HIPAA-oriented MCP server exposing FHIR R4 tools to AI agents. Audit logging with SHA-256 patient id hashing, SMART OAuth/SPIFFE/KMS stubs for the production path.
A production-grade **prototype** of a HIPAA-oriented MCP server that lets an AI agent query medical data through the FHIR R4 API. The goal is to show the intersection of four things that rarely appear in the same repository: - Model Context Protocol (MCP) tool server in TypeScript - HIPAA Technical Safeguards (§164.312)