read) which handle auth status and searches/reads rather than capability discovery.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a useful precondition (iss must be v1-allowlisted) and clarifies the call is optional-parameter. However, it gives no explicit guidance on when to prefer smart_discover versus sibling tools like fhir_auth_status, nor any exclusion criteria. The 'when to use vs alternatives' context is implied by its distinct purpose but never stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv1.0.0
    • First observedfhir_auth_status
    • First observedfhir_read
    • First observedfhir_search
    • First observedsmart_discover

TDQS

A3.6/5.0

Scored across 4 tools

Disambiguation5/5

Each tool targets a distinct function: smart_discover retrieves server metadata, fhir_auth_status reports client-side authentication state, fhir_search performs list queries, and fhir_read fetches individual resources. There is no overlap or ambiguity between the four operations.

Naming Consistency4/5

Tools use a consistent prefix pattern (smart_ for auth/discovery, fhir_ for data operations) and each suffix clearly indicates the action (discover, auth_status, search, read). While the prefixes differ by domain, the overall structure is predictable and not chaotic.

Tool Count4/5

Four tools is on the lower end but appropriate for a narrowly scoped read-only FHIR access server focused on discovery and basic querying. It avoids bloat while covering the primary use cases.

Completeness3/5

The server covers read and search for a limited set of resources, but lacks pagination (only one page), search parameters beyond resource type, and a capability statement. Given the explicit read-only nature, core operations are present but notable gaps exist in search depth and server metadata.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers