Medplum MCP Server

by medplum Your server? Claim it

answering

Medplum is answering right now. Last checked 11 min ago. Last commit 18 Sep 2026.

Securely access and manage FHIR healthcare data stored in Medplum.

Uptime history 47 days of history

47 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

420 ms

Response time

average over 24h

2682

Stars

last commit 18 Sep 2026

What the code does

We read the source, 19 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted packages/server/src/fhir/operations/utils/cms1500.png.ts:4

  'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAA1IAAARMCAMAAACkg1JQAAAC+lBMVEX//////v735Or25Or+/f3++/z+//7//f3//Pz9+/r25On++fn63d386uvoIyv87u798fH74OD99PTymJr0trf74eLxkJL97/D9+Pj0u7z74+T2v8D4zc799vX89vj4yMn50tPylZf14efviIzoJi3zra7739/ykpXzoaL0sbL1uLn79Pb1ubryj5H51tfyk5X2wMH619j…

Runs an external command packages/agent/src/upgrader.ts:71, packages/cli/src/aws/update-server.ts:88, packages/create-medplum/src/main.ts:111 и ещё 1

      spawnSync(__filename, ['--remove-old-services', '--all']);

Executes code built at runtime packages/core/src/fhirlexer/parse.ts:11, packages/core/src/fhirpath/atoms.ts:34, packages/core/src/fhirpath/functions.ts:98 и ещё 3

  eval(context: AtomContext, input: TypedValue[]): TypedValue[];

Builds a file path from a variable packages/generator/src/docs.ts:425

        const fullPath = path.join(outputFolder, fileName).replaceAll('\\', '/');

Dumps the whole environment packages/server/src/config/loader.ts:176

  for (const [name, value] of Object.entries(process.env)) {

Image runs as root packages/app/Dockerfile:2

# Start off as user root so we have permissions to run APK and chown
USER root

# Copy nginx configuration

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http https://api.medplum.com/mcp/stream

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://api.medplum.com/mcp/stream"
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://api.medplum.com/mcp/stream"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://api.medplum.com/mcp/stream"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://api.medplum.com/mcp/stream"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://api.medplum.com/mcp/stream	streamable-http	needs key	463 ms	11 min ago

Alternatives to Medplum

same job, measured the same way

Red by Big Red Cloud

by bigredcloud

Secure MCP access to Big Red Cloud accounting data, workflows, help and training.

159 tools answering

vault

by meshpop

Secret and credential management MCP — securely store, retrieve, manage API keys and tokens

local only

Mudrex MCP Server

by mudrex

MCP server for Mudrex futures trading enabling AI agents to securely access data and risk tools.

answering

Egnyte Remote MCP Server

by egnyte

Egnyte's remote MCP server for secure AI access, search, upload and file management in your account.

answering

Docusign Navigator

by thisdot-docusign-navigator

Secure Docusign Navigator integration for AI assistants to access and analyze agreement data.

answering

Magic Cloud

by polterguy

Generate secured CRUD APIs over your database, run SQL, manage files, tasks and a headless browser

local only

Ukhsa

by pipeworx-io

UK Health Security Agency (UKHSA) data dashboard MCP — keyless.

34 tools answering

Teno Store

by zoubirabde9a

Shop Algeria's marketplace or manage seller products, orders, and storefronts securely.

answering

Medplum — questions

Answers built from our own checks of this server.

Why is there no tool list for Medplum?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Medplum working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 420 ms. The bar chart above shows every period we have measured.

How do I connect Medplum?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does Medplum need an API key?

Yes. Every time we knock, Medplum answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Medplum?

It answers our handshake in 420 ms on average, which is faster than 35% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Medplum open source?

Yes — it is published under the Apache-2.0 licence, written in TypeScript, 2 682 stars on GitHub and 547 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.