About io.github.CSOAI-ORG/hipaa-compliance-mcp
io.github.CSOAI-ORG/hipaa-compliance-mcp is an MCP server in the Healthcare category: hIPAA healthcare compliance assessment tools for AI agents. Capabilities: assess safeguards,...
Install
uvx hipaa-compliance-mcppip install hipaa-compliance-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (7)
assess_safeguardsAssess HIPAA administrative, physical, and technical safeguards
Parameters not published.
breach_notificationGenerate breach notification assessment and timeline
Parameters not published.
check_phi_handlingCheck PHI handling procedures for compliance
Parameters not published.
generate_baaGenerate a Business Associate Agreement
Parameters not published.
hipaa_risk_assessmentFull HIPAA security risk assessment
Parameters not published.
minimum_necessaryEvaluate minimum necessary policy compliance
Parameters not published.
training_gapIdentify workforce training gaps
Parameters not published.
Ask AI
Ask AI about io.github.CSOAI-ORG/hipaa-compliance-mcp
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
HIPAA Compliance MCP
Automate HIPAA healthcare compliance for AI systems handling PHI.
Administrative safeguards · Physical safeguards · Technical safeguards · BAA templates · Breach notification · Minimum necessary rule
Penalties: up to $2.1M per violation category per year.
Why This Exists
Healthcare AI is the fastest-growing sector for ML deployment — and the most regulated. Every AI system touching Protected Health Information (PHI) must comply with the HIPAA Security Rule, Privacy Rule, and Breach Notification Rule. Business Associate Agreements (BAAs) are required for every vendor in the chain.
This MCP assesses your AI system against all three HIPAA safeguard categories, checks PHI handling workflows, generates BAA templates, and verifies breach notification readiness.
Install
pip install hipaa-compliance-mcp
Tools
| Tool | Safeguard | What it does |
|---|---|---|
assess_administrative |
Administrative | Security management, workforce training, contingency plans |
assess_physical |
Physical | Facility access, workstation security, device controls |
assess_technical |
Technical | Access controls, audit controls, transmission security |
check_phi_handling |
Privacy Rule | PHI use/disclosure, minimum necessary, de-identification |
generate_baa |
— | Business Associate Agreement template |
assess_breach_readiness |
Breach Rule | 60-day notification, risk assessment, documentation |
run_full_audit |
All | Complete HIPAA readiness assessment |
sign_attestation |
— | HMAC-SHA256 signed compliance certificate |
Pricing
| Tier | Price | What you get |
|---|---|---|
| Free | £0 | 10 calls/day |
| Pro | £199/mo | Unlimited + HMAC-signed attestations |
| Enterprise | £1,499/mo | Multi-tenant + co-branded reports |
Attestation API
POST https://meok-attestation-api.vercel.app/sign
GET https://meok-attestation-api.vercel.app/verify/{cert_id}
Links
- Website: meok.ai
- All MCP servers: meok.ai/labs/mcp/servers
- Enterprise support: nicholas@csoai.org
License
MIT
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.