Hipaa Compliance Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.15Updated Oct 30, 2026

Hipaa Compliance MCP Server by MEOK AI Labs

VerifiedSTDIODesktop onlySecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Local MCP server that helps an assistant run HIPAA compliance assessments: safeguards, PHI handling, BAA drafts, breach notification and risk assessment.

What you can do
  • Assess administrative, physical and technical safeguards against supplied current controls
  • Check PHI handling procedures, data types and access patterns, and evaluate minimum necessary policies
  • Generate Business Associate Agreement drafts and breach notification assessments with timelines
  • Run a full HIPAA security risk assessment and identify workforce training gaps
When to use it
Useful when a healthcare or health-tech team wants an assistant to structure HIPAA readiness work: safeguard reviews, PHI procedure checks, BAA drafting and breach response planning. It produces assessments and templates, not legal advice.
Requirements
Runs locally over stdio as a Python package (hipaa-compliance-mcp) installed with pip; the README also shows a Smithery install and a manual python command entry. No authentication, environment variables or headers are declared.
Before you install
The README advertises paid tiers (Pro $99/mo, Enterprise $499/mo) and links to Stripe purchases, so check whether features are gated. Inputs such as organization names, procedures and breach details may be sensitive; review where they are stored. Outputs are generated templates and assessments, not certified compliance or legal advice.

Installation

In SourceWeft

  1. Open Hipaa Compliance Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 86/100]

Hipaa Compliance MCP

[MEOK AI Labs] [EU AI Act] [License] [PyPI]

HIPAA healthcare compliance MCP — Administrative, Physical, Technical safeguards assessment, PHI ...

HIPAA healthcare compliance MCP — Administrative, Physical, Technical safeguards assessment, PHI handling, BAA templates, breach notification readiness.

HIPAA Compliance MCP

HIPAA Healthcare Compliance Assessment — Safeguards, PHI Handling, BAA, Breach Notification

[MCP] [License]

🚀 Quick Start

bash
# Install via pippip install hipaa_compliance_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install hipaa-compliance-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Comprehensive HIPAA compliance tools for healthcare AI systems and covered entities. Assess administrative, physical, and technical safeguards. Generate Business Associate Agreements (BAAs), handle breach notifications, and enforce minimum necessary policies.

Tools

ToolDescriptionParameters
assess_safeguardsAssess HIPAA administrative, physical, and technical safeguardssafeguard_type, current_controls
check_phi_handlingCheck PHI handling procedures for complianceprocedures, data_types, access_patterns
generate_baaGenerate a Business Associate Agreementcovered_entity, business_associate, services
breach_notificationGenerate breach notification assessment and timelinebreach_type, individuals_affected, date_discovered
minimum_necessaryEvaluate minimum necessary policy compliancepolicies, access_roles, data_elements
hipaa_risk_assessmentFull HIPAA security risk assessmentcurrent_state, organization_type
training_gapIdentify workforce training gapstraining_records, roles

Installation

bash
pip install mcp

Claude Desktop / Cursor / VS Code / Windsurf

json
{  "mcpServers": {    "hipaa-compliance": {      "command": "python",      "args": ["path/to/server.py"]    }  }}

Usage Examples

Assess safeguards

json
{  "safeguard_type": "technical",  "current_controls": ["encryption at rest", "access logs", "no MFA"]}

Generate BAA

json
{  "covered_entity": "MedHealth AI Corp",  "business_associate": "CloudDiagnostics Inc",  "services": ["patient data processing", "analytics", "storage"]}

Pricing

  • Free: 10 assessments/day
  • Pro: $99/mo — unlimited assessments + BAA generation
  • Enterprise: $499/mo — full audit trail + custom policies

Built by MEOK AI Labs | meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Source: README.md at commit 401143d

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.15LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts