About hipaa-compliance-mcp
hipaa-compliance-mcp is an MCP server for healthcare organizations and AI teams assessing HIPAA safeguards and PHI procedures. It also supports BAA drafting, breach notification assessment, and minimum-necessary policy checks.
Key features
- 01Assess administrative, physical, and technical safeguards
- 02Review PHI handling procedures
- 03Generate Business Associate Agreements
- 04Assess breach notification timelines
- 05Check minimum-necessary policies
- 06Identify workforce training gaps
Use cases
- 01Review an organization's HIPAA safeguards
- 02Prepare a BAA for a business relationship
- 03Assess response requirements after a breach
MCP support
Exposes HIPAA assessment and documentation tools to MCP clients, including safeguard, PHI handling, BAA, breach notification, and policy checks.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project README
Hipaa Compliance MCP
HIPAA healthcare compliance MCP — Administrative, Physical, Technical safeguards assessment, PHI ...
HIPAA healthcare compliance MCP — Administrative, Physical, Technical safeguards assessment, PHI handling, BAA templates, breach notification readiness.
HIPAA Compliance MCP
HIPAA Healthcare Compliance Assessment — Safeguards, PHI Handling, BAA, Breach Notification
🚀 Quick Start
# Install via pip
pip install hipaa_compliance_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install hipaa-compliance-mcp --client claude
✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- Pro: $99/mo — Full MCP suite + EU AI Act tracking
- Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
📜 License
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
Comprehensive HIPAA compliance tools for healthcare AI systems and covered entities. Assess administrative, physical, and technical safeguards. Generate Business Associate Agreements (BAAs), handle breach notifications, and enforce minimum necessary policies.Tools
| Tool | Description | Parameters |
|---|---|---|
assess_safeguards | Assess HIPAA administrative, physical, and technical safeguards | safeguard_type, current_controls |
check_phi_handling | Check PHI handling procedures for compliance | procedures, data_types, access_patterns |
generate_baa | Generate a Business Associate Agreement | covered_entity, business_associate, services |
breach_notification | Generate breach notification assessment and timeline | breach_type, individuals_affected, date_discovered |
minimum_necessary | Evaluate minimum necessary policy compliance | policies, access_roles, data_elements |
hipaa_risk_assessment | Full HIPAA security risk assessment | current_state, organization_type |
training_gap | Identify workforce training gaps | training_records, roles |
Installation
pip install mcp
Claude Desktop / Cursor / VS Code / Windsurf
{
"mcpServers": {
"hipaa-compliance": {
"command": "python",
"args": ["path/to/server.py"]
}
}
}
Usage Examples
Assess safeguards
{
"safeguard_type": "technical",
"current_controls": ["encryption at rest", "access logs", "no MFA"]
}
Generate BAA
{
"covered_entity": "MedHealth AI Corp",
"business_associate": "CloudDiagnostics Inc",
"services": ["patient data processing", "analytics", "storage"]
}
Pricing
- Free: 10 assessments/day
- Pro: $99/mo — unlimited assessments + BAA generation
- Enterprise: $499/mo — full audit trail + custom policies
Built by MEOK AI Labs | meok.ai
💸 Try MEOK in 30 seconds — instant buy ladder
| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
| Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
| Founder Call | £29 | 30-min 1-on-1 with the founder | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.