HIPAA healthcare compliance assessment tools for AI agents. Capabilities: assess safeguards,...
Hipaa MCP server is a locally run integration for AI assistants that speak the Model Context Protocol. HIPAA healthcare compliance assessment tools for AI agents. Capabilities: assess safeguards,...
HIPAA healthcare compliance MCP — Administrative, Physical, Technical safeguards assessment, PHI handling, BAA templates, breach notification readiness.
Installation goes through your MCP client rather than a global install: point it at @smithery/cli on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Once Hipaa is connected, these are the calls the assistant has available:
assess_safeguards — Assess HIPAA administrative, physical, and technical safeguardscheck_phi_handling — Check PHI handling procedures for compliancegenerate_baa — Generate a Business Associate Agreementbreach_notification — Generate breach notification assessment and timelineminimum_necessary — Evaluate minimum necessary policy compliancehipaa_risk_assessment — Full HIPAA security risk assessmenttraining_gap — Identify workforce training gapsThis sits in the developer tooling group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Hipaa's toolset — assess_safeguards, check_phi_handling, generate_baa and 4 more — is a fair guide to whether it matches your workflow. It is maintained by CSOAI-ORG; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Hipaa's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| assess_safeguards | Assess HIPAA administrative, physical, and technical safeguards |
| check_phi_handling | Check PHI handling procedures for compliance |
| generate_baa | Generate a Business Associate Agreement |
| breach_notification | Generate breach notification assessment and timeline |
| minimum_necessary | Evaluate minimum necessary policy compliance |
| hipaa_risk_assessment | Full HIPAA security risk assessment |
| training_gap | Identify workforce training gaps |
{
"mcpServers": {
"hipaa-compliance": {
"command": "npx",
"args": ["-y", "@smithery/cli"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.