// SCAN REPORT

FHIR Careplan

17 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

1 can modify or destroy data

16 read-only

17 tools total

Community server · catalogue entry verified 29/06/2026

How to control FHIR Careplan ↓

TOOL MAP

What FHIR Careplan exposes to your agents

Read (16) Write / Execute (1) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous FHIR Careplan tools

Write · Medium switch_server Switching the active FHIR server changes the configuration/state of the MCP server, directing all subsequent queries and operations to a different backend.

1 of FHIR Careplan's 17 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control FHIR Careplan

PolicyLayer is an MCP gateway — it sits between your AI agents and FHIR Careplan, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "switch_server": {
    "limits": [
      {
        "counter": "switch_server_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "extract_clinical_keywords": {
    "limits": [
      {
        "counter": "extract_clinical_keywords_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register FHIR Careplan — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FHIR CAREPLAN →

Instant setup, no code required.

FULL CATALOGUE

All 17 FHIR Careplan tools

WRITE 1 tools

Write switch_server Switch to a different FHIR server

READ 16 tools

Read extract_clinical_keywords Extract clinical keywords from text Read find_patient Search for a patient Read find_similar_patients_simple Find similar patients using age, gender, and condition codes from map_to_fhir_codes_fast output Read get_comprehensive_patient_info Get comprehensive patient information from a single FHIR server Read get_observations_by_category Get patient observations by specific FHIR category (vital-signs, laboratory, imaging, exam, procedure, survey, Read get_patient_allergies Get patient's allergies Read get_patient_conditions Get patient's conditions Read get_patient_encounters Get patient's encounters Read get_patient_medications Get patient's medications Read get_patient_observations Get patient's observations Read get_patient_procedures Get patient's procedures Read get_vital_signs Get patient's vital signs Read list_available_servers List all available FHIR servers Read map_to_fhir_codes_fast Map clinical terms to FHIR codes using actual server data with fuzzy matching (fast version with clean output) Read ping Ping the MCP server to check if it is alive Read test_server_connectivity Test connectivity to a FHIR server

FAQ

Questions about FHIR Careplan

How do I prevent bulk modifications through FHIR Careplan? +

The FHIR Careplan server has 1 write tools including switch_server. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach FHIR Careplan.

How many tools does the FHIR Careplan MCP server expose? +

17 tools across 2 categories: Read, Write. 16 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on FHIR Careplan? +

Register the FHIR Careplan MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every FHIR Careplan tool call.

Deterministic rules across all 17 FHIR Careplan tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FHIR CAREPLAN →

Instant setup, no code required.

17 FHIR Careplan tools catalogued and risk-classified — across an index of 43,000+ MCP servers.