Healthclaw Guardrails MCP Server

by aks129 Your server? Claim it

answering

Healthclaw Guardrails is answering right now. Last checked 2 min ago. Last commit 6 Nov 2026.

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation

Uptime history 91 days of history · worst day 99%

91 days agonow

100.0%

Uptime 24h

89 of 89 checks

—

Tools

hidden behind auth

301 ms

Response time

average over 24h

Stars

last commit 6 Nov 2026

What the code does

We read the source, 3 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a database query by concatenation r6/smbp/demo_history.py:270, careagents/templates/_delete_modal.html:53

        am_s = int(153 - drop + bounce + plateau)

Runs an external command openclaw/bot.py:917, deploy/careagents/imessage_relay.py:133

            result = subprocess.run(

Page executes code built at runtime templates/mcp_apps/wearables.html:172, templates/mcp_apps/care_gaps.html:164

      grid.innerHTML = providers.map(p =>

Sends data to a third-party sink openclaw/bot.py:1190, r6/telegram_push.py:27

    api = f'https://api.telegram.org/bot{BOT_TOKEN}/getUpdates'

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add healthclaw-guardrails --transport http https://mcp-server-production-5112.up.railway.app/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp-server-production-5112.up.railway.app/mcp

~/.codex/config.toml

[mcp_servers.healthclaw-guardrails]
url = "https://mcp-server-production-5112.up.railway.app/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "healthclaw-guardrails": {
      "url": "https://mcp-server-production-5112.up.railway.app/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "healthclaw-guardrails": {
      "type": "http",
      "url": "https://mcp-server-production-5112.up.railway.app/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp-server-production-5112.up.railway.app/mcp	streamable-http	needs key	280 ms	2 min ago

Alternatives to Healthclaw Guardrails

same job, measured the same way

Delego

by delego-dev

Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

157 installs/wk local only

Tracelane MCP

by tracelane

Read-only, tenant-scoped access to Tracelane agent traces and guardrail verdicts

42 installs/wk local only

Grantex

by mishrasanjeev

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

62 installs/wk local only

SourceVault Gateway

by sourcevault

Governed access to private code for coding agents: policy, redaction, audit chain, provenance.

local only

Tenantguard

by rudrendupaul

Scans self-hosted multi-tenant AI-agent platforms for tenant-isolation gaps via an MCP tool.

88 installs/wk local only

Agentpay Sentinel MCP

by rumblingb

Security guardrails for AI agent payments

local only

Agent Audit MCP

by rumblingb

Immutable audit trail for agent-to-agent interactions

local only

LogCarverGuard

by caiderek

Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.

local only

Healthclaw Guardrails — questions

Answers built from our own checks of this server.

Why is there no tool list for Healthclaw Guardrails?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Healthclaw Guardrails working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 89 of 89 checks got a reply (100.0%), average response time 301 ms. The bar chart above shows every period we have measured.

How do I connect Healthclaw Guardrails?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does Healthclaw Guardrails need an API key?

Yes. Every time we knock, Healthclaw Guardrails answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Healthclaw Guardrails?

It answers our handshake in 301 ms on average, which is faster than 46% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Healthclaw Guardrails open source?

The code is open source: it is published under the MIT licence, written in Python, 33 stars on GitHub and 85 open issues. The licence covers the code in the repository, not the hosted service at mcp-server-production-5112.up.railway.app, which runs on its operator's own terms.